Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/oJeAWSGr8gD3PXO9rzjxXx4-ZyA.roa
File: oJeAWSGr8gD3PXO9rzjxXx4-ZyA.roa (raw, json)
Hash identifier: Jxu2QQjAL0Qu9NCUdoEoeCIiAUW2HRHCWONMi80RPg0=
Subject key identifier: A0:97:80:59:21:AB:F2:00:F7:3D:73:BD:AF:38:F1:5F:1E:3E:67:20
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01957A9C03ED211AF5A79190F8D9A337B7E5
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/oJeAWSGr8gD3PXO9rzjxXx4-ZyA.roa
Signing time: Sun 09 Mar 2025 11:13:19 +0000
ROA not before: Sun 09 Mar 2025 11:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 103.211.101.0/24 maxlen: 24
124.155.240.0/24 maxlen: 24
124.155.241.0/24 maxlen: 24
124.155.242.0/24 maxlen: 24
124.155.243.0/24 maxlen: 24
124.155.244.0/24 maxlen: 24
124.155.245.0/24 maxlen: 24
124.155.246.0/24 maxlen: 24
124.155.247.0/24 maxlen: 24
124.155.249.0/24 maxlen: 24
124.155.250.0/24 maxlen: 24
124.155.252.0/24 maxlen: 24
124.155.253.0/24 maxlen: 24
124.155.254.0/24 maxlen: 24
124.155.255.0/24 maxlen: 24
202.71.6.0/24 maxlen: 24
202.71.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:9c:03:ed:21:1a:f5:a7:91:90:f8:d9:a3:37:b7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 9 11:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a097805921abf200f73d73bdaf38f15f1e3e6720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:56:12:9d:2e:7a:df:81:2e:06:2f:b9:06:
54:40:20:b3:f4:eb:e8:db:5d:08:c3:5d:92:91:23:
e7:21:1a:2a:b5:6f:77:1e:2a:fe:4a:87:54:0c:ab:
61:4e:5e:58:da:7d:ab:63:24:d2:c4:aa:6d:a5:97:
16:c2:bb:27:d5:4c:86:17:03:0e:6f:6f:4a:00:e9:
d1:4e:a7:ce:63:9e:1c:f3:fc:74:a8:43:8a:07:f2:
62:36:cf:92:14:78:be:5b:32:36:51:ce:b8:3f:60:
47:8a:fb:75:64:92:30:ae:a0:ba:66:1a:7b:89:da:
71:dd:d0:03:43:c7:65:27:40:a1:2b:32:ac:95:82:
be:a4:f2:66:c1:b7:84:05:f3:ef:39:5d:11:e4:16:
55:e9:d2:5a:8f:d1:4f:c5:31:83:20:b8:67:93:41:
3b:1d:d7:57:8b:8d:94:ca:56:b9:ae:57:75:74:0e:
9f:50:f8:57:90:9c:2c:62:21:bf:2b:43:83:3e:25:
de:7c:36:aa:bc:0a:63:82:de:e2:60:f1:5e:f5:6a:
81:ad:82:26:57:06:a7:d0:6e:d7:30:ba:80:9a:4a:
c3:1d:a8:e5:f2:bb:11:17:86:b6:f3:f0:67:f6:56:
40:c2:f5:0b:88:06:77:e7:6b:b5:00:6e:5c:04:e1:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:80:59:21:AB:F2:00:F7:3D:73:BD:AF:38:F1:5F:1E:3E:67:20
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/oJeAWSGr8gD3PXO9rzjxXx4-ZyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.101.0/24
124.155.240.0/21
124.155.249.0-124.155.250.255
124.155.252.0/22
202.71.6.0/23
Signature Algorithm: sha256WithRSAEncryption
23:42:57:20:18:d4:56:0a:52:3f:9e:94:64:3e:84:f5:de:05:
bc:c6:00:24:0a:d3:f5:bf:72:7f:0d:90:e5:59:82:15:25:9e:
65:cf:58:ba:74:6e:cf:37:e2:48:6c:1a:aa:4f:50:0f:bf:22:
30:46:22:3a:71:89:fb:e1:8e:0f:d0:a6:77:35:4e:ed:bb:a1:
8c:cc:e4:82:f5:46:92:23:f4:03:2e:70:0f:a2:c1:b8:17:e0:
7e:1d:21:c7:6d:8d:a9:3d:88:5c:3f:75:51:a4:3d:0c:b4:b1:
91:8c:76:8b:3b:05:75:9e:e1:9a:9a:f4:f1:77:fe:3b:06:f8:
3f:e6:9d:f6:bd:86:00:29:b4:d5:f4:91:16:ff:5c:f4:21:86:
1a:42:03:a4:4e:1f:b9:3c:07:8f:ff:e2:09:34:17:a0:1d:30:
ec:ab:aa:0e:38:18:10:62:e2:b6:7c:9d:48:3d:75:d0:d1:aa:
c3:7a:40:6d:7a:1d:a1:c9:91:f1:28:c0:a9:c5:d2:e5:36:0e:
45:58:c9:19:66:fa:e9:5f:26:99:c5:61:75:ac:24:e0:e3:b5:
36:87:a9:b1:ac:68:0a:09:da:43:b7:bf:f1:c8:55:1a:8d:27:
56:bb:ad:76:9b:94:2a:06:8b:8d:f0:71:12:be:f1:f9:88:af:
0a:4f:99:ab
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZV6nAPtIRr1p5GQ+NmjN7flMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMzA5MTExMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDk3ODA1OTIxYWJmMjAwZjczZDczYmRhZjM4ZjE1ZjFlM2U2NzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhBWEp0uet+BLgYvuQZUQCCz9Ovo
210Iw12SkSPnIRoqtW93Hir+SodUDKthTl5Y2n2rYyTSxKptpZcWwrsn1UyGFwMO
b29KAOnRTqfOY54c8/x0qEOKB/JiNs+SFHi+WzI2Uc64P2BHivt1ZJIwrqC6Zhp7
idpx3dADQ8dlJ0ChKzKslYK+pPJmwbeEBfPvOV0R5BZV6dJaj9FPxTGDILhnk0E7
HddXi42Uyla5rld1dA6fUPhXkJwsYiG/K0ODPiXefDaqvApjgt7iYPFe9WqBrYIm
Vwan0G7XMLqAmkrDHajl8rsRF4a28/Bn9lZAwvULiAZ352u1AG5cBOFcRwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFKCXgFkhq/IA9z1zva848V8ePmcgMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvb0plQVdTR3I4Z0QzUFhPOXJ6anhYeDQtWnlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAZ9NlAwQD
fJvwMAwDBAB8m/kDBAB8m/oDBAJ8m/wDBAHKRwYwDQYJKoZIhvcNAQELBQADggEB
ACNCVyAY1FYKUj+elGQ+hPXeBbzGACQK0/W/cn8NkOVZghUlnmXPWLp0bs834khs
GqpPUA+/IjBGIjpxifvhjg/Qpnc1Tu27oYzM5IL1RpIj9AMucA+iwbgX4H4dIcdt
jak9iFw/dVGkPQy0sZGMdos7BXWe4Zqa9PF3/jsG+D/mnfa9hgAptNX0kRb/XPQh
hhpCA6ROH7k8B4//4gk0F6AdMOyrqg44GBBi4rZ8nUg9ddDRqsN6QG16HaHJkfEo
wKnF0uU2DkVYyRlm+ulfJpnFYXWsJODjtTaHqbGsaAoJ2kO3v/HIVRqNJ1a7rXab
lCoGi43wcRK+8fmIrwpPmas=
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:22:02 2025 by rpki-client