Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/3-eMi9JT7hPc3NDPKynwHnHwGvg.roa
File: 3-eMi9JT7hPc3NDPKynwHnHwGvg.roa (raw, json)
Hash identifier: oSIP6BTgdOLnonKZ26sBvhO6MiVPEpNSBESIrEziWKI=
Subject key identifier: DF:E7:8C:8B:D2:53:EE:13:DC:DC:D0:CF:2B:29:F0:1E:71:F0:1A:F8
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0195C96A1F8E8001F16BBD466703651907A6
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/3-eMi9JT7hPc3NDPKynwHnHwGvg.roa
Signing time: Mon 24 Mar 2025 18:28:50 +0000
ROA not before: Mon 24 Mar 2025 18:28:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 103.147.170.0/24 maxlen: 24
103.148.141.0/24 maxlen: 24
103.149.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:6a:1f:8e:80:01:f1:6b:bd:46:67:03:65:19:07:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 24 18:28:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfe78c8bd253ee13dcdcd0cf2b29f01e71f01af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:f0:17:8f:c8:8e:03:01:07:46:b6:93:e9:
53:b6:4d:b2:bc:fa:c6:e4:f7:65:54:6b:2a:33:36:
b0:d9:7f:86:f7:cf:db:5c:2e:20:dc:8e:a7:c2:0b:
d3:a3:53:98:f6:91:9c:d2:a7:14:c9:d4:a3:38:9c:
57:2e:4e:9b:2d:b1:4a:fe:cc:29:3b:e0:10:e5:b7:
b1:11:b5:89:d2:b4:70:48:5a:ee:d2:6a:a1:59:d2:
a9:ad:33:12:91:57:7b:df:9e:84:5b:5e:66:a5:a9:
9b:f7:85:0a:e0:66:d1:ba:94:55:3e:43:1c:ba:a8:
10:dc:69:5f:9b:43:75:36:1b:31:bd:ab:aa:e4:f4:
2f:c1:af:22:b1:2f:f2:b1:58:87:1f:40:88:0d:c7:
ed:39:49:72:ec:03:d2:b3:41:1a:bd:8d:91:dd:73:
97:0c:95:78:36:56:83:37:12:b1:ba:27:09:66:c5:
5c:84:83:c9:53:21:21:bc:72:53:89:a7:11:55:31:
89:7d:f2:7f:0e:cf:e3:6d:3d:ac:40:b4:d2:57:15:
6c:6e:b4:67:24:2f:91:92:e6:37:3d:e5:9a:6b:3d:
e6:1c:14:3f:bc:24:82:e1:6d:a8:88:98:29:40:e4:
f5:79:c9:fb:fb:14:f3:44:68:8b:aa:42:6f:ef:1a:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E7:8C:8B:D2:53:EE:13:DC:DC:D0:CF:2B:29:F0:1E:71:F0:1A:F8
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/3-eMi9JT7hPc3NDPKynwHnHwGvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.170.0/24
103.148.141.0/24
103.149.85.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bf:70:6e:93:1e:69:b4:32:09:8d:fe:3f:95:a1:87:be:d4:
53:0d:f2:d7:c2:21:e3:29:c0:83:05:bc:13:94:0f:6f:17:2d:
87:f0:6a:f4:90:dd:72:99:37:1c:7c:6a:17:be:8d:db:0e:74:
c4:41:47:81:c1:bd:24:57:6d:23:53:4b:d1:d9:c1:a8:9e:eb:
fb:36:a7:76:9b:d6:66:9a:d1:17:2b:83:93:d4:f4:45:6e:a9:
2a:61:14:d7:25:9b:2f:26:04:f7:8c:53:0b:bc:28:93:6d:05:
d2:01:5c:2a:da:e3:54:2f:5b:d2:0a:41:1b:7f:6d:58:7f:7e:
03:e2:28:9c:b1:3e:18:2e:ba:62:bc:c9:a0:f2:e0:da:ca:7d:
64:48:12:51:3d:c9:37:09:f7:f7:ad:5e:11:8e:29:69:cb:bf:
45:f3:f3:9e:51:3a:8c:d8:cf:6c:98:84:b5:d9:d9:4c:fe:5f:
71:b9:87:3a:b9:80:10:f4:f9:03:54:b1:40:e1:a9:7f:41:de:
99:d0:c9:f7:93:00:6a:1c:57:39:12:66:da:eb:aa:89:fb:56:
7a:14:14:26:a5:53:23:9d:e0:c4:2c:53:35:4f:17:d6:5d:8e:
ac:b9:4d:44:9e:3e:08:fa:2f:d7:7e:bd:e5:3a:1f:f3:30:1e:
f6:03:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:08:22 2025 by rpki-client