Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa
File: 3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: riH+j8SaXwzdQbYEjp8RHinoKfPz0snwSeemkuEfmDA=
Subject key identifier: 46:58:EA:D5:C7:5E:95:AA:8B:AA:4B:52:AD:10:52:33:EF:AD:18:C8
Certificate issuer: /CN=A91A9C1E0000/serialNumber=9E97D4E018ED34E1EFFEB65C3E474B2B3E1CB93E
Certificate serial: 0F97970F6785E32633AB660753FA731E1403AED9
Authority key identifier: 9E:97:D4:E0:18:ED:34:E1:EF:FE:B6:5C:3E:47:4B:2B:3E:1C:B9:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npfU4BjtNOHv_rZcPkdLKz4cuT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa
Signing time: Thu 03 Jul 2025 03:52:02 +0000
ROA not before: Thu 03 Jul 2025 03:47:02 +0000
ROA not after: Thu 02 Jul 2026 03:52:02 +0000
asID: 42831
IP address blocks: 103.244.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:97:97:0f:67:85:e3:26:33:ab:66:07:53:fa:73:1e:14:03:ae:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9C1E0000, serialNumber=9E97D4E018ED34E1EFFEB65C3E474B2B3E1CB93E
Validity
Not Before: Jul 3 03:47:02 2025 GMT
Not After : Jul 2 03:52:02 2026 GMT
Subject: CN=4658EAD5C75E95AA8BAA4B52AD105233EFAD18C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:75:53:d4:72:4e:76:b7:59:30:57:46:ac:
5c:2c:81:c3:6d:41:75:07:41:44:72:07:cf:43:f2:
10:c6:17:f7:ea:d0:8c:e8:0d:02:a6:b4:8d:9f:21:
e5:43:66:cf:bb:94:5f:2c:c0:24:f4:12:33:fb:1e:
9f:2e:ae:a3:38:e8:a3:ff:00:03:a6:fd:6d:e1:c3:
37:86:45:8e:84:1a:bc:0d:a9:d1:e0:9f:15:e0:70:
20:3b:dc:39:f2:fa:67:7c:7f:61:23:5e:86:78:70:
11:7a:c6:51:f1:2d:8b:7f:18:d0:04:9c:95:f1:26:
5e:9e:54:aa:15:90:00:f9:07:f8:74:fa:e2:49:b9:
ed:d0:44:ad:73:1c:13:f2:2a:26:2b:8d:09:fe:3b:
cb:69:70:f8:cc:1e:eb:92:59:63:c0:3c:b2:87:eb:
83:d9:e8:f4:5c:e6:a4:b0:ff:21:7a:c6:dc:99:51:
3a:1b:47:8f:55:56:d9:23:59:01:71:d7:52:5f:26:
4f:c7:3d:87:73:1b:41:39:b3:c5:ce:87:9b:e4:64:
c1:7e:3d:e6:9f:49:39:e3:6a:3f:63:63:ee:87:f9:
7a:f8:e9:72:0c:2b:39:de:9d:9a:43:e4:0f:38:36:
86:b1:e7:4a:c8:be:89:0e:32:e0:f6:f4:97:81:47:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:58:EA:D5:C7:5E:95:AA:8B:AA:4B:52:AD:10:52:33:EF:AD:18:C8
X509v3 Authority Key Identifier:
keyid:9E:97:D4:E0:18:ED:34:E1:EF:FE:B6:5C:3E:47:4B:2B:3E:1C:B9:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/9E97D4E018ED34E1EFFEB65C3E474B2B3E1CB93E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npfU4BjtNOHv_rZcPkdLKz4cuT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f765635d-31b9-4421-97fa-f056eb141a16/4/3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.244.227.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6b:be:6b:cb:a9:8c:9c:f0:0c:b4:01:97:3b:07:44:c7:64:
