Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/zve48iCRLcxAfyRqEYbhVJaDbkc.roa
File: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (raw, json)
Hash identifier: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=
Subject key identifier: CE:F7:B8:F2:20:91:2D:CC:40:7F:24:6A:11:86:E1:54:96:83:6E:47
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 0194DACC8F0AEED1E22F22D2A42670610AF3
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/zve48iCRLcxAfyRqEYbhVJaDbkc.roa
Signing time: Thu 06 Feb 2025 10:27:06 +0000
ROA not before: Thu 06 Feb 2025 10:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 103.146.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:cc:8f:0a:ee:d1:e2:2f:22:d2:a4:26:70:61:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Feb 6 10:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cef7b8f220912dcc407f246a1186e15496836e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:3c:70:7c:b4:29:03:3d:2d:f0:82:4f:5b:
44:fe:56:05:32:51:38:76:e5:d5:91:73:aa:ed:6a:
b3:0b:96:f2:b2:fb:79:2d:a8:b0:b7:43:a9:a0:db:
f0:ae:e5:05:0f:21:7b:7e:ab:95:70:76:0a:3c:fc:
35:62:ed:1c:78:2b:fa:17:6f:ff:eb:f6:0e:6e:0c:
0c:0a:75:6c:b1:42:1f:0b:29:09:ed:5c:e4:ce:7b:
82:76:2e:6c:0d:99:55:d4:9b:16:75:af:dd:08:c7:
87:7f:d6:8b:07:a7:77:a5:62:b2:af:f9:2c:2a:16:
cc:45:47:ca:c7:07:1a:59:67:bf:2e:4d:45:75:88:
ae:2a:4f:04:29:97:58:71:cb:b4:53:49:ad:41:bd:
a8:2c:1b:cf:5a:cf:41:4f:53:2a:b9:6d:23:f0:f7:
a4:70:7d:72:8e:3e:57:8e:2b:80:3a:49:70:4c:76:
20:ce:3d:a7:b1:e4:e0:cf:83:5f:f9:d3:68:72:d1:
a8:b3:50:42:91:70:db:00:1e:94:ff:79:8a:37:18:
2d:db:68:bd:91:49:53:c9:4e:7b:b2:0b:86:bc:e1:
55:92:50:cd:da:03:85:8e:f9:ab:ee:6e:a0:22:87:
05:35:cf:70:26:ce:b5:ca:56:34:ab:e8:dd:c6:11:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F7:B8:F2:20:91:2D:CC:40:7F:24:6A:11:86:E1:54:96:83:6E:47
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/zve48iCRLcxAfyRqEYbhVJaDbkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.118.0/23
Signature Algorithm: sha256WithRSAEncryption
08:b5:04:0b:e5:a6:13:e4:bc:3e:b2:09:7e:eb:8e:b6:c3:03:
7e:04:31:31:df:ca:c4:7a:45:44:95:ff:9a:d9:d2:8e:bf:c7:
c4:5a:4c:ae:f8:c2:77:19:da:c1:df:0d:19:ab:84:f8:d0:b5:
76:8b:97:8c:49:b8:61:60:de:34:b5:4c:de:ef:a4:82:8b:25:
91:e5:da:1d:b0:28:ad:f3:f6:65:d5:8f:4e:8d:26:93:18:f9:
3b:89:4c:25:f5:50:20:70:a0:3a:38:43:dc:f4:d2:a0:c9:cf:
a9:6b:cf:fa:25:cc:e2:b7:18:6b:12:21:41:c7:52:aa:98:f1:
e5:a2:7a:3f:7a:6c:93:33:cb:c5:e9:40:08:68:df:a1:41:0c:
55:c6:39:95:e8:cd:68:cf:71:ea:bf:21:90:40:c6:f5:4f:8f:
0a:8a:10:32:c1:8d:7c:53:89:89:a4:0a:7e:c9:02:8f:67:ae:
d7:d1:f4:fe:10:ad:ba:e1:4a:10:0d:96:cd:69:64:28:d8:9f:
d2:bf:35:55:1c:bc:e9:ca:eb:3b:3b:ec:be:3c:35:ee:4a:e2:
5c:cb:fe:2d:f0:1f:31:51:77:55:39:fc:02:02:da:e3:96:6d:
df:aa:6d:57:7f:bc:a4:ca:f4:ad:83:c5:25:eb:e9:16:35:c2:
a7:a8:66:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTazI8K7tHiLyLSpCZwYQrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjUwMjA2MTAyNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWY3YjhmMjIwOTEyZGNjNDA3ZjI0NmExMTg2ZTE1NDk2ODM2ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2g8cHy0KQM9LfCCT1tE/lYFMlE4
duXVkXOq7WqzC5bysvt5Laiwt0OpoNvwruUFDyF7fquVcHYKPPw1Yu0ceCv6F2//
6/YObgwMCnVssUIfCykJ7VzkznuCdi5sDZlV1JsWda/dCMeHf9aLB6d3pWKyr/ks
KhbMRUfKxwcaWWe/Lk1FdYiuKk8EKZdYccu0U0mtQb2oLBvPWs9BT1MquW0j8Pek
cH1yjj5XjiuAOklwTHYgzj2nseTgz4Nf+dNoctGos1BCkXDbAB6U/3mKNxgt22i9
kUlTyU57sguGvOFVklDN2gOFjvmr7m6gIocFNc9wJs61ylY0q+jdxhEnjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM73uPIgkS3MQH8kahGG4VSWg25HMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvenZlNDhpQ1JMY3hBZnlScUVZYmhWSmFEYmtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5J2MA0G
CSqGSIb3DQEBCwUAA4IBAQAItQQL5aYT5Lw+sgl+6462wwN+BDEx38rEekVElf+a
2dKOv8fEWkyu+MJ3GdrB3w0Zq4T40LV2i5eMSbhhYN40tUze76SCiyWR5dodsCit
8/Zl1Y9OjSaTGPk7iUwl9VAgcKA6OEPc9NKgyc+pa8/6JczitxhrEiFBx1KqmPHl
ono/emyTM8vF6UAIaN+hQQxVxjmV6M1oz3HqvyGQQMb1T48KihAywY18U4mJpAp+
yQKPZ67X0fT+EK264UoQDZbNaWQo2J/SvzVVHLzpyus7O+y+PDXuSuJcy/4t8B8x
UXdVOfwCAtrjlm3fqm1Xf7ykyvStg8Ul6+kWNcKnqGZ0
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:28 2025 by rpki-client