Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ngscqhdgErvXG-iVVxQNCQCJLXU.roa
File: ngscqhdgErvXG-iVVxQNCQCJLXU.roa (raw, json)
Hash identifier: 09AYPwoIsTPMDTLNJ7lXjZ8bnqolSOEtKBzcuvG27U4=
Subject key identifier: 9E:0B:1C:AA:17:60:12:BB:D7:1B:E8:95:57:14:0D:09:00:89:2D:75
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C3E4C68B53F0986FF6154216E3B04
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ngscqhdgErvXG-iVVxQNCQCJLXU.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136359
IP address blocks: 103.75.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:4c:68:b5:3f:09:86:ff:61:54:21:6e:3b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e0b1caa176012bbd71be89557140d0900892d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:fd:04:a8:75:68:29:0a:8e:82:c4:6b:3f:
f4:8f:59:f2:14:63:07:d0:c0:7d:8f:91:2d:99:ce:
cf:bf:77:18:e4:62:e6:8f:27:69:6d:30:d7:6b:7c:
53:50:33:d1:fe:74:e6:58:a2:3f:d8:bb:ef:2d:b6:
a6:a2:37:b4:cc:b8:5f:37:b1:0c:3d:f2:51:b5:10:
39:ea:fe:02:46:2b:b2:db:d0:6a:d3:9a:c4:5f:cc:
e7:fe:15:f7:3d:2c:bb:bc:8e:d0:32:2a:49:cb:72:
29:79:99:c5:35:99:08:10:d4:f7:00:6e:70:c5:ec:
a4:9e:0d:aa:e0:4a:ac:8c:64:f5:51:01:6b:77:fa:
fc:e9:13:29:2f:67:40:45:d0:45:35:2c:bf:a0:43:
68:b2:ea:e9:68:76:19:ec:58:69:a5:cd:8a:13:cc:
9b:82:1d:df:67:8a:89:28:14:46:48:8a:64:09:81:
d0:bd:ed:28:79:9e:b2:0d:42:52:fd:d6:74:bf:73:
f5:1e:43:1c:1e:a2:12:1a:e9:44:af:3b:37:b2:1f:
cf:3c:de:48:07:dc:b6:d6:88:f6:94:5a:35:29:c8:
29:44:ea:09:b4:8d:ce:6f:ed:6e:2a:3d:d9:3b:31:
af:2a:05:c8:0e:d0:99:22:33:00:13:e1:5c:ef:1e:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0B:1C:AA:17:60:12:BB:D7:1B:E8:95:57:14:0D:09:00:89:2D:75
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ngscqhdgErvXG-iVVxQNCQCJLXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d1:55:2e:2d:a3:2e:67:47:52:ed:0d:aa:11:fd:bd:23:48:
bb:cb:86:b8:cf:d0:b8:66:6a:c4:53:97:cd:b2:80:85:db:2e:
79:8d:67:10:d1:6d:27:89:1a:40:1d:dd:27:3b:c0:c0:f1:26:
cd:fc:e2:f7:b1:35:e9:bc:8a:77:a2:d6:cf:89:10:fe:3e:45:
97:eb:df:79:2c:46:7e:ce:1f:1b:8f:ca:b6:a5:e1:05:ea:fd:
4d:77:65:89:1d:e4:3a:9b:5e:d9:b5:25:63:38:20:d6:2d:24:
6f:87:a1:66:1e:ba:7a:f1:af:09:49:db:f6:ef:6e:dd:93:8c:
61:a9:c8:e1:54:6a:c6:46:cc:5a:37:c7:8b:61:b5:b6:ba:aa:
0f:04:28:88:9c:7a:95:27:36:d5:4f:a7:36:22:bb:90:ba:ea:
98:b5:de:5a:dd:92:f2:20:90:58:19:54:60:5d:0b:57:a8:1c:
41:e7:8c:ce:3e:72:53:d6:fd:6b:ff:e7:0a:0e:6c:f3:44:26:
d3:aa:8c:c6:06:29:44:6b:99:db:46:99:49:2b:bf:48:fe:0a:
7a:6a:3f:1d:a9:68:80:c2:5b:2d:74:50:52:f7:65:26:0f:5c:
a2:e9:fa:fd:56:b2:de:2e:7d:62:21:26:94:50:e7:d4:44:30:
41:fa:03:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:49 2025 by rpki-client