Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1HxfapABCT9f2Gi5FEEd5TTonAI.roa
File: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (raw, json)
Hash identifier: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=
Subject key identifier: D4:7C:5F:6A:90:01:09:3F:5F:D8:68:B9:14:41:1D:E5:34:E8:9C:02
Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial: 0194719FD17BD79924E50EB5C332E739749E
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1HxfapABCT9f2Gi5FEEd5TTonAI.roa
Signing time: Fri 17 Jan 2025 00:18:06 +0000
ROA not before: Fri 17 Jan 2025 00:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 103.54.88.0/23 maxlen: 32
103.54.90.0/23 maxlen: 32
103.126.48.0/24 maxlen: 32
103.126.49.0/24 maxlen: 32
103.209.228.0/24 maxlen: 32
103.209.229.0/24 maxlen: 32
2a00:9940::/30 maxlen: 128
2a00:9944::/30 maxlen: 128
2a04:e880::/30 maxlen: 128
2a04:e884::/30 maxlen: 128
2a06:4b80::/30 maxlen: 128
2a06:4b84::/30 maxlen: 128
2a06:8540::/30 maxlen: 128
2a06:8544::/30 maxlen: 128
2a06:9dc0::/30 maxlen: 128
2a06:9dc4::/30 maxlen: 128
2a07:35c0::/30 maxlen: 128
2a07:35c4::/30 maxlen: 128
2a09:2340::/30 maxlen: 128
2a09:2344::/30 maxlen: 128
2a0a:6cc0::/30 maxlen: 128
2a0a:6cc4::/30 maxlen: 128
2a0a:cfc0::/30 maxlen: 128
2a0a:cfc4::/30 maxlen: 128
2a0c:52c0::/30 maxlen: 128
2a0c:52c4::/30 maxlen: 128
2a0d:8180::/30 maxlen: 128
2a0d:8184::/30 maxlen: 128
2a0d:c500::/30 maxlen: 128
2a0d:c504::/30 maxlen: 128
2a0d:fd80::/30 maxlen: 128
2a0d:fd84::/30 maxlen: 128
2a0e:3dc0::/30 maxlen: 128
2a0e:3dc4::/30 maxlen: 128
2a0e:7fc0::/30 maxlen: 128
2a0e:7fc4::/30 maxlen: 128
2a0f:f9c0::/30 maxlen: 128
2a0f:f9c4::/30 maxlen: 128
2a10:c80::/30 maxlen: 128
2a10:c84::/30 maxlen: 128
2a10:5480::/30 maxlen: 128
2a10:5484::/30 maxlen: 128
2a10:7b80::/30 maxlen: 128
2a10:7b84::/30 maxlen: 128
2a11:3f40::/30 maxlen: 128
2a11:3f44::/30 maxlen: 128
2a14:2b80::/30 maxlen: 128
2a14:2b84::/30 maxlen: 128
2a14:5c80::/30 maxlen: 128
2a14:5c84::/30 maxlen: 128
2a14:6580::/30 maxlen: 128
2a14:6584::/30 maxlen: 128
2a14:7080::/30 maxlen: 128
2a14:7084::/30 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:71:9f:d1:7b:d7:99:24:e5:0e:b5:c3:32:e7:39:74:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
Validity
Not Before: Jan 17 00:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d47c5f6a9001093f5fd868b914411de534e89c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:30:71:c4:b0:6b:78:0f:6d:d4:0d:51:57:
e9:4c:18:3f:83:14:d0:be:30:43:f7:e2:fc:31:cf:
d7:e6:54:45:53:9f:c9:5f:57:61:bd:3b:4c:26:bd:
ff:4f:db:bf:16:d6:c5:73:03:67:64:58:fb:17:da:
f7:3e:4e:ce:b5:9b:23:dd:1c:19:d8:fd:b8:8d:cc:
dd:29:b2:e2:89:ce:69:46:ce:37:18:d7:c1:3f:05:
0b:17:62:ad:cf:1a:d7:ba:22:72:78:da:0b:30:11:
64:49:ec:34:de:cc:40:de:1b:3b:c6:02:23:47:96:
6d:77:21:59:2e:29:db:8b:d8:3a:f7:7a:1b:06:b0:
c7:37:e0:b5:10:96:45:02:2d:ef:bc:e3:cc:8e:0d:
49:b8:7f:04:c3:ce:0b:08:f4:ff:5a:19:e9:f1:18:
56:1a:11:cd:4c:95:7a:70:55:3d:f4:e2:3b:d7:37:
01:e8:87:e2:0d:51:64:82:aa:ad:3e:01:1e:98:6f:
d4:74:01:21:0d:2c:2f:cb:60:c5:9b:44:28:5b:8b:
e4:80:c0:5f:c3:3f:c4:57:37:0b:f7:61:ba:75:74:
69:7a:ab:31:c4:4e:78:2d:a3:6c:0c:20:d7:48:29:
