Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/_r__0zP0dNhXc-NMveUPCr9alvE.roa
File: _r__0zP0dNhXc-NMveUPCr9alvE.roa (raw, json)
Hash identifier: nXmja1SSpoHaj+dyEPdPrVzXdKWzXzKYh0dNkHKdb2w=
Subject key identifier: FE:BF:FF:D3:33:F4:74:D8:57:73:E3:4C:BD:E5:0F:0A:BF:5A:96:F1
Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial: 0194258F43696AF0CCBC58C635695169E770
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/_r__0zP0dNhXc-NMveUPCr9alvE.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214113
IP address blocks: 103.115.182.0/23 maxlen: 23
192.140.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:43:69:6a:f0:cc:bc:58:c6:35:69:51:69:e7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=febfffd333f474d85773e34cbde50f0abf5a96f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:23:35:c5:58:2a:58:8c:ef:a9:0c:6f:46:
a7:91:a6:5f:e1:09:97:97:7b:e8:b5:d7:09:ae:42:
ab:d7:78:87:15:aa:38:40:56:eb:1b:bb:96:cd:30:
1e:0e:32:11:4a:f4:c0:f5:8c:19:1b:67:80:cf:03:
88:1c:00:6f:45:19:25:ac:cd:b8:93:7f:b2:ec:37:
cb:48:71:a6:4c:b5:09:50:b7:fe:8b:1b:39:12:75:
ca:f5:90:e8:e6:5d:21:3a:f4:ed:28:d8:10:75:51:
72:bd:ac:5d:bd:c4:83:c5:c9:ba:ef:91:c8:cd:47:
8d:07:5c:ac:9b:5c:f3:94:38:dd:53:fe:87:1b:5d:
27:9b:7b:16:f0:cb:8e:56:ba:25:58:f9:18:4c:97:
a9:eb:5d:96:ea:82:85:fe:c9:19:69:ae:42:ee:07:
b7:b4:4e:d3:ce:ee:83:2d:a7:e4:50:bc:13:d4:1d:
9a:39:47:c3:6c:bf:05:17:c5:91:a0:46:17:f4:08:
de:94:3b:97:0e:43:e9:4d:e8:08:fd:e2:1c:f7:06:
2a:21:e4:b9:2c:f1:7c:77:4c:3f:86:f1:b2:95:ce:
6b:cf:94:a7:77:17:ec:48:11:dd:63:0c:90:2e:db:
05:e9:db:ac:73:de:e4:77:60:ed:ae:51:76:04:a9:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:FF:D3:33:F4:74:D8:57:73:E3:4C:BD:E5:0F:0A:BF:5A:96:F1
X509v3 Authority Key Identifier:
keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/_r__0zP0dNhXc-NMveUPCr9alvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.115.182.0/23
192.140.228.0/22
Signature Algorithm: sha256WithRSAEncryption
60:11:45:9b:70:64:77:fb:3b:d4:02:b5:49:c9:ec:1b:a1:6d:
db:35:8b:6f:4a:e2:99:77:12:ec:70:87:03:98:d6:39:87:80:
be:40:c2:3f:63:65:3b:6a:a0:d3:70:84:48:18:3e:e8:4d:94:
7c:a4:2a:c5:90:04:a2:f3:01:4c:45:ac:4b:63:e6:80:8d:65:
1e:21:f4:00:7c:a5:73:f2:31:b3:00:af:71:0f:90:de:8f:85:
42:24:07:bd:3e:78:fc:cc:3a:2c:39:63:97:86:75:c3:17:68:
01:44:22:2a:a5:73:b2:7b:27:3a:21:fc:05:80:b0:a3:b2:ef:
32:d9:f6:40:fc:a0:72:38:b1:0c:88:a0:98:23:f1:22:8d:fc:
91:70:3c:75:db:bb:82:ae:05:ee:20:42:a4:2c:9f:6b:48:5d:
17:95:97:ae:13:68:f7:2c:81:f9:b6:7b:bc:9d:cb:90:36:85:
e8:c4:15:42:c5:67:55:4c:cb:bf:21:3e:8e:4b:2d:14:06:99:
f8:37:bc:79:64:e2:a5:04:f3:b5:27:78:f3:65:18:63:ba:56:
d7:f1:3d:1e:50:35:62:64:9a:24:1b:38:ac:0b:7a:75:1c:f7:
25:b4:39:c4:e8:69:e0:84:a8:ea:ee:d2:24:ac:20:e0:8b:ee:
ef:9c:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:56:10 2025 by rpki-client