Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa
File: 4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa (raw, json)
Hash identifier: uj1CpTYiuNEnoBSr8Niym7afjHD/7ENr6+d1VZIXhys=
Subject key identifier: E0:68:02:EC:6D:18:DF:E2:94:F1:8E:A9:FE:9B:0F:10:C5:D1:11:F7
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01961BB6B25B5FAE2C00B9E3F99F93DCFBB6
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa
Signing time: Wed 09 Apr 2025 18:01:20 +0000
ROA not before: Wed 09 Apr 2025 18:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 103.74.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:b6:b2:5b:5f:ae:2c:00:b9:e3:f9:9f:93:dc:fb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Apr 9 18:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e06802ec6d18dfe294f18ea9fe9b0f10c5d111f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:2d:48:39:57:05:7d:c6:c5:c4:2f:26:ce:
5e:99:e0:ba:80:b1:1a:16:4e:d8:a0:77:2a:0b:24:
cb:48:dc:7e:63:16:3b:54:09:d7:d0:df:ec:ea:24:
63:c1:44:88:b5:30:5b:05:9a:e3:99:7d:cf:be:1d:
04:41:24:3c:0f:63:0f:f8:bc:f4:4d:74:c8:07:a8:
41:38:2f:76:31:0d:e7:e5:91:a0:7e:ef:e8:eb:23:
4b:8f:55:7a:bb:f8:17:3e:b1:bf:7e:2d:59:f1:50:
a6:90:d8:aa:42:9d:eb:d0:90:81:ed:2f:fd:35:4c:
2f:50:bf:58:d4:b2:da:39:fb:fe:cf:70:bd:4d:ad:
22:79:ab:1a:04:9e:11:0a:ac:f9:ae:b9:99:67:d4:
28:4c:41:c7:9e:3b:45:d5:07:9c:50:30:2c:65:ae:
b4:ea:80:11:6c:08:4b:20:ee:0f:96:f3:e7:e0:2b:
9e:c6:90:f0:44:fb:ee:cf:84:a3:89:e6:b3:6a:48:
41:87:70:e0:ea:9d:1e:63:d8:16:a7:3e:d8:81:81:
28:62:18:cc:45:64:01:68:75:de:9f:a1:2c:07:4b:
0e:52:79:c6:27:b2:b7:58:ef:1f:11:9d:8f:08:51:
ae:49:24:bc:ae:f4:a3:26:8b:02:21:df:b4:36:aa:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:68:02:EC:6D:18:DF:E2:94:F1:8E:A9:FE:9B:0F:10:C5:D1:11:F7
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.92.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a2:3d:b5:8a:04:04:41:21:e3:b2:54:a4:b7:fa:c0:f8:2b:
21:33:b9:51:3c:d5:5a:2e:91:1e:66:1c:27:95:3c:57:83:8d:
e0:12:1b:41:3e:30:5d:19:7b:cf:bc:6c:d1:93:c6:e2:11:6a:
31:e4:12:7d:c4:83:f7:4f:db:1b:73:73:0a:be:fb:4d:70:6e:
dc:af:b1:3e:b8:2c:c0:e7:cf:e2:53:40:a5:6b:b3:5e:22:40:
6c:8f:e3:58:76:7c:10:e5:32:c7:f5:3d:cc:05:7c:6d:d8:16:
77:47:c7:91:17:8b:e0:0c:2d:54:48:cb:de:4e:d3:1e:43:c1:
13:5e:30:28:1a:42:d9:70:3c:31:62:30:b8:3f:b4:6e:d0:ff:
35:05:a8:64:b5:22:0b:fc:dc:24:15:d8:43:4b:ed:cc:55:84:
30:da:f9:64:73:17:92:67:5a:f9:32:10:ab:6a:a3:e1:4e:6d:
c7:0c:9e:dc:aa:0a:eb:b1:e3:76:dc:1f:0a:f4:28:75:50:b4:
64:5c:21:a2:60:66:82:a0:15:96:ef:2a:39:f7:c0:ce:d4:e2:
a8:eb:dd:90:a6:92:3f:84:a7:4e:13:ea:cd:4a:f0:50:0f:e5:
49:2f:cb:8e:0f:1e:cd:ee:27:8a:e5:55:77:f7:5b:38:14:e2:
62:31:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net