Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Ny75QWjER1L1uuIsgQ1d8bZ83Ms.roa
File: Ny75QWjER1L1uuIsgQ1d8bZ83Ms.roa (raw, json)
Hash identifier: X+upeQhvzqiioddEqt/yUsdnD60JP3BVDyUJKU7yvbY=
Subject key identifier: 37:2E:F9:41:68:C4:47:52:F5:BA:E2:2C:81:0D:5D:F1:B6:7C:DC:CB
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0193B48878940ADA89A0D6B2FDB0E56B5383
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Ny75QWjER1L1uuIsgQ1d8bZ83Ms.roa
Signing time: Wed 11 Dec 2024 07:04:22 +0000
ROA not before: Wed 11 Dec 2024 07:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136359
IP address blocks: 103.75.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b4:88:78:94:0a:da:89:a0:d6:b2:fd:b0:e5:6b:53:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Dec 11 07:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=372ef94168c44752f5bae22c810d5df1b67cdccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:cf:7a:74:85:a3:76:90:ed:67:03:6b:36:
4c:9a:78:00:d4:93:57:e1:6e:6a:6f:09:10:33:6e:
56:37:fb:5b:4f:b6:53:38:79:26:63:56:18:6a:fc:
87:ba:6e:0a:87:89:b1:8f:3c:26:ac:f5:cb:4e:5c:
b6:68:13:8c:95:a7:64:26:56:ba:57:9e:46:0a:75:
76:93:92:a2:0a:86:9f:7f:76:c0:9a:cf:4b:05:f3:
96:0e:28:51:ef:87:fd:d6:40:4c:cd:f8:f3:68:40:
f5:03:c7:f9:d6:c6:eb:24:b9:46:04:86:bc:2b:08:
13:07:aa:09:d6:a3:30:98:ef:c7:d4:4d:2e:fb:64:
9a:8d:28:45:4b:6e:1b:04:84:6b:b8:f2:47:31:80:
88:a8:80:be:4e:94:d1:ff:63:ae:4d:55:c6:7b:5d:
bb:89:25:88:12:2c:4d:14:6d:19:46:87:be:b4:10:
3f:00:7c:15:9f:e7:89:9c:1d:ee:fb:de:7e:e6:b7:
51:24:b8:0e:42:fd:ca:55:1a:f3:e1:6a:a5:d7:9f:
0a:d2:61:44:20:49:c9:ad:d4:7a:19:5d:d4:65:1f:
4b:dd:b0:06:7c:cf:68:d8:78:92:c1:2a:ca:0b:3b:
c1:6e:6f:d9:c0:50:bd:c8:74:95:66:62:56:f5:ca:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2E:F9:41:68:C4:47:52:F5:BA:E2:2C:81:0D:5D:F1:B6:7C:DC:CB
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Ny75QWjER1L1uuIsgQ1d8bZ83Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.71.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:28:1e:7c:99:39:1e:0f:4c:c2:05:ac:d2:33:98:91:e0:8d:
c7:67:c8:63:74:7f:5c:a8:8b:57:ac:77:b2:25:ab:7d:d8:78:
f4:b5:7b:fe:41:0e:cf:69:e1:81:48:91:0c:be:c5:ed:27:1f:
41:17:bf:7a:db:41:51:c1:ac:9e:40:98:0d:be:42:c2:19:d6:
c2:6e:b0:12:5d:78:58:2b:85:94:d6:e2:ab:d4:46:56:81:04:
76:62:c7:f9:6b:59:11:0e:42:21:75:96:52:f2:14:1a:48:fa:
14:4e:00:4d:26:63:16:81:e2:73:92:51:7d:ce:83:5a:17:9a:
9d:72:9e:4f:8e:96:02:9f:d6:e6:4b:89:d1:ea:51:29:3f:1b:
dc:24:10:f6:80:c8:2e:75:43:27:2e:e9:58:72:9b:9c:ad:e7:
d7:06:76:27:05:03:3f:47:9f:fb:66:99:da:8b:dc:cd:aa:b6:
a7:5d:28:be:69:a0:80:f1:f6:0e:02:03:d7:1c:8c:d0:53:9c:
43:e5:f3:cd:11:98:ac:41:a1:e8:21:d5:64:64:e8:1f:17:3a:
ba:5f:c2:4b:f0:18:db:ec:b4:6d:c3:bd:17:ac:ec:42:cf:2c:
c1:77:9f:5e:03:9e:83:d8:b2:39:2d:15:00:87:41:dc:a5:2a:
02:92:69:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO0iHiUCtqJoNay/bDla1ODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjQxMjExMDcwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzJlZjk0MTY4YzQ0NzUyZjViYWUyMmM4MTBkNWRmMWI2N2NkY2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox7PenSFo3aQ7WcDazZMmngA1JNX
4W5qbwkQM25WN/tbT7ZTOHkmY1YYavyHum4Kh4mxjzwmrPXLTly2aBOMladkJla6
V55GCnV2k5KiCoaff3bAms9LBfOWDihR74f91kBMzfjzaED1A8f51sbrJLlGBIa8
KwgTB6oJ1qMwmO/H1E0u+2SajShFS24bBIRruPJHMYCIqIC+TpTR/2OuTVXGe127
iSWIEixNFG0ZRoe+tBA/AHwVn+eJnB3u+95+5rdRJLgOQv3KVRrz4Wql158K0mFE
IEnJrdR6GV3UZR9L3bAGfM9o2HiSwSrKCzvBbm/ZwFC9yHSVZmJW9crpDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDcu+UFoxEdS9briLIENXfG2fNzLMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvTnk3NVFXakVSMUwxdXVJc2dRMWQ4Ylo4M01zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0tHMA0G
CSqGSIb3DQEBCwUAA4IBAQCsKB58mTkeD0zCBazSM5iR4I3HZ8hjdH9cqItXrHey
Jat92Hj0tXv+QQ7PaeGBSJEMvsXtJx9BF79620FRwayeQJgNvkLCGdbCbrASXXhY
K4WU1uKr1EZWgQR2Ysf5a1kRDkIhdZZS8hQaSPoUTgBNJmMWgeJzklF9zoNaF5qd
cp5PjpYCn9bmS4nR6lEpPxvcJBD2gMgudUMnLulYcpucrefXBnYnBQM/R5/7Zpna
i9zNqranXSi+aaCA8fYOAgPXHIzQU5xD5fPNEZisQaHoIdVkZOgfFzq6X8JL8Bjb
7LRtw70XrOxCzyzBd59eA56D2LI5LRUAh0HcpSoCkmm8
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net