Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/ZyN1Z1vSG-G6A67KBmCYTGy7Wpw.roa
File: ZyN1Z1vSG-G6A67KBmCYTGy7Wpw.roa (raw, json)
Hash identifier: RDhv3a+rjqy1nFbzdPkoModvDBOI69Vl9+D8sNqVAz0=
Subject key identifier: 67:23:75:67:5B:D2:1B:E1:BA:03:AE:CA:06:60:98:4C:6C:BB:5A:9C
Certificate issuer: /CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Certificate serial: 01941FFA8F130E8446785713E3DD47602765
Authority key identifier: 41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/ZyN1Z1vSG-G6A67KBmCYTGy7Wpw.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 46.235.15.0/24 maxlen: 32
103.54.88.0/23 maxlen: 32
103.54.90.0/23 maxlen: 32
103.126.48.0/24 maxlen: 32
103.126.49.0/24 maxlen: 32
103.209.228.0/24 maxlen: 32
103.209.229.0/24 maxlen: 32
2a00:9940::/30 maxlen: 128
2a00:9944::/30 maxlen: 128
2a04:e880::/30 maxlen: 128
2a04:e884::/30 maxlen: 128
2a06:4b80::/30 maxlen: 128
2a06:4b84::/30 maxlen: 128
2a06:8540::/30 maxlen: 128
2a06:8544::/30 maxlen: 128
2a06:9dc0::/30 maxlen: 128
2a06:9dc4::/30 maxlen: 128
2a07:35c0::/30 maxlen: 128
2a07:35c4::/30 maxlen: 128
2a09:2340::/30 maxlen: 128
2a09:2344::/30 maxlen: 128
2a0a:6cc0::/30 maxlen: 128
2a0a:6cc4::/30 maxlen: 128
2a0a:cfc0::/30 maxlen: 128
2a0a:cfc4::/30 maxlen: 128
2a0c:52c0::/30 maxlen: 128
2a0c:52c4::/30 maxlen: 128
2a0d:8180::/30 maxlen: 128
2a0d:8184::/30 maxlen: 128
2a0d:c500::/30 maxlen: 128
2a0d:c504::/30 maxlen: 128
2a0d:fd80::/30 maxlen: 128
2a0d:fd84::/30 maxlen: 128
2a0e:3dc0::/30 maxlen: 128
2a0e:3dc4::/30 maxlen: 128
2a0e:7fc0::/30 maxlen: 128
2a0e:7fc4::/30 maxlen: 128
2a0f:f9c0::/30 maxlen: 128
2a0f:f9c4::/30 maxlen: 128
2a10:c80::/30 maxlen: 128
2a10:c84::/30 maxlen: 128
2a10:5480::/30 maxlen: 128
2a10:5484::/30 maxlen: 128
2a10:7b80::/30 maxlen: 128
2a10:7b84::/30 maxlen: 128
2a11:3f40::/30 maxlen: 128
2a11:3f44::/30 maxlen: 128
2a14:2b80::/30 maxlen: 128
2a14:2b84::/30 maxlen: 128
2a14:5c80::/30 maxlen: 128
2a14:5c84::/30 maxlen: 128
2a14:6580::/30 maxlen: 128
2a14:6584::/30 maxlen: 128
2a14:7080::/30 maxlen: 128
2a14:7084::/30 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8f:13:0e:84:46:78:57:13:e3:dd:47:60:27:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=672375675bd21be1ba03aeca0660984c6cbb5a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:8a:d1:e1:fe:4f:6a:ed:f8:e2:62:ab:6f:
ce:18:3a:09:73:03:f7:1c:28:36:1a:1a:7a:73:9b:
d1:88:9d:cb:20:2f:21:92:ee:74:8a:4a:4d:8a:9a:
04:79:85:3e:49:02:a8:4f:c7:d1:d8:e6:48:e7:58:
5a:79:cd:01:25:a2:14:16:b4:3d:17:4b:39:be:1e:
ad:81:8b:e4:75:85:95:df:4a:58:34:bd:7b:86:3f:
35:52:15:12:b0:8d:ce:49:a3:78:6a:0a:68:77:10:
38:7f:39:d6:d8:1a:f0:a2:91:d9:fc:1c:7d:13:b4:
38:2e:8a:fd:a3:f2:ba:91:83:03:ef:0c:35:ff:16:
87:f7:cd:56:a6:65:ed:4e:c9:34:2e:25:2b:76:40:
9f:77:bc:f6:2e:76:6b:7a:12:ef:17:28:25:24:4f:
c8:be:0b:2b:24:e7:26:3a:5a:35:94:b8:65:70:84:
c0:7b:52:35:47:11:6a:8a:18:92:03:62:5d:c2:9d:
fb:a8:61:49:0e:71:85:bd:f9:8b:73:6e:66:50:99:
fc:9c:37:44:32:b0:cf:4f:17:73:46:e3:5d:37:71:
92:c6:23:2f:e9:87:10:0c:c4:65:9e:db:74:3d:f4:
b9:61:44:27:ff:0c:f6:63:af:4a:29:aa:19:e6:ea:
f9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:75:67:5B:D2:1B:E1:BA:03:AE:CA:06:60:98:4C:6C:BB:5A:9C
X509v3 Authority Key Identifier:
