Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/jwJTBwWKLkja_FzcvvrpqgDCjws.roa
File: jwJTBwWKLkja_FzcvvrpqgDCjws.roa (raw, json)
Hash identifier: 7otd9+EZJqRYx/bzq3vtn+zgaqnh5M1MG1Iibx6PmCY=
Subject key identifier: 8F:02:53:07:05:8A:2E:48:DA:FC:5C:DC:BE:FA:E9:AA:00:C2:8F:0B
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0195C96A1EE9446C70B32E8306BB78C56209
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/jwJTBwWKLkja_FzcvvrpqgDCjws.roa
Signing time: Mon 24 Mar 2025 18:28:49 +0000
ROA not before: Mon 24 Mar 2025 18:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59253
IP address blocks: 103.148.140.0/24 maxlen: 24
103.149.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:6a:1e:e9:44:6c:70:b3:2e:83:06:bb:78:c5:62:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 24 18:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f025307058a2e48dafc5cdcbefae9aa00c28f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:50:67:b8:ef:5c:36:e0:59:b4:18:e5:5f:
a7:37:87:f0:37:c2:b7:3a:57:26:c3:f3:a3:4a:e6:
f6:09:d2:ad:88:ea:66:a1:3d:64:78:94:61:aa:7d:
5d:28:52:72:fa:d7:5e:78:26:df:cc:6c:55:3d:20:
ed:a9:3c:6b:86:4d:d0:42:f7:23:df:33:bb:e7:f7:
63:4a:79:be:b7:e8:cb:20:f3:9c:e0:4d:c1:18:3a:
b1:e7:a6:a9:2d:cb:64:5f:3e:31:99:04:cb:10:15:
d5:ab:23:4b:6a:47:28:e2:2a:d0:19:ab:6c:e5:93:
ec:48:da:48:44:51:d2:4e:80:73:01:dc:a4:9a:1e:
85:4f:51:d1:c9:3f:d9:78:90:a8:3e:5c:ed:36:07:
9d:28:b4:af:82:59:06:26:cd:b4:2d:67:fd:9f:cc:
bf:55:fb:bd:7b:1c:37:12:69:14:17:fa:78:ba:b4:
cf:f7:19:f5:a8:37:2b:4b:8b:79:04:bb:fb:23:29:
77:67:cb:fe:b5:a1:f8:5d:c0:9d:94:33:a3:5d:89:
87:d7:da:52:85:6c:86:fb:1f:ab:a1:d8:ae:e0:bf:
20:97:30:39:70:9d:c4:04:43:1a:63:d9:80:5d:e9:
0b:28:ae:d1:65:36:f5:8e:59:8a:3a:7b:73:d4:a0:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:53:07:05:8A:2E:48:DA:FC:5C:DC:BE:FA:E9:AA:00:C2:8F:0B
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/jwJTBwWKLkja_FzcvvrpqgDCjws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.140.0/24
103.149.84.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7c:9c:f1:6b:23:3a:9e:2f:43:5d:ca:c9:0a:9e:f4:6e:a0:
f8:4d:a5:6e:1b:99:e2:1e:4f:be:69:28:4f:bc:39:3b:9a:e1:
e6:ba:19:ab:ab:24:c5:24:94:b7:20:9f:8d:9a:3c:c8:75:6f:
05:36:f9:c0:19:a4:ce:90:28:fd:2e:e0:be:91:cd:cf:9d:3b:
db:75:f7:32:f8:80:74:db:75:b5:ab:6a:27:4b:d9:86:c9:f5:
42:0d:ed:b5:55:5f:6a:7c:08:69:b3:e4:9e:68:3c:80:47:17:
0b:eb:9e:88:d3:40:32:e0:bf:0c:a2:2a:50:0b:1d:21:41:bc:
23:c7:db:37:f3:b2:21:74:43:fe:7e:70:80:4a:24:2d:33:ce:
79:d2:4b:13:f3:53:a6:ba:9d:2c:33:08:d0:f4:e4:e9:ac:d8:
4a:f1:63:85:1b:f6:82:87:15:0b:04:fe:a5:1d:a0:9e:b7:81:
15:8d:53:aa:12:58:2c:f7:1a:ba:54:82:da:d8:e4:b3:5d:29:
33:18:66:61:8e:cf:88:25:06:01:2a:2c:3c:5b:a1:df:d3:23:
6e:cf:a8:c4:fc:81:4a:3d:c6:b8:12:e6:a8:3c:c3:d2:93:a3:
89:be:24:a4:29:31:02:3d:59:e9:69:08:dc:c2:f6:12:09:f4:
89:cb:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:40 2025 by rpki-client