Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o3jnOci1LEZmio5eVK_R1X59Bc8.roa
File: o3jnOci1LEZmio5eVK_R1X59Bc8.roa (raw, json)
Hash identifier: ksK9oLd/45fgUjzdDyp1g1OluUQE8WOO6qYAiQZLnSM=
Subject key identifier: A3:78:E7:39:C8:B5:2C:46:66:8A:8E:5E:54:AF:D1:D5:7E:7D:05:CF
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0195D02D614A2E5CF3DEFADBC0C6FA1AAD3F
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o3jnOci1LEZmio5eVK_R1X59Bc8.roa
Signing time: Wed 26 Mar 2025 01:59:49 +0000
ROA not before: Wed 26 Mar 2025 01:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55054
IP address blocks: 103.148.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d0:2d:61:4a:2e:5c:f3:de:fa:db:c0:c6:fa:1a:ad:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 26 01:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a378e739c8b52c46668a8e5e54afd1d57e7d05cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:fe:28:37:e7:db:dc:a2:26:7a:a7:6f:5c:
1d:9c:a9:a0:d1:e7:1e:ca:54:74:8b:b2:f9:72:ff:
55:f2:d3:55:2b:fc:93:f0:76:e2:47:27:c3:0c:3f:
da:9b:bf:aa:37:e1:48:db:bd:d7:d7:14:a0:97:d4:
f2:65:57:76:13:99:ae:2e:91:fc:96:77:42:3f:52:
7c:0d:ae:5c:da:bf:0f:d1:b7:95:88:cc:81:f1:4c:
e8:b3:8c:34:87:5e:67:05:6e:37:92:f8:24:75:70:
d5:1e:a7:0b:d5:1e:0c:a1:6c:8f:6c:b4:80:b6:86:
ec:15:81:89:4b:7a:d2:bb:63:95:27:24:cc:67:33:
04:1f:46:4c:ea:a5:f8:fc:0d:89:2e:81:0c:ec:88:
82:79:4e:aa:43:a9:54:ec:80:c3:d6:72:51:bf:0f:
56:5d:48:d5:b2:94:28:06:f5:fe:72:3f:86:3a:e5:
23:be:5a:66:cb:25:50:d5:e8:0f:a3:4f:12:27:8b:
9e:37:b7:0a:84:2d:7d:25:ef:92:cf:24:5c:9b:94:
6d:40:19:08:35:d6:1f:45:b1:a3:5e:bc:be:91:8f:
c5:2c:87:5d:61:cc:3a:09:ae:e4:0d:18:2f:fe:f1:
5d:63:40:4a:94:b9:f8:d6:57:37:b5:61:70:28:0b:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:78:E7:39:C8:B5:2C:46:66:8A:8E:5E:54:AF:D1:D5:7E:7D:05:CF
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/o3jnOci1LEZmio5eVK_R1X59Bc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.116.0/24
Signature Algorithm: sha256WithRSAEncryption
34:94:16:b9:cf:0d:9f:fc:d5:d2:26:70:7b:c4:54:6d:e9:b0:
23:61:a0:16:e8:b7:36:1b:f6:26:22:7e:97:10:cf:7b:04:ec:
43:e5:6c:ba:58:f3:31:ac:a3:ab:d1:a7:0b:ca:38:e5:06:48:
f9:09:ce:c2:5d:56:27:1b:9c:6e:a8:6e:de:25:b8:c2:db:0c:
df:8b:72:3a:49:d6:5d:85:9e:be:73:67:f1:17:06:e1:65:f0:
92:e7:b6:75:b3:49:4e:0f:cc:e4:fb:23:e3:e0:63:90:d9:48:
6a:a8:b6:42:c2:32:2a:c0:39:4c:7a:80:03:f7:d2:cd:d8:7e:
d0:2d:a1:6e:93:41:27:c2:98:13:99:21:29:99:52:93:57:88:
ff:89:7c:61:7a:4f:28:41:17:4f:1c:57:64:2f:24:3d:00:0a:
71:d4:67:e0:94:00:c5:ad:6d:ec:bd:d7:00:b6:48:3d:66:b5:
c6:40:2e:29:77:e5:de:ed:0a:dd:5d:ea:2d:94:78:00:ef:94:
0e:0e:18:6d:60:f5:ec:17:9c:a2:ee:1c:06:05:55:28:a0:65:
ec:34:78:0a:76:11:0b:a0:bb:ec:54:b3:a4:2f:16:6d:f7:83:
a9:56:eb:69:0a:60:ba:35:57:5b:c7:30:3b:28:cf:81:4c:2c:
35:2f:c8:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXQLWFKLlzz3vrbwMb6Gq0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMzI2MDE1OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzc4ZTczOWM4YjUyYzQ2NjY4YThlNWU1NGFmZDFkNTdlN2QwNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAD+KDfn29yiJnqnb1wdnKmg0ece
ylR0i7L5cv9V8tNVK/yT8HbiRyfDDD/am7+qN+FI273X1xSgl9TyZVd2E5muLpH8
lndCP1J8Da5c2r8P0beViMyB8Uzos4w0h15nBW43kvgkdXDVHqcL1R4MoWyPbLSA
tobsFYGJS3rSu2OVJyTMZzMEH0ZM6qX4/A2JLoEM7IiCeU6qQ6lU7IDD1nJRvw9W
XUjVspQoBvX+cj+GOuUjvlpmyyVQ1egPo08SJ4ueN7cKhC19Je+SzyRcm5RtQBkI
NdYfRbGjXry+kY/FLIddYcw6Ca7kDRgv/vFdY0BKlLn41lc3tWFwKAsqPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKN45znItSxGZoqOXlSv0dV+fQXPMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvbzNqbk9jaTFMRVptaW81ZVZLX1IxWDU5QmM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5R0MA0G
CSqGSIb3DQEBCwUAA4IBAQA0lBa5zw2f/NXSJnB7xFRt6bAjYaAW6Lc2G/YmIn6X
EM97BOxD5Wy6WPMxrKOr0acLyjjlBkj5Cc7CXVYnG5xuqG7eJbjC2wzfi3I6SdZd
hZ6+c2fxFwbhZfCS57Z1s0lOD8zk+yPj4GOQ2UhqqLZCwjIqwDlMeoAD99LN2H7Q
LaFuk0EnwpgTmSEpmVKTV4j/iXxhek8oQRdPHFdkLyQ9AApx1GfglADFrW3svdcA
tkg9ZrXGQC4pd+Xe7QrdXeotlHgA75QODhhtYPXsF5yi7hwGBVUooGXsNHgKdhEL
oLvsVLOkLxZt94OpVutpCmC6NVdbxzA7KM+BTCw1L8ic
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:55:05 2025 by rpki-client