Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa
File: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (raw, json)
Hash identifier: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=
Subject key identifier: 6D:E6:13:AB:56:52:53:A0:A4:39:80:31:EE:BC:AA:0F:A6:DD:DD:C3
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019421442CEF3061E32D3B7CE8D833D0D772
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199218
IP address blocks: 103.69.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:ef:30:61:e3:2d:3b:7c:e8:d8:33:d0:d7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6de613ab565253a0a4398031eebcaa0fa6ddddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:50:05:2b:c8:ea:58:70:5b:0e:bb:9a:74:
9c:4a:05:71:43:02:96:74:ef:a8:98:6e:e9:a6:10:
37:f6:09:f6:cf:aa:e8:c8:7b:7c:f1:3a:b6:f4:31:
27:c0:3c:a2:d8:0f:9c:b8:14:b0:61:26:95:cd:d1:
de:ee:73:55:2f:28:0a:96:4f:7c:54:94:38:67:f9:
85:9e:a6:62:f2:8e:ef:45:df:55:40:86:31:3a:1e:
1d:84:8b:84:57:c2:05:fa:5c:d5:77:13:d1:e8:9b:
94:74:cc:50:b9:50:bd:7b:d4:67:c5:30:62:6a:c1:
7d:a4:4f:25:6e:d9:6a:56:43:b4:65:49:5d:a7:19:
06:dc:55:cb:c6:3d:d4:59:1a:eb:97:69:a2:a0:57:
92:ee:85:9f:70:11:4e:41:ea:35:fa:36:b5:2f:fa:
dd:62:06:ad:36:00:27:b8:e8:c6:05:46:a6:1c:85:
57:c9:ae:dd:ca:fb:25:7f:ae:9a:76:b7:4d:b3:b9:
5b:d3:34:3f:7d:fd:9d:98:33:3a:65:8a:3a:a6:f5:
91:9f:07:57:7b:81:92:0e:91:c3:6c:31:eb:2f:55:
48:97:2d:07:dc:33:b7:8b:e8:32:6a:06:cd:37:33:
00:f2:03:b9:3d:ff:e8:cf:97:7a:f6:98:6d:07:37:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:13:AB:56:52:53:A0:A4:39:80:31:EE:BC:AA:0F:A6:DD:DD:C3
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.224.0/24
Signature Algorithm: sha256WithRSAEncryption
68:af:42:12:b2:61:32:2d:1f:28:d4:0f:4e:c4:fa:24:64:12:
dd:45:e3:15:ee:2c:2c:74:92:01:bf:4c:49:89:96:e3:88:98:
67:d6:ef:64:2f:7b:68:80:1b:17:50:82:a6:ff:a4:12:08:3a:
0c:6e:9d:7a:1a:ff:ee:1f:63:39:f6:35:78:14:8b:ae:91:be:
2f:13:66:e2:f9:5b:a7:53:eb:18:02:70:c8:5b:ef:5f:67:29:
60:c6:84:18:f9:55:c9:7e:fd:67:1b:3a:c7:f1:46:38:20:5f:
22:92:32:5e:d1:8a:18:c4:8e:93:cf:2b:94:9a:0e:e6:91:2d:
09:08:14:34:f3:ff:0d:67:98:d5:a7:e9:e9:0d:36:0f:94:cd:
e3:f0:8a:2f:7e:da:32:4d:ec:96:f4:41:0c:c6:50:df:dc:d6:
66:23:4b:53:0e:03:39:a6:df:62:99:30:da:e4:b3:18:29:5e:
eb:09:48:e7:ac:bf:a2:d6:52:38:cc:0b:f7:20:93:07:fc:5b:
d4:f1:37:2e:4f:f6:59:e8:02:fa:60:b6:b6:80:b9:14:e2:94:
a0:c1:8c:c2:1a:a9:65:7a:59:49:e3:1e:bf:2c:a5:cd:cd:14:
8c:e2:e6:57:b4:e8:3a:d3:bf:b0:2a:87:39:9e:1c:4f:57:4d:
97:d9:54:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRCzvMGHjLTt86Ngz0NdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4
MzFhOWQwHhcNMjUwMTAxMDk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGU2MTNhYjU2NTI1M2EwYTQzOTgwMzFlZWJjYWEwZmE2ZGRkZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRtQBSvI6lhwWw67mnScSgVxQwKW
dO+omG7pphA39gn2z6royHt88Tq29DEnwDyi2A+cuBSwYSaVzdHe7nNVLygKlk98
VJQ4Z/mFnqZi8o7vRd9VQIYxOh4dhIuEV8IF+lzVdxPR6JuUdMxQuVC9e9RnxTBi
asF9pE8lbtlqVkO0ZUldpxkG3FXLxj3UWRrrl2mioFeS7oWfcBFOQeo1+ja1L/rd
YgatNgAnuOjGBUamHIVXya7dyvslf66adrdNs7lb0zQ/ff2dmDM6ZYo6pvWRnwdX
e4GSDpHDbDHrL1VIly0H3DO3i+gyagbNNzMA8gO5Pf/oz5d69phtBze5yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG3mE6tWUlOgpDmAMe68qg+m3d3DMB8GA1UdIwQY
MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt
NzZhMWQ0ZDgzMTk3LzEvYmVZVHExWlNVNkNrT1lBeDdyeXFENmJkM2NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3
LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0XgMA0G
CSqGSIb3DQEBCwUAA4IBAQBor0ISsmEyLR8o1A9OxPokZBLdReMV7iwsdJIBv0xJ
iZbjiJhn1u9kL3togBsXUIKm/6QSCDoMbp16Gv/uH2M59jV4FIuukb4vE2bi+Vun
U+sYAnDIW+9fZylgxoQY+VXJfv1nGzrH8UY4IF8ikjJe0YoYxI6TzyuUmg7mkS0J
CBQ08/8NZ5jVp+npDTYPlM3j8IovftoyTeyW9EEMxlDf3NZmI0tTDgM5pt9imTDa
5LMYKV7rCUjnrL+i1lI4zAv3IJMH/FvU8TcuT/ZZ6AL6YLa2gLkU4pSgwYzCGqll
ellJ4x6/LKXNzRSM4uZXtOg607+wKoc5nhxPV02X2VRv
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:18:49 2025 by rpki-client