Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/vjHRtpa8vAFScWSYp1ZeGUk89kA.roa
File: vjHRtpa8vAFScWSYp1ZeGUk89kA.roa (raw, json)
Hash identifier: dMn1XDEIhPP60lEIdmR9LVkqJefLKzTxfXn0U7ywUgg=
Subject key identifier: BE:31:D1:B6:96:BC:BC:01:52:71:64:98:A7:56:5E:19:49:3C:F6:40
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 0195DD9032F29BFD2AD4AF825D148EA7B90E
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/vjHRtpa8vAFScWSYp1ZeGUk89kA.roa
Signing time: Fri 28 Mar 2025 16:22:49 +0000
ROA not before: Fri 28 Mar 2025 16:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399195
IP address blocks: 103.17.201.0/24 maxlen: 24
150.107.48.0/22 maxlen: 22
192.144.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:90:32:f2:9b:fd:2a:d4:af:82:5d:14:8e:a7:b9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 28 16:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be31d1b696bcbc0152716498a7565e19493cf640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:a3:97:d3:c7:f0:9e:aa:a6:6f:f8:df:66:
34:c8:08:64:0a:7e:79:aa:29:d7:56:8c:3f:03:db:
55:bf:a1:34:92:be:ce:3e:34:53:62:28:06:27:00:
55:e4:9e:ba:72:28:24:1b:dd:89:48:48:7a:3a:6e:
cb:da:4d:b1:5a:d7:7e:be:38:e5:78:94:60:90:ce:
06:14:56:5c:fe:1f:ef:c5:7a:d7:a6:28:a6:db:88:
64:bb:39:88:06:84:6d:07:ae:8c:ac:00:2d:7c:ca:
ce:db:a2:a0:ad:e2:7e:f5:5a:de:79:03:57:62:bf:
8e:71:f3:88:b7:b4:ee:b5:26:37:bf:d6:dd:ce:85:
b5:a4:68:0a:0b:5c:2f:89:61:e0:4c:e0:ec:c7:82:
e1:af:c9:ac:04:12:bc:26:35:f8:4c:0f:5e:32:26:
bc:24:95:a1:2f:35:5b:4d:33:64:cc:04:7a:3e:81:
97:e4:4f:7e:ca:c9:ef:03:59:36:03:5f:73:60:c9:
73:03:86:d2:7c:90:dc:ab:7f:92:a3:c0:8e:57:87:
45:d6:a7:10:c8:d4:79:9d:13:93:86:69:10:70:fb:
1c:d3:9a:fb:b3:e9:b0:4c:c5:ad:50:fa:3d:44:85:
c8:c4:a9:17:4a:0e:a9:c9:fa:1e:81:13:34:7e:5f:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:31:D1:B6:96:BC:BC:01:52:71:64:98:A7:56:5E:19:49:3C:F6:40
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/vjHRtpa8vAFScWSYp1ZeGUk89kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.201.0/24
150.107.48.0/22
192.144.78.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:fc:8e:0c:54:d8:4e:ac:ee:16:b1:e7:a9:de:3f:fc:fc:52:
c4:f1:eb:5a:45:5d:22:4f:39:91:9e:9a:86:2f:cd:3a:25:c8:
2d:91:2a:05:8c:73:ad:34:b3:28:b6:3b:eb:64:d5:5e:58:6c:
df:7b:61:47:83:4a:44:65:bc:e2:1e:4b:cf:f6:24:e3:c5:d8:
70:5d:f6:d2:40:17:83:a2:9a:64:3a:90:30:fb:f9:c4:c0:36:
71:d9:28:2f:d2:7f:a7:4f:a8:13:c0:c1:b5:20:8d:3c:96:86:
89:c2:78:03:3f:53:32:2c:49:08:00:b2:6a:31:06:65:56:de:
ca:26:a3:fa:7f:99:cc:02:f8:a2:e3:80:bc:bd:58:b6:05:d5:
ef:37:f8:27:a8:90:65:eb:44:b4:57:17:3e:69:ab:f1:32:56:
a6:10:62:3e:45:95:68:8f:b4:10:55:86:4c:a0:06:32:2b:f7:
b9:7d:9f:62:e0:64:e8:cf:0c:ea:63:ca:cc:09:49:3f:14:65:
26:3a:8f:09:42:bc:50:e6:07:bf:99:7a:4e:92:91:42:80:84:
7c:be:5d:3a:79:6f:7d:7b:d5:03:52:20:e5:85:fb:4b:fa:35:
a8:a0:dc:dc:8a:ce:28:e9:b2:9c:9e:39:72:4d:57:bd:9f:24:
fd:f4:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:44:06 2025 by rpki-client