keyid:41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/ZyN1Z1vSG-G6A67KBmCYTGy7Wpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
103.54.88.0/22
103.126.48.0/23
103.209.228.0/23
IPv6:
2a00:9940::/29
2a04:e880::/29
2a06:4b80::/29
2a06:8540::/29
2a06:9dc0::/29
2a07:35c0::/29
2a09:2340::/29
2a0a:6cc0::/29
2a0a:cfc0::/29
2a0c:52c0::/29
2a0d:8180::/29
2a0d:c500::/29
2a0d:fd80::/29
2a0e:3dc0::/29
2a0e:7fc0::/29
2a0f:f9c0::/29
2a10:c80::/29
2a10:5480::/29
2a10:7b80::/29
2a11:3f40::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
92:0e:13:82:2b:e3:58:23:da:eb:2c:6c:78:c9:6c:69:2e:3b:
34:47:29:55:6f:9f:9b:8d:17:b4:be:18:a3:d8:53:dd:8c:7d:
6e:3a:34:0e:f1:24:61:3a:99:6b:fd:3a:58:18:c9:78:7e:16:
37:d2:b3:72:bd:52:66:e3:f7:25:d6:e2:d7:11:e0:3f:32:09:
84:9d:67:1d:25:a2:34:97:0c:e0:b6:ce:44:85:14:40:03:a6:
28:33:66:98:e0:1e:1a:25:83:f0:17:6b:92:ac:5e:c6:b4:9f:
4f:1d:3e:7c:21:cc:07:e5:3c:f2:2d:94:b3:09:1b:e4:f1:1f:
d9:a3:20:7a:10:28:da:d0:27:2b:1a:eb:54:b1:f7:87:6f:7b:
04:ad:47:bc:98:bc:0d:d9:93:2f:16:34:13:b9:c0:24:96:cd:
16:73:72:9a:97:95:ae:21:14:f0:65:48:1e:a1:bd:c8:9c:90:
2b:12:f2:0b:a0:5c:a8:ac:e8:63:c0:b0:c4:de:c0:de:e6:73:
c6:52:d2:88:12:60:ab:bf:5e:b9:23:58:3e:2c:96:f1:5d:5a:
36:20:3c:ef:5c:29:c5:9a:35:5e:cc:b5:fe:58:45:08:ef:62:
93:e1:19:d5:20:da:f2:9d:18:82:14:67:58:e2:7e:39:64:c4:
76:7b:5b:61
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAZQf+o8TDoRGeFcT491HYCdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjM3NzM2YWZlNGZkNmRkZGJhY2JmNTAyODAyZWNlMWVk
ZDBiYjgwHhcNMjUwMTAxMDM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzIzNzU2NzViZDIxYmUxYmEwM2FlY2EwNjYwOTg0YzZjYmI1YTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA062K0eH+T2rt+OJiq2/OGDoJcwP3
HCg2Ghp6c5vRiJ3LIC8hku50ikpNipoEeYU+SQKoT8fR2OZI51haec0BJaIUFrQ9
F0s5vh6tgYvkdYWV30pYNL17hj81UhUSsI3OSaN4agpodxA4fznW2BrwopHZ/Bx9
E7Q4Lor9o/K6kYMD7ww1/xaH981WpmXtTsk0LiUrdkCfd7z2LnZrehLvFyglJE/I
vgsrJOcmOlo1lLhlcITAe1I1RxFqihiSA2Jdwp37qGFJDnGFvfmLc25mUJn8nDdE
MrDPTxdzRuNdN3GSxiMv6YcQDMRlntt0PfS5YUQn/wz2Y69KKaoZ5ur5VQIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFGcjdWdb0hvhugOuygZgmExsu1qcMB8GA1UdIwQY
MBaAFEHzdzav5P1t3brL9QKALs4e3Qu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZOM05xX2tfVzNkdXN2MUFvQXV6aDdkQzdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZTRiOGUtYzQ1NS00ZmE4LTlmNzkt
M2U0ZmEyYjljOWU2LzEvWnlOMVoxdlNHLUc2QTY3S0JtQ1lUR3k3V3B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xZTRiOGUtYzQ1NS00ZmE4LTlmNzktM2U0ZmEyYjljOWU2
LzEvUWZOM05xX2tfVzNkdXN2MUFvQXV6aDdkQzdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jAeBAIAATAYAwQALusP
AwQCZzZYAwQBZ34wAwQBZ9HkMIGvBAIAAjCBqAMFAyoAmUADBQMqBOiAAwUDKgZL
gAMFAyoGhUADBQMqBp3AAwUDKgc1wAMFAyoJI0ADBQMqCmzAAwUDKgrPwAMFAyoM
UsADBQMqDYGAAwUDKg3FAAMFAyoN/YADBQMqDj3AAwUDKg5/wAMFAyoP+cADBQMq
EAyAAwUDKhBUgAMFAyoQe4ADBQMqET9AAwUDKhQrgAMFAyoUXIADBQMqFGWAAwUD
KhRwgDANBgkqhkiG9w0BAQsFAAOCAQEAkg4TgivjWCPa6yxseMlsaS47NEcpVW+f
m40XtL4Yo9hT3Yx9bjo0DvEkYTqZa/06WBjJeH4WN9Kzcr1SZuP3Jdbi1xHgPzIJ
hJ1nHSWiNJcM4LbORIUUQAOmKDNmmOAeGiWD8BdrkqxexrSfTx0+fCHMB+U88i2U
swkb5PEf2aMgehAo2tAnKxrrVLH3h297BK1HvJi8DdmTLxY0E7nAJJbNFnNympeV
riEU8GVIHqG9yJyQKxLyC6BcqKzoY8CwxN7A3uZzxlLSiBJgq79euSNYPiyW8V1a
NiA871wpxZo1Xsy1/lhFCO9ik+EZ1SDa8p0YghRnWOJ+OWTEdntbYQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:23 2025 by rpki-client