Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/RnwjYMD2WR5JlDjtkfTyMJ3PNjc.roa
File: RnwjYMD2WR5JlDjtkfTyMJ3PNjc.roa (raw, json)
Hash identifier: 3aqPiO+RjVlTlzU+NaBL+QR3qjiXb7dyzFOn7QHqZP4=
Subject key identifier: 46:7C:23:60:C0:F6:59:1E:49:94:38:ED:91:F4:F2:30:9D:CF:36:37
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01945087CB13F72FA58FE90A6961FF998650
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/RnwjYMD2WR5JlDjtkfTyMJ3PNjc.roa
Signing time: Fri 10 Jan 2025 14:04:24 +0000
ROA not before: Fri 10 Jan 2025 14:04:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47583
IP address blocks: 103.199.184.0/22 maxlen: 24
194.164.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:50:87:cb:13:f7:2f:a5:8f:e9:0a:69:61:ff:99:86:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jan 10 14:04:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=467c2360c0f6591e499438ed91f4f2309dcf3637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:4e:fd:c6:b9:c1:d2:93:e7:5c:b2:d1:02:
ac:a9:ea:b5:93:fb:fd:b4:d9:79:f5:fc:72:76:65:
b7:de:59:0a:95:f6:ed:19:20:81:09:65:5d:4c:3c:
bf:b3:31:40:20:0c:ea:d0:81:2c:8d:a2:6a:f1:0c:
4f:c4:c5:7e:dd:04:4a:ec:a0:9a:bf:12:fe:02:73:
c4:65:78:40:46:56:21:15:1b:c9:c6:e8:d7:58:7d:
dd:d9:c9:d1:68:d6:01:8e:16:62:63:c7:ea:59:9e:
29:02:eb:e0:93:8d:a3:45:78:05:ca:b9:3b:50:fc:
10:a8:d9:67:0c:97:5a:5d:36:b2:81:49:e5:a2:26:
97:79:5a:de:73:49:bd:a1:1e:c4:8d:82:5b:46:98:
4a:94:04:a1:d5:bb:af:03:32:66:24:f1:e1:84:f8:
d4:3c:a7:df:c7:26:d6:ea:4b:6c:99:27:b2:15:d6:
56:b6:b6:8b:46:bb:b3:e4:46:49:5d:ff:87:54:db:
5a:c1:68:79:3a:4e:48:3a:7e:41:37:12:86:db:04:
9a:74:e1:bd:db:7d:be:28:2c:3d:ac:d9:4a:bd:38:
9b:06:3d:41:8f:c4:58:6e:44:88:1b:9e:07:a5:88:
fd:5e:29:05:3a:d4:d5:f0:44:6f:1a:11:28:3b:7e:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:23:60:C0:F6:59:1E:49:94:38:ED:91:F4:F2:30:9D:CF:36:37
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/RnwjYMD2WR5JlDjtkfTyMJ3PNjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.199.184.0/22
194.164.148.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:dd:2f:4f:f2:ec:e2:45:2a:af:3b:c5:49:f9:a2:a4:05:b0:
0b:6a:a4:60:55:f3:de:13:cd:4c:00:34:a3:d2:5c:f2:94:cb:
8a:a6:72:c7:1f:02:72:8a:d1:d1:0d:a7:74:d1:dd:2a:c9:95:
05:8c:85:f0:da:67:06:47:16:3e:07:22:72:b5:d5:e5:91:c1:
0c:3a:5e:f3:52:f6:93:31:0b:29:4d:15:50:bc:96:b7:65:05:
32:0b:a0:ca:64:54:be:3d:80:da:df:38:57:cc:e4:8d:f6:0e:
d2:66:79:5d:f8:ef:ac:0b:71:8b:e9:ae:16:7a:e7:c1:c2:74:
f7:7d:ca:e2:c0:df:42:ec:b5:94:73:0e:88:73:a7:18:7b:ea:
57:2a:aa:d7:77:0c:67:38:6c:e2:55:6b:e2:de:67:ad:ef:eb:
7b:16:2b:f5:1b:a0:c7:df:87:ec:d8:cc:f3:ad:27:ec:df:d4:
18:04:bc:35:00:ed:e7:6d:32:84:b8:e0:7c:7c:f1:ff:04:f7:
cc:10:50:ec:94:78:c3:b9:4c:8c:15:4c:3b:90:c9:40:64:a0:
db:55:73:da:ff:fe:7e:f2:a4:a7:f8:16:c3:70:73:cf:9c:fb:
d6:2e:43:2e:26:18:d3:8a:77:db:bb:bd:85:34:fb:bb:3f:08:
c1:97:df:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:17:32 2025 by rpki-client