Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Hblhmx36dVd9w6qjQOfmRfpikI0.roa
File: Hblhmx36dVd9w6qjQOfmRfpikI0.roa (raw, json)
Hash identifier: uX5sd4wNEdgYC4/31tSRroHAGZSTGziBVQ76c9/TPf4=
Subject key identifier: 1D:B9:61:9B:1D:FA:75:57:7D:C3:AA:A3:40:E7:E6:45:FA:62:90:8D
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0193F8678B7F172AD0D2D28F940C4B53CA90
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Hblhmx36dVd9w6qjQOfmRfpikI0.roa
Signing time: Tue 24 Dec 2024 11:22:35 +0000
ROA not before: Tue 24 Dec 2024 11:22:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63930
IP address blocks: 103.146.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:67:8b:7f:17:2a:d0:d2:d2:8f:94:0c:4b:53:ca:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Dec 24 11:22:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1db9619b1dfa75577dc3aaa340e7e645fa62908d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:18:06:5a:4b:b6:b6:1c:d5:5c:5e:36:05:
2b:e4:33:d8:7d:b0:19:ee:c4:cf:a3:50:d6:89:22:
a8:eb:ae:54:2f:65:1f:af:70:8d:12:b2:7e:84:c1:
93:59:2b:12:dc:10:de:e9:be:28:46:46:98:f4:b8:
28:59:36:c7:e9:d3:8c:29:30:ac:49:15:91:0b:73:
28:a4:ab:58:79:92:7e:60:56:48:d9:be:b5:cd:6f:
db:b9:9e:af:ac:6a:51:9a:57:29:49:1b:36:b7:c5:
0b:ad:49:fc:e7:d9:d6:21:51:8d:62:ab:00:7c:50:
f5:19:92:d9:ab:a1:07:48:7c:f5:80:68:81:6d:60:
4f:27:ab:78:42:91:71:d8:cf:cc:8d:44:30:f9:69:
37:2c:c9:7e:07:c5:ab:a8:76:16:dd:74:00:35:47:
52:82:73:06:d4:40:ec:29:9e:8c:7c:fa:68:18:9a:
ef:b0:b5:29:13:0d:79:50:28:f4:4d:55:ea:d0:06:
32:e5:e3:87:16:2c:0b:0b:b9:94:2b:91:bc:cc:ec:
48:24:da:87:32:03:bd:75:03:fc:21:b7:96:34:32:
b3:9b:97:85:c6:84:a6:2e:c7:e1:67:16:35:e0:a5:
80:fe:fa:fa:e8:b2:12:48:c5:a8:39:95:60:ab:5f:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B9:61:9B:1D:FA:75:57:7D:C3:AA:A3:40:E7:E6:45:FA:62:90:8D
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Hblhmx36dVd9w6qjQOfmRfpikI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:44:71:de:01:a9:f1:9a:da:6c:7d:7d:dd:5c:d3:37:33:2c:
0a:d5:b2:7c:4c:2d:24:4b:49:a6:66:d1:37:53:04:a0:2b:40:
f4:b4:22:df:e0:12:7a:90:9a:c4:86:b1:d5:19:48:5f:48:7a:
bf:fc:7b:59:91:a9:c2:b4:5b:92:ef:e1:52:03:ad:c0:71:6d:
d8:6c:63:cb:2a:9c:71:81:f0:50:c6:5f:b1:05:46:b1:15:50:
47:49:3a:30:ed:62:e6:73:2d:27:2c:4b:43:30:7a:61:01:48:
4f:9e:cd:83:99:a2:30:d2:a2:42:fd:0a:a9:da:c8:3b:93:2a:
57:51:f2:53:a0:5b:6d:74:70:2d:bc:c9:6f:88:c9:f1:27:a0:
c5:97:d0:cd:10:11:ca:1e:60:05:40:2c:e4:da:e6:41:e4:0e:
63:d5:ac:fb:97:e6:97:dc:63:f6:29:59:15:6b:3e:81:f0:0b:
f7:6f:b4:21:e7:f1:73:2d:11:d4:46:a2:83:5e:54:f8:b4:e2:
9e:8a:08:9f:c3:7b:8a:11:6f:e4:fa:2f:50:fd:de:6e:94:00:
57:bb:42:10:23:dd:c0:c4:fe:b0:ed:94:2a:2c:a1:de:ea:9b:
2f:19:2f:2b:6d:15:71:32:83:f4:18:ef:7c:c4:42:95:db:8a:
73:0f:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:52 2024 by rpki-client on console.sobornost.net