Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lHEQEA5LVSVb_JnGBC5Rdq3Pj2g.roa
File: lHEQEA5LVSVb_JnGBC5Rdq3Pj2g.roa (raw, json)
Hash identifier: HyPfEJ6n7TczLcaIZxMLXcc4RzQy2bC4IcS2E/86qyk=
Subject key identifier: 94:71:10:10:0E:4B:55:25:5B:FC:99:C6:04:2E:51:76:AD:CF:8F:68
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0193F2DF0FF6328DFFB43AB1DF6E5F677724
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lHEQEA5LVSVb_JnGBC5Rdq3Pj2g.roa
Signing time: Mon 23 Dec 2024 09:35:25 +0000
ROA not before: Mon 23 Dec 2024 09:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151734
IP address blocks: 103.75.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:df:0f:f6:32:8d:ff:b4:3a:b1:df:6e:5f:67:77:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Dec 23 09:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=947110100e4b55255bfc99c6042e5176adcf8f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:1b:6e:8d:ee:12:f1:09:87:e4:58:e8:bb:
54:b6:5d:b2:8b:e2:e9:58:7e:1a:39:be:69:7d:5c:
2e:18:ae:c8:64:5c:a2:12:9f:35:0c:34:89:4c:e9:
29:8e:06:b0:1d:77:bb:ec:1d:60:d2:26:b3:37:68:
fd:58:97:ae:32:3b:3a:d3:bc:b5:2e:0e:26:e1:60:
a8:e3:56:b8:66:91:5a:3d:73:6a:ee:62:82:fc:e2:
35:62:b5:e2:3f:48:a4:ea:ee:6c:a6:9e:21:ec:cc:
d1:f3:27:e2:e4:a2:2e:7b:88:c8:5e:38:47:79:11:
d3:99:d7:8f:25:6a:44:5b:a5:3d:1c:af:0d:48:25:
3d:df:14:f2:8f:80:20:30:e8:2a:70:10:5e:e1:78:
91:1c:93:77:ed:fd:91:6e:a4:f0:ce:6f:e3:5a:80:
a7:04:ac:e5:c7:5b:d8:af:3f:e4:5d:d3:cd:f0:de:
eb:18:95:af:03:b6:13:6e:2d:19:c4:62:ba:9a:69:
e2:00:40:90:8d:61:5e:cb:21:56:9a:1b:70:6c:9c:
59:df:ad:8c:89:f8:cf:33:77:97:bb:51:cd:da:c6:
3f:2c:d6:b9:72:89:84:dc:70:8c:0c:bb:56:a2:ab:
a5:95:06:af:2c:f7:ac:74:83:74:dc:f3:74:58:13:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:71:10:10:0E:4B:55:25:5B:FC:99:C6:04:2E:51:76:AD:CF:8F:68
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/lHEQEA5LVSVb_JnGBC5Rdq3Pj2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:81:8c:94:a8:05:ed:6e:38:3b:18:4e:ae:de:6c:05:65:b9:
d6:c2:33:3b:bf:ec:23:42:42:a3:25:2d:10:b2:7e:81:0f:67:
af:16:92:bb:f5:fc:0e:50:ef:d5:ca:6a:a7:43:27:f2:46:c5:
d1:5f:04:aa:1c:89:fd:b3:4e:79:6c:b8:33:93:7b:65:11:e8:
86:4b:86:36:7b:0a:d2:0d:bb:62:dc:0f:5c:7b:62:de:99:83:
ae:b5:ce:d1:65:95:9b:5e:0f:3d:9b:2c:a9:21:1a:c8:23:6e:
46:d1:d2:06:6e:f2:1a:3a:93:d4:c4:d2:cb:38:c0:79:e3:69:
63:29:21:dc:b8:0d:62:4c:87:80:e8:a6:6b:2c:98:82:e8:88:
bd:73:fa:15:1c:92:ae:a1:f7:67:6c:78:c4:ff:d2:be:37:39:
93:69:b6:6a:bc:5e:79:20:93:bd:10:99:87:5c:79:68:25:f6:
77:39:91:e3:89:ea:a3:04:61:3d:47:80:a3:72:34:08:6a:52:
0a:0d:49:08:2b:ee:1e:ca:6c:22:56:21:5a:cf:81:67:64:2d:
69:85:2f:91:0d:11:da:9a:45:29:7f:be:f6:c2:85:27:b6:4b:
e4:3b:62:3e:79:88:c3:8f:7d:2c:49:5f:4c:60:5c:14:44:a1:
af:94:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net