Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/1fqCSDa28oDsV8WNdx3jsCjP8Dg.roa
File: 1fqCSDa28oDsV8WNdx3jsCjP8Dg.roa (raw, json)
Hash identifier: YAr9JNef+vD2pfCFmOrgmLefW6kH++m774H5BnIelJQ=
Subject key identifier: D5:FA:82:48:36:B6:F2:80:EC:57:C5:8D:77:1D:E3:B0:28:CF:F0:38
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019469DFDE2F9E98CF9D924C23DB21112F57
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/1fqCSDa28oDsV8WNdx3jsCjP8Dg.roa
Signing time: Wed 15 Jan 2025 12:11:06 +0000
ROA not before: Wed 15 Jan 2025 12:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.216.172.0/24 maxlen: 24
103.216.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:df:de:2f:9e:98:cf:9d:92:4c:23:db:21:11:2f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 15 12:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5fa824836b6f280ec57c58d771de3b028cff038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:f6:75:74:bf:4a:a4:7e:bd:8e:eb:5d:02:
96:ea:b9:74:9f:08:21:a5:e6:de:5e:ed:c8:8b:5b:
a9:5d:59:14:a7:30:7f:f2:c8:97:06:8e:6a:e1:07:
7f:3a:c0:fe:f7:6e:19:49:56:df:00:af:c1:1c:c8:
a7:0a:55:23:d8:11:60:89:69:1b:3d:7d:c4:41:96:
5e:89:fa:25:46:97:12:8b:68:71:3b:ea:a9:77:c2:
9b:cc:bf:58:8d:8a:eb:84:ec:92:d7:79:1e:a8:9b:
8e:ff:0e:5d:83:e1:5e:58:d2:00:03:63:06:9e:f6:
90:db:3f:75:3f:63:04:9c:f2:cb:39:30:3e:f4:ab:
a9:00:c6:da:e9:71:0d:e8:6f:f7:a1:13:04:19:e5:
69:86:a2:e4:c0:c1:4f:32:fd:ce:e4:2c:b3:d6:4c:
a2:af:b3:f2:f2:c2:8f:4f:17:92:31:74:0f:df:fb:
98:8a:d2:97:1d:cf:cd:1c:15:c8:8d:00:c2:e5:a6:
fa:87:d0:16:6d:ee:81:f9:25:4c:1e:43:80:4c:39:
9a:dd:bf:70:21:ed:b7:8a:b9:eb:d3:cb:27:ed:3a:
96:78:f4:1e:a9:fa:e3:d2:be:b8:80:32:0c:78:65:
f8:d3:15:ef:2a:65:4b:37:74:83:dc:59:0b:e8:e8:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FA:82:48:36:B6:F2:80:EC:57:C5:8D:77:1D:E3:B0:28:CF:F0:38
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/1fqCSDa28oDsV8WNdx3jsCjP8Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.172.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:46:4e:58:3e:d6:6e:e5:eb:9e:31:f6:05:f6:ff:af:0e:8c:
0c:d9:f9:0a:a3:8e:88:aa:65:67:7c:6d:38:84:b1:be:ca:7d:
16:2e:5c:e0:08:ec:67:06:ad:a3:58:f3:64:a7:e2:6a:26:5d:
24:ff:b8:5e:41:95:10:d2:c5:e9:89:b8:7f:93:ef:50:7a:d5:
c5:81:2f:53:3b:44:4e:d1:e4:8e:be:14:3c:fd:49:2f:ab:1a:
61:02:01:3b:d6:fb:c5:cc:ef:e5:bd:34:e8:fd:84:03:be:4d:
13:6b:4a:b0:44:84:7b:58:5b:e4:d1:b0:b8:5e:98:39:3b:60:
18:d1:0a:81:d8:45:9f:38:6d:27:5e:55:b0:61:b5:3b:1f:02:
85:53:5f:a3:e5:7e:d4:5b:25:00:e3:11:b9:a8:c7:e3:78:04:
38:97:1c:91:05:5a:13:56:02:11:4e:31:6e:ec:d0:cf:bb:4f:
22:80:0e:43:0e:07:5f:91:b2:b8:06:68:f3:17:58:78:fb:9f:
e7:36:f1:d3:33:ca:8e:31:24:46:ec:28:99:47:f4:3c:6c:d1:
0e:1e:55:c4:32:86:b0:3c:da:3a:b5:6d:c3:75:79:a6:21:1f:
81:95:38:80:4e:2a:49:42:23:16:16:08:0f:df:c5:7d:9e:7d:
ce:41:bc:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRp394vnpjPnZJMI9shES9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjUwMTE1MTIxMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWZhODI0ODM2YjZmMjgwZWM1N2M1OGQ3NzFkZTNiMDI4Y2ZmMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRT2dXS/SqR+vY7rXQKW6rl0nwgh
pebeXu3Ii1upXVkUpzB/8siXBo5q4Qd/OsD+924ZSVbfAK/BHMinClUj2BFgiWkb
PX3EQZZeifolRpcSi2hxO+qpd8KbzL9YjYrrhOyS13keqJuO/w5dg+FeWNIAA2MG
nvaQ2z91P2MEnPLLOTA+9KupAMba6XEN6G/3oRMEGeVphqLkwMFPMv3O5Cyz1kyi
r7Py8sKPTxeSMXQP3/uYitKXHc/NHBXIjQDC5ab6h9AWbe6B+SVMHkOATDma3b9w
Ie23irnr08sn7TqWePQeqfrj0r64gDIMeGX40xXvKmVLN3SD3FkL6OjDHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNX6gkg2tvKA7FfFjXcd47Aoz/A4MB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvMWZxQ1NEYTI4b0RzVjhXTmR4M2pzQ2pQOERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9isMA0G
CSqGSIb3DQEBCwUAA4IBAQCjRk5YPtZu5eueMfYF9v+vDowM2fkKo46IqmVnfG04
hLG+yn0WLlzgCOxnBq2jWPNkp+JqJl0k/7heQZUQ0sXpibh/k+9QetXFgS9TO0RO
0eSOvhQ8/UkvqxphAgE71vvFzO/lvTTo/YQDvk0Ta0qwRIR7WFvk0bC4Xpg5O2AY
0QqB2EWfOG0nXlWwYbU7HwKFU1+j5X7UWyUA4xG5qMfjeAQ4lxyRBVoTVgIRTjFu
7NDPu08igA5DDgdfkbK4BmjzF1h4+5/nNvHTM8qOMSRG7CiZR/Q8bNEOHlXEMoaw
PNo6tW3DdXmmIR+BlTiATipJQiMWFggP38V9nn3OQbwD
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:15:39 2025 by rpki-client