Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IG5mSmtKzkJj8RTljMdMBjniTjs.roa
File: IG5mSmtKzkJj8RTljMdMBjniTjs.roa (raw, json)
Hash identifier: gvOzCSa8vDbFgYDTYfRkyPudCfEKxmfVO6kLEZWirf4=
Subject key identifier: 20:6E:66:4A:6B:4A:CE:42:63:F1:14:E5:8C:C7:4C:06:39:E2:4E:3B
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0195A88170A25F046BD95B3CE74046038CED
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IG5mSmtKzkJj8RTljMdMBjniTjs.roa
Signing time: Tue 18 Mar 2025 09:06:49 +0000
ROA not before: Tue 18 Mar 2025 09:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153656
IP address blocks: 45.135.237.0/24 maxlen: 24
103.100.170.0/24 maxlen: 24
185.235.167.0/24 maxlen: 24
202.71.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:81:70:a2:5f:04:6b:d9:5b:3c:e7:40:46:03:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 18 09:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=206e664a6b4ace4263f114e58cc74c0639e24e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:7c:47:d2:be:54:20:2c:a8:a2:5a:8b:4f:
ff:90:95:72:83:af:cd:99:bc:ce:ca:95:73:4b:0b:
c9:42:4a:7f:8d:14:08:7f:c3:c9:75:b2:06:16:f1:
8d:c3:2e:a2:6f:ce:fc:a6:51:3b:e2:62:99:33:2a:
a8:5a:46:b6:59:dc:32:4a:5e:a4:d3:9c:f4:ae:e8:
93:4b:47:59:b0:41:31:97:a1:f5:4c:bb:4f:fd:90:
71:04:81:b8:10:8a:50:23:c6:31:9f:1b:9a:a6:04:
5c:b1:c9:58:96:c4:85:d2:0e:a8:45:6b:6d:2c:60:
7c:88:71:fb:ff:8d:bf:46:86:d6:5a:7a:4a:20:ef:
69:27:f3:26:0a:e6:e5:41:7f:ec:37:d4:71:c4:90:
ce:91:60:e6:d1:f3:80:ba:d9:c0:ac:08:cc:0d:84:
f6:74:26:e4:5f:10:36:12:b2:1f:8a:c4:35:5c:1a:
5e:f4:4a:be:4f:8b:e3:9b:a5:c8:a3:b6:96:25:bb:
eb:28:ea:11:f5:c0:21:3f:57:e2:0d:ba:a7:b7:38:
e2:56:b2:ef:df:f2:a2:7a:fa:15:1c:65:6a:ad:04:
f1:7b:70:77:73:fe:c4:a7:8b:9e:08:eb:23:79:85:
e6:35:8c:56:20:1c:22:a7:5d:a9:45:29:da:02:88:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:66:4A:6B:4A:CE:42:63:F1:14:E5:8C:C7:4C:06:39:E2:4E:3B
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IG5mSmtKzkJj8RTljMdMBjniTjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.237.0/24
103.100.170.0/24
185.235.167.0/24
202.71.4.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5a:91:64:88:45:02:7f:41:1e:0b:2f:4d:f0:05:61:a6:ef:
a7:c0:c2:72:a9:81:ef:ec:f3:9b:2c:3a:ba:a5:4f:30:21:32:
22:fa:63:be:c5:5d:bd:ca:d4:21:14:ad:05:66:ed:7e:ba:46:
88:77:1b:7e:d1:37:62:9c:3b:c2:fc:ed:ac:ff:9c:df:37:96:
2e:55:d8:9b:6c:4c:da:c1:e6:8c:c5:83:5e:8b:39:71:dd:2d:
4a:ca:05:e6:d0:2d:52:53:64:4e:ec:70:c4:53:66:b1:c9:af:
b3:91:67:9a:ee:a0:b2:c1:ab:6c:b9:47:e7:b0:46:7e:1a:71:
87:96:73:3f:00:eb:24:d9:b0:ad:66:ec:e2:d8:13:2f:20:c8:
0d:fa:84:f6:1b:0b:01:a0:b8:08:f1:5e:95:34:f6:8e:f1:9c:
72:41:42:9e:f7:b6:52:0e:71:78:7f:e1:65:a8:15:03:fc:b6:
e7:a6:3a:8f:27:b7:9d:47:5d:02:ed:c2:7f:bc:4f:d5:46:4e:
82:4e:53:84:b0:d3:fd:88:1a:22:b3:87:fd:91:0f:8b:23:3a:
06:d8:69:4e:5c:70:37:ea:b2:52:d9:bb:1f:27:c0:62:27:1f:
ff:db:6e:4d:f0:fc:af:46:0a:91:e3:e3:43:dc:67:fc:22:8c:
93:67:89:80
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZWogXCiXwRr2Vs850BGA4ztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMzE4MDkwNjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDZlNjY0YTZiNGFjZTQyNjNmMTE0ZTU4Y2M3NGMwNjM5ZTI0ZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArit8R9K+VCAsqKJai0//kJVyg6/N
mbzOypVzSwvJQkp/jRQIf8PJdbIGFvGNwy6ib878plE74mKZMyqoWka2WdwySl6k
05z0ruiTS0dZsEExl6H1TLtP/ZBxBIG4EIpQI8YxnxuapgRcsclYlsSF0g6oRWtt
LGB8iHH7/42/RobWWnpKIO9pJ/MmCublQX/sN9RxxJDOkWDm0fOAutnArAjMDYT2
dCbkXxA2ErIfisQ1XBpe9Eq+T4vjm6XIo7aWJbvrKOoR9cAhP1fiDbqntzjiVrLv
3/KievoVHGVqrQTxe3B3c/7Ep4ueCOsjeYXmNYxWIBwip12pRSnaAogDRwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCBuZkprSs5CY/EU5YzHTAY54k47MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvSUc1bVNtdEt6a0pqOFJUbGpNZE1Cam5pVGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYftAwQA
Z2SqAwQAueunAwQAykcEMA0GCSqGSIb3DQEBCwUAA4IBAQADWpFkiEUCf0EeCy9N
8AVhpu+nwMJyqYHv7PObLDq6pU8wITIi+mO+xV29ytQhFK0FZu1+ukaIdxt+0Tdi
nDvC/O2s/5zfN5YuVdibbEzaweaMxYNeizlx3S1KygXm0C1SU2RO7HDEU2axya+z
kWea7qCywatsuUfnsEZ+GnGHlnM/AOsk2bCtZuzi2BMvIMgN+oT2GwsBoLgI8V6V
NPaO8ZxyQUKe97ZSDnF4f+FlqBUD/LbnpjqPJ7edR10C7cJ/vE/VRk6CTlOEsNP9
iBois4f9kQ+LIzoG2GlOXHA36rJS2bsfJ8BiJx//225N8PyvRgqR4+ND3Gf8IoyT
Z4mA
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:39:25 2025 by rpki-client