Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/1_ruDitg-6LxddfkA6q38XzXkH4.roa
File: 1_ruDitg-6LxddfkA6q38XzXkH4.roa (raw, json)
Hash identifier: lGp1nMpC3NcaRk79De8I+hSHtyRyafRxC+4jFnplayI=
Subject key identifier: D7:FA:EE:0E:2B:60:FB:A2:F1:75:D7:E4:03:AA:B7:F1:7C:D7:90:7E
Certificate issuer: /CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Certificate serial: 0193E154148AA81BAEA0CBFD53E85DC48E68
Authority key identifier: 41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/1_ruDitg-6LxddfkA6q38XzXkH4.roa
Signing time: Thu 19 Dec 2024 23:50:03 +0000
ROA not before: Thu 19 Dec 2024 23:50:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 46.235.15.0/24 maxlen: 32
103.54.88.0/23 maxlen: 32
103.54.90.0/23 maxlen: 32
103.126.48.0/24 maxlen: 32
103.126.49.0/24 maxlen: 32
103.209.228.0/24 maxlen: 32
103.209.229.0/24 maxlen: 32
2a00:9940::/30 maxlen: 128
2a00:9944::/30 maxlen: 128
2a04:e880::/30 maxlen: 128
2a04:e884::/30 maxlen: 128
2a06:4b80::/30 maxlen: 128
2a06:4b84::/30 maxlen: 128
2a06:8540::/30 maxlen: 128
2a06:8544::/30 maxlen: 128
2a06:9dc0::/30 maxlen: 128
2a06:9dc4::/30 maxlen: 128
2a07:35c0::/30 maxlen: 128
2a07:35c4::/30 maxlen: 128
2a09:2340::/30 maxlen: 128
2a09:2344::/30 maxlen: 128
2a0a:6cc0::/30 maxlen: 128
2a0a:6cc4::/30 maxlen: 128
2a0a:cfc0::/30 maxlen: 128
2a0a:cfc4::/30 maxlen: 128
2a0c:52c0::/30 maxlen: 128
2a0c:52c4::/30 maxlen: 128
2a0d:8180::/30 maxlen: 128
2a0d:8184::/30 maxlen: 128
2a0d:c500::/30 maxlen: 128
2a0d:c504::/30 maxlen: 128
2a0d:fd80::/30 maxlen: 128
2a0d:fd84::/30 maxlen: 128
2a0e:3dc0::/30 maxlen: 128
2a0e:3dc4::/30 maxlen: 128
2a0e:7fc0::/30 maxlen: 128
2a0e:7fc4::/30 maxlen: 128
2a0f:f9c0::/30 maxlen: 128
2a0f:f9c4::/30 maxlen: 128
2a10:c80::/30 maxlen: 128
2a10:c84::/30 maxlen: 128
2a10:5480::/30 maxlen: 128
2a10:5484::/30 maxlen: 128
2a10:7b80::/30 maxlen: 128
2a10:7b84::/30 maxlen: 128
2a11:3f40::/30 maxlen: 128
2a11:3f44::/30 maxlen: 128
2a14:2b80::/30 maxlen: 128
2a14:2b84::/30 maxlen: 128
2a14:5c80::/30 maxlen: 128
2a14:5c84::/30 maxlen: 128
2a14:6580::/30 maxlen: 128
2a14:6584::/30 maxlen: 128
2a14:7080::/30 maxlen: 128
2a14:7084::/30 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e1:54:14:8a:a8:1b:ae:a0:cb:fd:53:e8:5d:c4:8e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Validity
