Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-K_BdvqKBmTA1_D95QxHlHfvw64.roa
File: 1-K_BdvqKBmTA1_D95QxHlHfvw64.roa (raw, json)
Hash identifier: TpymhNSS4c2F/5xxMnRzQyEgR4XN5LUO/SCSJ2YaPVQ=
Subject key identifier: F8:AF:C1:76:FA:8A:06:64:C0:D7:F0:FD:E5:0C:47:94:77:EF:C3:AE
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 019214149F4A1C031FA99A6A017CFDA7B724
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-K_BdvqKBmTA1_D95QxHlHfvw64.roa
Signing time: Sat 21 Sep 2024 10:15:48 +0000
ROA not before: Sat 21 Sep 2024 10:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216167
IP address blocks: 103.102.230.0/24 maxlen: 24
203.55.81.0/24 maxlen: 24
2a13:c7c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:14:14:9f:4a:1c:03:1f:a9:9a:6a:01:7c:fd:a7:b7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Sep 21 10:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8afc176fa8a0664c0d7f0fde50c479477efc3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:ce:d3:6f:64:f8:17:a2:c9:97:73:34:8c:
d0:d9:cf:ba:ff:3e:8b:8e:0e:87:a1:71:c9:bc:a8:
7f:8c:26:9f:13:72:33:2f:6b:b7:6e:bf:9f:2c:b6:
c3:bf:b8:b0:51:c7:ab:b8:b8:19:d1:98:e3:85:85:
78:5d:f4:cb:20:34:bf:2a:2a:9c:b2:30:8f:cf:5b:
30:a0:81:9d:e3:0c:68:7f:69:4a:73:9a:2a:d3:b4:
f6:72:db:a0:96:1f:d7:85:fc:f7:dd:dd:8b:9e:a3:
a3:a7:e3:75:0d:11:04:8e:e5:6e:e2:43:6f:b4:be:
47:48:24:88:ed:a4:1a:fb:26:12:2d:4d:cc:33:03:
7c:e2:57:ba:8b:ea:09:8a:c3:dd:57:7e:ce:e4:37:
ea:47:69:d0:47:37:69:57:0f:ae:70:9d:b3:15:fc:
74:9a:df:d8:f1:6b:6d:04:a9:08:99:1c:c9:ec:5e:
f5:ab:92:bc:70:71:9d:6c:b0:e9:37:0e:e3:bb:be:
7b:a4:13:a3:d3:d6:7a:3f:3b:7f:7c:ab:07:52:f5:
78:8f:c9:af:29:c3:15:89:a3:e6:8d:9b:a4:0a:88:
04:96:bd:4d:70:63:37:ed:bd:fa:6e:55:18:f1:bb:
7b:45:b9:6b:18:5c:10:1c:6c:79:c2:d5:a7:3a:c0:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:C1:76:FA:8A:06:64:C0:D7:F0:FD:E5:0C:47:94:77:EF:C3:AE
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/1-K_BdvqKBmTA1_D95QxHlHfvw64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.230.0/24
203.55.81.0/24
IPv6:
2a13:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
17:e4:d6:44:16:6b:d9:24:b3:d5:9f:47:15:e9:23:77:bd:ad:
05:9f:bd:a0:c2:62:8e:9a:4e:8b:3b:28:65:0e:d9:f7:e1:5d:
8a:c8:dd:47:b6:b0:94:6a:3d:1e:57:8e:27:d4:ae:f5:66:b6:
18:1b:08:ad:f4:b0:5d:f5:60:db:25:33:15:0c:40:1b:d5:87:
44:85:c2:24:0d:07:fa:70:08:da:0d:25:07:20:23:f2:01:d7:
d9:3c:ea:b5:4a:63:85:5f:67:c3:88:3e:00:d1:02:56:bd:02:
34:b7:e7:dc:ec:c0:8d:41:33:0c:b2:62:08:d7:db:eb:5b:97:
18:f5:c2:8f:c0:20:af:90:ab:9f:99:f4:43:1b:8b:88:e9:c5:
e8:78:0a:af:d0:56:ae:53:55:26:ae:6d:0d:a9:5e:a7:3e:7c:
8b:70:0e:92:d0:40:2c:15:c3:71:c9:29:b1:64:92:12:7f:5f:
b6:07:da:dd:a0:f3:88:c7:f5:cc:7e:b6:2b:5a:30:f2:af:67:
ea:15:2f:e4:df:b7:2b:67:b9:12:90:79:e4:22:f0:6a:de:98:
7b:98:0e:50:c3:cd:ba:64:03:b2:9f:d0:9b:fb:26:89:88:e4:
1e:11:72:9c:3d:93:8c:cf:26:12:ac:05:a5:5e:75:2d:8c:30:
ca:45:8d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:11:38 2024 by rpki-client on console.sobornost.net