f2:c2:53:4b:8c:86:0a:86:44:d0:85:8f:5c:f7:bd:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:5F:6A:90:01:09:3F:5F:D8:68:B9:14:41:1D:E5:34:E8:9C:02
X509v3 Authority Key Identifier:
keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1HxfapABCT9f2Gi5FEEd5TTonAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.54.88.0/22
103.126.48.0/23
103.209.228.0/23
IPv6:
2a00:9940::/29
2a04:e880::/29
2a06:4b80::/29
2a06:8540::/29
2a06:9dc0::/29
2a07:35c0::/29
2a09:2340::/29
2a0a:6cc0::/29
2a0a:cfc0::/29
2a0c:52c0::/29
2a0d:8180::/29
2a0d:c500::/29
2a0d:fd80::/29
2a0e:3dc0::/29
2a0e:7fc0::/29
2a0f:f9c0::/29
2a10:c80::/29
2a10:5480::/29
2a10:7b80::/29
2a11:3f40::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
73:85:0b:79:09:86:78:59:14:48:1f:11:e5:02:05:40:47:ea:
87:53:e5:3f:44:75:ed:53:ae:8d:9f:8c:c7:3d:d8:52:a4:a1:
34:f4:ae:4e:f6:27:b3:c8:2c:8f:8d:8b:4f:40:e4:eb:af:f2:
f1:1c:2a:12:a9:a3:81:7f:07:e4:02:bc:ae:30:ce:43:dc:87:
15:d7:e0:64:98:63:04:df:ba:23:94:ad:30:13:86:1c:d5:be:
fa:e9:04:9e:31:ba:40:ca:81:78:af:af:e1:68:ab:76:78:2e:
a3:05:9b:80:8f:98:29:9a:db:0c:fe:c6:db:97:8e:2a:79:9c:
ef:04:78:32:8e:7c:6e:6c:05:96:d4:08:e6:27:85:a4:ce:ab:
26:d2:68:2e:d0:8d:90:90:12:99:14:69:44:2b:c3:ad:3b:ea:
ba:33:85:4c:48:8c:e3:fd:83:0f:6e:fa:19:af:2e:2e:0c:6a:
3d:77:c7:14:28:84:44:5a:7d:4d:6c:58:4b:4d:dd:99:67:cd:
b7:dc:64:f1:25:68:50:c1:55:42:99:f0:c3:78:df:64:1d:8f:
49:3f:5b:9b:d7:86:86:59:11:5d:0c:2d:31:03:7e:91:98:da:
57:38:39:1b:b4:60:26:9d:ca:75:e4:48:bb:50:af:d3:b7:e5:
5d:3f:11:94
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAZRxn9F715kk5Q61wzLnOXSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDc0NzE0MTQyZjgzOTcwMTQ4ZmFiMGVjM2UyMTE3YzM5
M2M0OTEwHhcNMjUwMTE3MDAxODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDdjNWY2YTkwMDEwOTNmNWZkODY4YjkxNDQxMWRlNTM0ZTg5YzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvEwccSwa3gPbdQNUVfpTBg/gxTQ
vjBD9+L8Mc/X5lRFU5/JX1dhvTtMJr3/T9u/FtbFcwNnZFj7F9r3Pk7OtZsj3RwZ
2P24jczdKbLiic5pRs43GNfBPwULF2KtzxrXuiJyeNoLMBFkSew03sxA3hs7xgIj
R5ZtdyFZLinbi9g693obBrDHN+C1EJZFAi3vvOPMjg1JuH8Ew84LCPT/Whnp8RhW
GhHNTJV6cFU99OI71zcB6IfiDVFkgqqtPgEemG/UdAEhDSwvy2DFm0QoW4vkgMBf
wz/EVzcL92G6dXRpeqsxxE54LaNsDCDXSCnywlNLjIYKhkTQhY9c972LvQIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFNR8X2qQAQk/X9houRRBHeU06JwCMB8GA1UdIwQY
MBaAFNQHRxQUL4OXAUj6sOw+IRfDk8SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTkt
ZDc5Y2UyZGVlYTcwLzEvMUh4ZmFwQUJDVDlmMkdpNUZFRWQ1VFRvbkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTktZDc5Y2UyZGVlYTcw
LzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDAYBAIAATASAwQCZzZY
AwQBZ34wAwQBZ9HkMIGvBAIAAjCBqAMFAyoAmUADBQMqBOiAAwUDKgZLgAMFAyoG
hUADBQMqBp3AAwUDKgc1wAMFAyoJI0ADBQMqCmzAAwUDKgrPwAMFAyoMUsADBQMq
DYGAAwUDKg3FAAMFAyoN/YADBQMqDj3AAwUDKg5/wAMFAyoP+cADBQMqEAyAAwUD
KhBUgAMFAyoQe4ADBQMqET9AAwUDKhQrgAMFAyoUXIADBQMqFGWAAwUDKhRwgDAN
BgkqhkiG9w0BAQsFAAOCAQEAc4ULeQmGeFkUSB8R5QIFQEfqh1PlP0R17VOujZ+M
xz3YUqShNPSuTvYns8gsj42LT0Dk66/y8RwqEqmjgX8H5AK8rjDOQ9yHFdfgZJhj
BN+6I5StMBOGHNW++ukEnjG6QMqBeK+v4WirdnguowWbgI+YKZrbDP7G25eOKnmc
7wR4Mo58bmwFltQI5ieFpM6rJtJoLtCNkJASmRRpRCvDrTvqujOFTEiM4/2DD276
Ga8uLgxqPXfHFCiERFp9TWxYS03dmWfNt9xk8SVoUMFVQpnww3jfZB2PST9bm9eG
hlkRXQwtMQN+kZjaVzg5G7RgJp3KdeRIu1Cv07flXT8RlA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net