d8:bd:13:2d:34:98:99:63:09:00:25:bc:b2:25:d6:69:13:5e:
d9:1a:6d:e4:d3:98:79:21:09:98:dd:06:15:ae:b8:ba:98:c0:
d8:da:f7:72:e0:d4:fb:27:16:3b:3c:06:19:75:33:a2:d7:f6:
7f:06:f0:12:4b:d0:8d:3b:0e:94:50:55:8e:83:db:34:f2:b6:
8e:16:50:b6:87:94:bc:48:9f:46:0b:9c:2f:e5:ad:7f:b3:2a:
0c:bd:55:a5:e4:48:17:73:16:4f:1b:15:e1:50:4d:30:0d:21:
12:12:b7:13:20:09:fe:9e:e7:d3:d0:02:0e:9c:f3:7f:95:00:
53:bd:27:82:9f:1a:c2:2e:97:21:7a:91:7e:60:cc:d6:c5:2e:
15:20:cd:0c:55:b0:43:52:27:90:8e:c4:3e:8a:f3:ea:9e:22:
a9:2f:9a:87:11:4b:86:4a:af:cd:54:57:d8:2f:fb:a0:cc:d7:
1e:9c:94:a0:45:da:a7:e6:37:10:90:e8:4b:7f:eb:76:64:8e:
d4:5a:98:71:a7:99:4c:f0:e9:d2:20:ec:1a:c0:4a:1a:89:00:
64:02:a6:8e:6d:b6:25:0b:1f:4b:07:77:76:67:45:50:42:8f:
98:7f:dc:81
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUD5eXD2eF4yYzq2YHU/pzHhQDrtkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTlDMUUwMDAwMTEwLwYDVQQFEyg5RTk3RDRFMDE4
RUQzNEUxRUZGRUI2NUMzRTQ3NEIyQjNFMUNCOTNFMB4XDTI1MDcwMzAzNDcwMloX
DTI2MDcwMjAzNTIwMlowMzExMC8GA1UEAxMoNDY1OEVBRDVDNzVFOTVBQThCQUE0
QjUyQUQxMDUyMzNFRkFEMThDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANGidVPUck52t1kwV0asXCyBw21BdQdBRHIHz0PyEMYX9+rQjOgNAqa0jZ8h
5UNmz7uUXyzAJPQSM/seny6uozjoo/8AA6b9beHDN4ZFjoQavA2p0eCfFeBwIDvc
OfL6Z3x/YSNehnhwEXrGUfEti38Y0ASclfEmXp5UqhWQAPkH+HT64km57dBErXMc
E/IqJiuNCf47y2lw+Mwe65JZY8A8sofrg9no9FzmpLD/IXrG3JlROhtHj1VW2SNZ
AXHXUl8mT8c9h3MbQTmzxc6Hm+RkwX495p9JOeNqP2Nj7of5evjpcgwrOd6dmkPk
Dzg2hrHnSsi+iQ4y4Pb0l4FHjl0CAwEAAaOCAlkwggJVMB0GA1UdDgQWBBRGWOrV
x16VqouqS1KtEFIz760YyDAfBgNVHSMEGDAWgBSel9TgGO004e/+tlw+R0srPhy5
PjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzY1NjM1ZC0z
MWI5LTQ0MjEtOTdmYS1mMDU2ZWIxNDFhMTYvNC85RTk3RDRFMDE4RUQzNEUxRUZG
RUI2NUMzRTQ3NEIyQjNFMUNCOTNFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9ucGZVNEJqdE5PSHZfclpjUGtkTEt6
NGN1VDQuY2VyMIGvBggrBgEFBQcBCwSBojCBnzCBnAYIKwYBBQUHMAuGgY9yc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3NjU2MzVk
LTMxYjktNDQyMS05N2ZhLWYwNTZlYjE0MWExNi80LzMxMzAzMzJlMzIzNDM0MmUz
MjMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzgzMzMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ/TjMA0GCSqGSIb3DQEBCwUAA4IBAQAEa75ry6mMnPAMtAGXOwdEx2TYvRMt
NJiZYwkAJbyyJdZpE17ZGm3k05h5IQmY3QYVrri6mMDY2vdy4NT7JxY7PAYZdTOi
1/Z/BvASS9CNOw6UUFWOg9s08raOFlC2h5S8SJ9GC5wv5a1/syoMvVWl5EgXcxZP
GxXhUE0wDSESErcTIAn+nufT0AIOnPN/lQBTvSeCnxrCLpchepF+YMzWxS4VIM0M
VbBDUieQjsQ+ivPqniKpL5qHEUuGSq/NVFfYL/ugzNcenJSgRdqn5jcQkOhLf+t2
ZI7UWphxp5lM8OnSIOwawEoaiQBkAqaObbYlCx9LB3d2Z0VQQo+Yf9yB
-----END CERTIFICATE-----
Generated at Sat Jul 5 01:29:22 2025 by rpki-client