Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fiZS1QoC13O9LGwSQ4heL3EDJHg.roa
File: fiZS1QoC13O9LGwSQ4heL3EDJHg.roa (raw, json)
Hash identifier: cQaKdfdjwvkVki02Gk6rg/cphkwoTFB2MpHuxaFIw5A=
Subject key identifier: 7E:26:52:D5:0A:02:D7:73:BD:2C:6C:12:43:88:5E:2F:71:03:24:78
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01943FA1D9C87AD7B0AEF190B3AE778E0654
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fiZS1QoC13O9LGwSQ4heL3EDJHg.roa
Signing time: Tue 07 Jan 2025 07:19:19 +0000
ROA not before: Tue 07 Jan 2025 07:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136050
IP address blocks: 45.135.236.0/24 maxlen: 24
103.146.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:a1:d9:c8:7a:d7:b0:ae:f1:90:b3:ae:77:8e:06:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 7 07:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e2652d50a02d773bd2c6c1243885e2f71032478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:00:24:68:54:8a:8a:20:0a:79:47:7f:22:
a1:ab:21:15:d0:67:06:3d:dc:8d:f8:13:bf:fd:5e:
5f:68:b0:bc:a8:27:10:64:bd:c9:08:3a:2e:a1:bd:
a3:7e:04:b6:79:36:64:65:45:b4:7c:bb:8d:ed:0c:
18:1a:aa:60:ac:8c:21:91:a8:8c:d1:5e:bd:49:6c:
e2:df:c4:45:60:48:43:7a:ff:79:4b:34:40:9b:eb:
ab:b6:9b:f4:24:b0:21:af:36:41:ac:8d:f7:69:27:
e6:b7:3b:93:1c:93:bb:0f:ca:d0:17:4e:e3:d3:56:
af:27:87:b9:47:64:b3:78:b3:a9:ba:8e:92:70:ed:
50:57:cd:54:40:f9:bf:ff:33:c8:35:62:7f:e1:af:
5b:19:a5:2d:2c:8c:f1:02:7b:d9:0a:cc:59:db:a1:
40:ca:79:ae:5b:56:84:cf:2f:a6:57:cd:cb:7d:5b:
40:59:9f:2b:85:90:ba:4e:ea:f2:25:11:ca:34:65:
95:dc:a9:90:0f:15:cd:c7:df:62:60:2a:19:bc:bd:
e9:09:17:4c:dc:60:77:22:23:f7:ee:06:46:38:6e:
17:3a:eb:4b:76:25:1c:82:6f:c8:ae:42:46:06:68:
9b:19:03:da:22:7b:c6:eb:67:d4:60:e7:e8:46:37:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:26:52:D5:0A:02:D7:73:BD:2C:6C:12:43:88:5E:2F:71:03:24:78
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fiZS1QoC13O9LGwSQ4heL3EDJHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.236.0/24
103.146.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ce:85:2e:b4:ac:cd:08:62:ab:52:25:fa:13:0c:03:e4:49:
a1:43:08:22:0a:21:ee:33:f0:55:f8:7b:f8:09:da:2d:da:91:
32:4f:62:4a:f8:7a:7c:7a:e7:44:95:d4:c0:93:9b:59:dc:10:
9e:a6:58:f1:92:07:5f:3e:f1:32:1c:ae:6b:8b:d4:4f:4d:77:
86:76:0f:8d:d6:25:09:98:cd:16:bb:48:71:d1:e2:c4:64:da:
ec:28:f5:c6:47:44:33:4b:e1:aa:38:05:34:eb:bc:54:19:9a:
23:17:6f:42:fd:a7:91:73:b5:7c:b9:88:1c:4c:ee:ee:d0:d5:
74:66:85:9e:76:94:85:45:4a:75:95:dc:49:fb:40:fd:52:25:
72:08:59:72:0e:05:a8:14:7f:98:e0:a3:d4:30:62:02:bf:96:
d2:fd:c0:24:7a:6f:89:bb:87:37:5a:6a:b0:6f:3f:ad:08:93:
94:0f:59:b7:c8:18:dd:a1:16:c3:a5:5a:af:56:f8:30:46:64:
ea:96:61:e6:1e:f4:8f:83:77:6c:d3:bc:fe:7c:d9:c2:91:85:
14:29:9a:ee:8d:86:a1:8c:72:1c:36:89:8c:e3:91:5a:69:fa:
21:f4:8a:9b:24:6d:f7:46:c5:fe:55:2b:4b:6d:94:81:97:98:
e9:9b:9a:51
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQ/odnIetewrvGQs653jgZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMTA3MDcxOTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTI2NTJkNTBhMDJkNzczYmQyYzZjMTI0Mzg4NWUyZjcxMDMyNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f4AJGhUioogCnlHfyKhqyEV0GcG
PdyN+BO//V5faLC8qCcQZL3JCDouob2jfgS2eTZkZUW0fLuN7QwYGqpgrIwhkaiM
0V69SWzi38RFYEhDev95SzRAm+urtpv0JLAhrzZBrI33aSfmtzuTHJO7D8rQF07j
01avJ4e5R2SzeLOpuo6ScO1QV81UQPm//zPINWJ/4a9bGaUtLIzxAnvZCsxZ26FA
ynmuW1aEzy+mV83LfVtAWZ8rhZC6TuryJRHKNGWV3KmQDxXNx99iYCoZvL3pCRdM
3GB3IiP37gZGOG4XOutLdiUcgm/IrkJGBmibGQPaInvG62fUYOfoRjePDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH4mUtUKAtdzvSxsEkOIXi9xAyR4MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvZmlaUzFRb0MxM085TEd3U1E0aGVMM0VESkhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYfsAwQA
Z5JkMA0GCSqGSIb3DQEBCwUAA4IBAQAuzoUutKzNCGKrUiX6EwwD5EmhQwgiCiHu
M/BV+Hv4Cdot2pEyT2JK+Hp8eudEldTAk5tZ3BCepljxkgdfPvEyHK5ri9RPTXeG
dg+N1iUJmM0Wu0hx0eLEZNrsKPXGR0QzS+GqOAU067xUGZojF29C/aeRc7V8uYgc
TO7u0NV0ZoWedpSFRUp1ldxJ+0D9UiVyCFlyDgWoFH+Y4KPUMGICv5bS/cAkem+J
u4c3Wmqwbz+tCJOUD1m3yBjdoRbDpVqvVvgwRmTqlmHmHvSPg3ds07z+fNnCkYUU
KZrujYahjHIcNomM45Faafoh9IqbJG33RsX+VStLbZSBl5jpm5pR
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:31:24 2025 by rpki-client