Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/zrpsFZl_I7FPA3BocMSmsJpbWzo.roa
File: zrpsFZl_I7FPA3BocMSmsJpbWzo.roa (raw, json)
Hash identifier: hMBikdpp/AiolWruGgxEpn102RZ3BDu5bSkqPj97Y9M=
Subject key identifier: CE:BA:6C:15:99:7F:23:B1:4F:03:70:68:70:C4:A6:B0:9A:5B:5B:3A
Certificate issuer: /CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Certificate serial: 0193DF494F8A047173DA9609EA581AD55E55
Authority key identifier: 41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/zrpsFZl_I7FPA3BocMSmsJpbWzo.roa
Signing time: Thu 19 Dec 2024 14:19:03 +0000
ROA not before: Thu 19 Dec 2024 14:19:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34984
IP address blocks: 103.54.88.0/23 maxlen: 32
103.54.90.0/23 maxlen: 32
103.126.48.0/24 maxlen: 32
103.126.49.0/24 maxlen: 32
103.209.228.0/24 maxlen: 32
103.209.229.0/24 maxlen: 32
2a00:9940::/30 maxlen: 128
2a00:9944::/30 maxlen: 128
2a04:e880::/30 maxlen: 128
2a04:e884::/30 maxlen: 128
2a06:4b80::/30 maxlen: 128
2a06:4b84::/30 maxlen: 128
2a06:8540::/30 maxlen: 128
2a06:8544::/30 maxlen: 128
2a06:9dc0::/30 maxlen: 128
2a06:9dc4::/30 maxlen: 128
2a07:35c0::/30 maxlen: 128
2a07:35c4::/30 maxlen: 128
2a09:2340::/30 maxlen: 128
2a09:2344::/30 maxlen: 128
2a0a:6cc0::/30 maxlen: 128
2a0a:6cc4::/30 maxlen: 128
2a0a:cfc0::/30 maxlen: 128
2a0a:cfc4::/30 maxlen: 128
2a0c:52c0::/30 maxlen: 128
2a0c:52c4::/30 maxlen: 128
2a0d:8180::/30 maxlen: 128
2a0d:8184::/30 maxlen: 128
2a0d:c500::/30 maxlen: 128
2a0d:c504::/30 maxlen: 128
2a0d:fd80::/30 maxlen: 128
2a0d:fd84::/30 maxlen: 128
2a0e:3dc0::/30 maxlen: 128
2a0e:3dc4::/30 maxlen: 128
2a0e:7fc0::/30 maxlen: 128
2a0e:7fc4::/30 maxlen: 128
2a0f:f9c0::/30 maxlen: 128
2a0f:f9c4::/30 maxlen: 128
2a10:c80::/30 maxlen: 128
2a10:c84::/30 maxlen: 128
2a10:5480::/30 maxlen: 128
2a10:5484::/30 maxlen: 128
2a10:7b80::/30 maxlen: 128
2a10:7b84::/30 maxlen: 128
2a11:3f40::/30 maxlen: 128
2a11:3f44::/30 maxlen: 128
2a14:2b80::/30 maxlen: 128
2a14:2b84::/30 maxlen: 128
2a14:5c80::/30 maxlen: 128
2a14:5c84::/30 maxlen: 128
2a14:6580::/30 maxlen: 128
2a14:6584::/30 maxlen: 128
2a14:7080::/30 maxlen: 128
2a14:7084::/30 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:49:4f:8a:04:71:73:da:96:09:ea:58:1a:d5:5e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f37736afe4fd6dddbacbf502802ece1edd0bb8
Validity
Not Before: Dec 19 14:19:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceba6c15997f23b14f03706870c4a6b09a5b5b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:87:4f:cb:9f:0b:d2:c4:4b:ed:d5:36:d6:
