Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/3eQ1S8uuA5rjKr45UcvylppbYDU.roa
File: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (raw, json)
Hash identifier: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=
Subject key identifier: DD:E4:35:4B:CB:AE:03:9A:E3:2A:BE:39:51:CB:F2:96:9A:5B:60:35
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 0194266BD15A78A415FB3B4F0025A1D7C28E
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/3eQ1S8uuA5rjKr45UcvylppbYDU.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214313
IP address blocks: 103.107.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d1:5a:78:a4:15:fb:3b:4f:00:25:a1:d7:c2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dde4354bcbae039ae32abe3951cbf2969a5b6035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:e3:58:6d:76:6c:06:d9:82:6f:58:c5:af:
7d:5b:72:6e:46:ab:12:a2:31:eb:0b:bd:69:ca:cf:
96:f6:57:de:dc:88:56:64:90:a9:7a:62:af:da:d8:
70:be:20:68:5e:b3:f6:42:32:d4:1f:f5:c0:48:0e:
61:18:d8:a1:ca:1d:21:a7:3e:48:0a:54:5c:f7:e7:
dd:23:17:23:23:78:76:47:8b:8c:64:07:e1:c8:e4:
cc:0c:97:09:d7:fa:a6:d5:01:19:89:b0:cc:93:ed:
3e:c8:7c:e3:05:c2:1b:b7:ec:55:44:dc:9b:ba:af:
2f:9b:ca:3e:bc:e9:d9:44:91:e3:29:2b:e4:dd:5a:
44:d3:d3:0b:f4:c0:5f:3e:ad:84:f0:66:52:48:cd:
ca:fe:fd:78:af:9a:81:dd:79:95:47:c6:ca:5e:35:
94:15:a6:f5:b4:88:57:81:fb:a3:09:ec:bf:19:86:
5d:a2:cf:76:a6:74:87:c4:db:2d:96:3f:4c:58:92:
3a:0d:10:71:c6:97:69:e2:ca:85:43:f9:97:e3:27:
85:ae:7f:e1:94:40:10:0b:69:84:4e:8b:54:d1:a4:
64:d6:a7:6f:90:8e:ab:fb:8c:41:76:1e:df:b3:25:
8c:ac:fb:f4:f6:46:ec:0e:4d:26:6d:3d:b8:52:c4:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:35:4B:CB:AE:03:9A:E3:2A:BE:39:51:CB:F2:96:9A:5B:60:35
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/3eQ1S8uuA5rjKr45UcvylppbYDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.17.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6c:96:18:3f:2f:e3:b8:15:4c:cc:79:dc:18:b7:3b:a3:67:
f0:3e:61:79:ff:55:da:26:03:52:01:d2:90:e5:17:f0:e2:85:
ac:2e:50:e8:02:aa:e1:7d:1d:ef:24:38:3d:38:91:ea:78:e4:
5a:c4:ad:ff:8d:cc:b8:1f:67:a3:20:00:78:ca:c0:02:d6:13:
38:e6:9e:3a:34:31:25:e0:38:37:7b:5d:92:63:ea:47:fa:89:
76:8e:dc:d5:d3:54:4b:0f:f2:c1:bb:e3:90:89:08:81:ff:2c:
8e:4a:24:0c:14:92:ca:0e:93:91:ea:5e:05:13:29:a3:ca:a6:
00:68:dd:a3:88:76:f9:33:72:28:6d:4d:a2:fe:18:9a:a0:da:
d5:12:1b:92:25:2c:83:c1:07:7f:57:de:f0:a3:18:ce:33:d5:
68:16:61:84:ae:1f:93:14:46:55:f1:fc:8e:be:7d:fd:1d:85:
05:44:7c:70:a7:46:ce:d0:d5:04:af:49:8b:c8:e2:10:9f:01:
05:d0:75:e4:4a:98:88:f9:d5:25:67:b5:c4:c6:99:3a:5d:86:
0f:47:e4:b3:50:b1:23:a2:bb:1a:0f:68:22:63:f9:e4:3b:ea:
28:2d:dd:94:37:fe:03:53:c5:41:f0:f6:29:8f:f3:88:67:8e:
87:34:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:03 2025 by rpki-client on console.sobornost.net