Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa
File: 1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa (raw, json)
Hash identifier: LsbUeEH3vILU1vYuOdyXhzxDEs0KvzxNjjp/1muj1K4=
Subject key identifier: F9:3E:06:FD:A0:4D:EF:F8:64:A0:9D:99:81:DC:0A:58:6A:99:53:19
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 0194236984D7D4629B2CDB05617D9F40D1BD
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214036
IP address blocks: 103.229.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:84:d7:d4:62:9b:2c:db:05:61:7d:9f:40:d1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f93e06fda04deff864a09d9981dc0a586a995319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:e2:10:1d:42:87:21:97:38:bd:9d:3d:bc:
66:d0:55:26:49:12:cc:ee:dd:65:45:c5:b9:2a:1c:
e1:33:74:ce:84:84:59:6f:d8:ad:65:de:5d:45:83:
ac:8a:2a:a9:33:98:da:ca:df:79:73:67:3f:59:40:
73:f8:41:f5:7b:95:99:d0:31:44:8c:e4:d8:28:95:
19:f5:22:8e:d5:b8:fe:eb:04:e9:7d:bd:d0:00:c8:
fd:d0:63:76:90:e2:37:1e:e9:5a:27:58:6c:5f:f8:
e8:3d:11:10:97:50:83:d9:1f:14:ef:c1:ed:f6:14:
74:f7:fd:4e:68:28:af:fe:dc:89:03:3f:a3:fb:d9:
12:8f:ee:7a:22:2d:30:71:63:4c:91:be:0e:90:a6:
c2:94:a8:2a:a6:d9:da:12:f9:65:7b:57:b1:06:a3:
72:9a:1c:42:1a:f1:ac:14:14:22:d0:29:66:17:63:
82:a9:9e:ad:54:e7:c4:3d:8b:76:5f:df:64:5f:a5:
d6:c9:92:86:f2:44:03:47:d9:f7:22:b2:a4:8a:56:
0e:5d:20:dd:4b:3c:e4:51:dd:b2:6a:64:06:ca:8f:
76:49:7c:d0:d5:e2:1a:ac:fd:04:38:5d:21:82:bf:
b5:ff:ba:b3:2a:8e:5f:28:9c:16:d9:fc:c2:e6:d6:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:06:FD:A0:4D:EF:F8:64:A0:9D:99:81:DC:0A:58:6A:99:53:19
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/1-T4G_aBN7_hkoJ2ZgdwKWGqZUxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:02:ee:37:98:67:29:67:0e:d3:a9:2a:0c:cb:d5:0f:7a:8e:
4b:fd:b0:7b:33:18:5a:12:5d:0d:db:53:fd:ee:1b:7b:65:d6:
fb:1f:cb:0d:4b:38:2d:0d:2b:5c:4a:55:9e:da:0d:a1:2d:9c:
44:5a:6e:ef:ba:7f:24:ea:84:44:9d:ee:45:e9:f5:e7:d5:98:
ad:8a:04:3d:6b:e4:2b:79:44:85:24:3c:05:b1:75:9b:90:f9:
dd:11:39:31:58:02:d2:8f:0d:a8:a0:00:e5:28:94:df:77:6a:
ed:71:60:e2:82:9d:1d:1f:9f:0f:28:42:14:89:cf:e7:be:51:
0c:3e:d1:94:ef:54:97:85:7f:47:34:42:8e:99:99:1c:3a:7e:
b0:6c:4e:3c:2e:eb:90:fe:57:a6:59:25:67:6c:91:ec:24:bc:
c1:d8:7b:ef:b4:2b:fb:5b:a1:2b:cc:e4:1c:f7:05:50:cc:ca:
fa:e1:3d:b5:94:84:72:84:38:41:72:69:04:79:63:af:bc:0b:
10:98:9b:1e:62:37:ef:ba:62:37:88:0e:e0:0f:d2:ec:91:74:
ce:ba:35:b3:a0:79:39:f5:ab:79:a0:a0:32:5f:bc:6f:56:52:
9a:06:8d:52:cf:ea:f8:d0:e6:f2:e2:f9:22:04:c1:a3:eb:1e:
d9:33:e7:96
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQjaYTX1GKbLNsFYX2fQNG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjUwMTAxMTk0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTNlMDZmZGEwNGRlZmY4NjRhMDlkOTk4MWRjMGE1ODZhOTk1MzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXniEB1ChyGXOL2dPbxm0FUmSRLM
7t1lRcW5KhzhM3TOhIRZb9itZd5dRYOsiiqpM5jayt95c2c/WUBz+EH1e5WZ0DFE
jOTYKJUZ9SKO1bj+6wTpfb3QAMj90GN2kOI3HulaJ1hsX/joPREQl1CD2R8U78Ht
9hR09/1OaCiv/tyJAz+j+9kSj+56Ii0wcWNMkb4OkKbClKgqptnaEvlle1exBqNy
mhxCGvGsFBQi0ClmF2OCqZ6tVOfEPYt2X99kX6XWyZKG8kQDR9n3IrKkilYOXSDd
SzzkUd2yamQGyo92SXzQ1eIarP0EOF0hgr+1/7qzKo5fKJwW2fzC5tZJ4wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPk+Bv2gTe/4ZKCdmYHcClhqmVMZMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvMS1UNEdfYUJON19oa29KMlpnZHdLV0dxWlV4ay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTUvNDUyMmZiLWMxZGEtNGNjYy1hN2M3LWEwNDNlMWI2N2I5
NC8xL1FwSzEya3RQX3E5eUJrbFJqN3FxRU1YTEtCRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGflUTAN
BgkqhkiG9w0BAQsFAAOCAQEAOwLuN5hnKWcO06kqDMvVD3qOS/2wezMYWhJdDdtT
/e4be2XW+x/LDUs4LQ0rXEpVntoNoS2cRFpu77p/JOqERJ3uRen159WYrYoEPWvk
K3lEhSQ8BbF1m5D53RE5MVgC0o8NqKAA5SiU33dq7XFg4oKdHR+fDyhCFInP575R
DD7RlO9Ul4V/RzRCjpmZHDp+sGxOPC7rkP5XplklZ2yR7CS8wdh777Qr+1uhK8zk
HPcFUMzK+uE9tZSEcoQ4QXJpBHljr7wLEJibHmI377piN4gO4A/S7JF0zro1s6B5
OfWreaCgMl+8b1ZSmgaNUs/q+NDm8uL5IgTBo+se2TPnlg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:31:44 2025 by rpki-client