10:78:42:ed:ce:2d:13:bc:30:08:82:63:7b:20:bd:
74:2f:1f:79:10:3f:8e:a8:8d:d9:45:4e:db:d9:3c:
62:ef:4e:31:95:12:64:df:2b:16:b5:d9:b6:6c:43:
e8:a0:be:79:93:5e:a9:24:25:ce:06:eb:ec:4f:06:
61:16:01:9e:c1:13:42:ec:33:ac:15:c1:5b:b9:f8:
a6:c8:6b:9d:af:f0:23:2d:1f:fa:f1:f8:fc:73:0f:
1d:7b:be:b9:42:39:e8:24:c1:b5:35:a3:ee:b1:cf:
72:cb:e4:90:36:51:fd:d1:ef:76:e0:7a:53:10:e3:
a4:9e:38:a7:15:7e:04:fb:6a:f6:89:72:e8:5f:10:
f2:da:72:31:c4:e8:51:40:f5:62:44:d2:82:91:02:
fb:26:69:d1:4c:e2:d5:2e:09:b0:c4:88:04:3d:26:
cb:8c:6c:41:0c:65:5e:03:d3:9f:73:6b:7b:fc:cb:
0a:22:7a:61:8e:af:75:0f:11:4c:12:51:19:f7:3f:
22:ac:19:49:06:00:5a:44:4a:37:6f:12:34:7c:e8:
6b:c3:24:5c:5c:ad:2c:99:d8:36:b2:95:10:b0:e6:
ac:4e:e4:07:4c:b4:68:b9:d0:1f:cb:b5:8e:2c:76:
0b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BA:6C:15:99:7F:23:B1:4F:03:70:68:70:C4:A6:B0:9A:5B:5B:3A
X509v3 Authority Key Identifier:
keyid:41:F3:77:36:AF:E4:FD:6D:DD:BA:CB:F5:02:80:2E:CE:1E:DD:0B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfN3Nq_k_W3dusv1AoAuzh7dC7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/zrpsFZl_I7FPA3BocMSmsJpbWzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e4b8e-c455-4fa8-9f79-3e4fa2b9c9e6/1/QfN3Nq_k_W3dusv1AoAuzh7dC7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.88.0/22
103.126.48.0/23
103.209.228.0/23
IPv6:
2a00:9940::/29
2a04:e880::/29
2a06:4b80::/29
2a06:8540::/29
2a06:9dc0::/29
2a07:35c0::/29
2a09:2340::/29
2a0a:6cc0::/29
2a0a:cfc0::/29
2a0c:52c0::/29
2a0d:8180::/29
2a0d:c500::/29
2a0d:fd80::/29
2a0e:3dc0::/29
2a0e:7fc0::/29
2a0f:f9c0::/29
2a10:c80::/29
2a10:5480::/29
2a10:7b80::/29
2a11:3f40::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
47:86:0b:94:28:83:43:fe:b2:3b:d7:6f:2c:ac:f1:49:47:02:
ef:c9:43:a4:98:6e:05:7b:01:fa:a2:05:0a:2c:9e:02:78:28:
ea:1b:15:4f:8c:2f:0a:e1:66:96:17:e1:e3:82:f4:55:fb:12:
eb:c1:a2:68:5b:e0:d5:34:66:8e:a9:23:69:5c:6e:e4:66:85:
0d:01:48:20:5f:9b:62:2a:cf:6a:43:54:9d:ca:d0:3a:57:75:
72:4e:33:bb:50:4e:d8:3b:49:77:04:ce:c8:50:36:40:2e:2b:
62:02:80:15:0f:f3:43:68:20:62:41:0a:d2:0b:5a:8d:0d:79:
b2:1d:e3:d5:c3:a6:4f:73:ce:74:5b:81:8f:5a:0d:75:cf:d3:
67:e7:72:00:9d:99:0f:ad:e0:88:88:ac:68:68:b3:e9:7e:f4:
c9:35:9f:11:e6:e7:c5:6d:1f:60:23:72:ee:ed:95:aa:b9:db:
be:3a:87:27:52:15:ab:f7:85:94:76:e2:03:f5:c3:69:40:7c:
60:d6:7e:fc:8f:82:3b:42:2c:d3:93:fa:64:e6:4b:74:31:f0:
87:43:64:c5:b2:33:32:d1:59:60:c6:99:f9:3d:aa:04:49:7e:
23:70:f0:71:83:86:32:47:57:c6:3c:aa:c1:55:b0:f1:06:64:
1f:94:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:28 2025 by rpki-client