Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/EUqjiReGy7qg8xdqlzGuUZLL58Q.roa
File: EUqjiReGy7qg8xdqlzGuUZLL58Q.roa (raw, json)
Hash identifier: fL+9Tk23mLtaNXHP85mWZzSSM7ll7XHX3rv//gFyimc=
Subject key identifier: 11:4A:A3:89:17:86:CB:BA:A0:F3:17:6A:97:31:AE:51:92:CB:E7:C4
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019514EE651EC935C85FCA535AA4294AAB43
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/EUqjiReGy7qg8xdqlzGuUZLL58Q.roa
Signing time: Mon 17 Feb 2025 17:22:02 +0000
ROA not before: Mon 17 Feb 2025 17:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36137
IP address blocks: 103.17.201.0/24 maxlen: 24
103.17.202.0/24 maxlen: 24
103.17.203.0/24 maxlen: 24
103.124.156.0/23 maxlen: 23
110.34.32.0/24 maxlen: 24
110.34.37.0/24 maxlen: 24
110.34.38.0/24 maxlen: 24
192.144.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:ee:65:1e:c9:35:c8:5f:ca:53:5a:a4:29:4a:ab:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Feb 17 17:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=114aa3891786cbbaa0f3176a9731ae5192cbe7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:c3:7c:80:e5:48:5d:cc:b6:5b:8b:d0:6a:
ee:3d:29:b3:8d:c3:65:21:6b:fc:f0:d6:e9:64:34:
c8:98:bf:9c:d4:c1:6f:9a:5f:5e:a8:64:c7:6b:57:
fa:f6:94:58:2d:f3:0e:f8:7f:af:7d:a0:02:e9:31:
82:09:30:4e:b3:af:a8:fd:ea:24:be:88:0a:16:91:
2c:3c:d3:ac:ad:36:76:75:99:a2:d9:06:c5:a9:f9:
1c:64:75:ad:81:04:91:0f:ee:eb:66:e7:91:67:52:
80:03:06:fe:6c:8e:91:13:7e:e1:73:e0:47:48:28:
c3:ba:22:58:13:98:d9:d3:31:38:69:cd:ed:3e:63:
cd:5d:e9:27:db:82:47:50:4f:91:7d:04:15:58:c4:
0b:ba:59:da:bc:0d:b2:55:ad:6d:3f:c0:93:db:42:
82:42:2f:a5:ad:25:bd:88:15:6c:1d:b4:b9:48:87:
a4:73:77:47:45:0f:c9:d1:5f:74:58:e6:32:56:a6:
f8:62:67:f5:ec:2c:9c:32:94:3b:66:14:5a:6e:ae:
d7:a8:20:52:7c:16:07:6b:b8:11:ea:29:1e:dc:50:
ff:2e:8c:1c:2b:da:82:e8:c0:a1:fb:d0:d9:89:b1:
bc:79:7a:95:cc:70:a4:10:c4:8d:1b:c6:fa:54:6f:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:A3:89:17:86:CB:BA:A0:F3:17:6A:97:31:AE:51:92:CB:E7:C4
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/EUqjiReGy7qg8xdqlzGuUZLL58Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.201.0-103.17.203.255
103.124.156.0/23
110.34.32.0/24
110.34.37.0-110.34.38.255
192.144.78.0/23
Signature Algorithm: sha256WithRSAEncryption
34:72:ec:07:50:a1:5c:b0:22:f1:af:9a:ae:22:47:13:6c:14:
d5:f2:87:1f:ec:5f:94:9e:35:f6:c9:c1:b8:6b:1d:5b:3c:1f:
96:48:fc:92:02:98:60:7d:ce:df:5f:2a:ca:e5:18:6f:14:80:
c2:3c:94:47:4f:1d:69:3a:42:ed:1d:f8:b6:9b:8e:e9:99:f2:
e7:c0:25:48:5e:ca:45:4c:28:12:25:83:e7:cf:41:1f:49:24:
3c:b9:ba:e2:d1:69:57:c6:ce:22:a3:7e:12:ac:ca:c4:ab:03:
f1:b0:85:49:ed:ad:45:da:bc:2e:b4:27:8a:7b:6c:34:4c:1d:
6f:0f:91:88:52:ac:ad:a6:72:b6:a1:d8:a1:f6:e9:e3:a3:1f:
e6:34:03:5c:02:53:ac:db:bb:ae:1a:a5:1f:70:72:e3:d3:c3:
da:45:61:f2:99:7e:15:e7:a0:b5:77:03:1c:0f:3a:08:c7:26:
1e:e3:d1:5e:b6:44:fd:7e:7e:3f:1a:5f:38:16:04:51:99:8e:
0d:00:1d:98:ac:ba:1e:cf:5f:bf:d7:3f:bd:de:f6:43:47:58:
40:3a:6e:3e:66:12:c5:0b:80:6f:b1:f9:a3:38:b6:e0:d5:1b:
51:db:ef:62:9b:b4:8b:2e:9a:2f:46:53:30:d6:9f:f7:fd:87:
a6:27:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:31:58 2025 by rpki-client