Not Before: Dec 19 23:50:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7faee0e2b60fba2f175d7e403aab7f17cd7907e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:d7:1c:fd:d2:c6:2a:c9:c5:e7:b7:30:0c:
dd:73:f3:09:18:e3:93:5d:5a:c7:23:7f:81:f5:c7:
e1:bb:d5:c2:3e:49:5d:fd:8d:78:12:5c:b0:5d:7b:
6c:a9:b7:6e:36:f4:68:d8:6a:d6:47:ac:c2:ca:5d:
fd:26:69:52:0d:98:2d:28:8d:90:ea:d9:2d:ad:c4:
12:69:fc:46:9b:c7:41:34:81:82:b4:27:ca:23:ca:
e0:80:9c:f6:51:ab:7b:c6:9c:f5:b9:5b:79:d9:b3:
73:6d:d7:a8:0a:11:ee:ff:63:c9:74:5e:b0:53:78:
86:a2:44:da:6e:79:34:11:ad:9f:29:7b:8f:fa:50:
eb:1e:24:2e:85:64:c7:23:0c:fd:9f:b9:3e:30:73:
3b:5f:1e:41:43:46:68:85:75:54:c2:8b:14:24:d9:
2e:b0:d5:38:89:59:19:1a:21:f4:8d:3a:74:d2:64:
a8:fb:25:ca:b9:ca:b3:37:ca:de:ec:95:60:08:d8:
0a:0b:f1:30:eb:f4:76:99:25:fe:f8:23:af:39:bd:
1f:85:cd:40:4c:20:8f:4c:f2:13:e3:b6:62:1c:68:
2b:0a:15:c1:57:ff:f6:f9:4f:93:a6:53:9b:f5:b0:
93:20:c5:03:e1:e0:2e:7b:f2:ea:26:4f:66:e6:f2:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:EE:0E:2B:60:FB:A2:F1:75:D7:E4:03:AA:B7:F1:7C:D7:90:7E
X509v3 Authority Key Identifier:
keyid:41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/1_ruDitg-6LxddfkA6q38XzXkH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
103.54.88.0/22
103.126.48.0/23
103.209.228.0/23
IPv6:
2a00:9940::/29
2a04:e880::/29
2a06:4b80::/29
2a06:8540::/29
2a06:9dc0::/29
2a07:35c0::/29
2a09:2340::/29
2a0a:6cc0::/29
2a0a:cfc0::/29
2a0c:52c0::/29
2a0d:8180::/29
2a0d:c500::/29
2a0d:fd80::/29
2a0e:3dc0::/29
2a0e:7fc0::/29
2a0f:f9c0::/29
2a10:c80::/29
2a10:5480::/29
2a10:7b80::/29
2a11:3f40::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
51:c6:0b:1a:75:aa:8a:a0:6a:6b:e2:21:cb:18:90:ea:8f:5b:
99:c2:02:b7:c9:94:00:65:94:f6:31:a3:9e:3a:20:53:64:9c:
60:e3:d9:f1:e3:aa:22:79:dd:1d:74:58:ca:e3:a8:28:c6:2c:
54:a8:d0:bd:63:d9:e9:b3:15:56:4d:5e:cb:9f:b7:cd:65:d8:
6f:fd:bf:58:cd:60:30:b9:cf:01:06:21:83:53:65:ca:3c:dd:
36:36:85:16:4a:73:e7:86:a0:6c:08:97:8f:ea:84:b2:6d:ef:
f5:4e:5b:22:17:6b:cf:19:b4:61:20:c0:6a:1d:5e:03:46:86:
87:b8:ec:f8:90:6b:33:dd:63:f1:4c:0c:dc:92:d5:ee:18:45:
6a:8a:df:aa:0a:65:2b:a9:3b:c9:cb:a6:33:e4:71:7f:b2:41:
80:4a:77:0b:0c:ad:95:d7:4a:ab:de:10:bf:c5:9c:86:f8:33:
f7:4b:36:41:93:85:24:4e:e5:3f:05:57:37:28:b3:fe:49:0e:
ca:21:69:72:db:ab:2d:4e:de:78:65:24:28:e9:0c:fe:21:42:
8f:1b:40:f1:01:03:9e:e9:64:53:e0:6d:2f:95:70:8b:99:8d:
0a:a2:14:5a:cf:e2:d6:10:4f:56:e5:32:b3:da:19:01:d2:76:
44:71:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:43 2025 by rpki-client