Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/MQhpzAlilK7Yq6F1sSVRWpbInrU.roa
File: MQhpzAlilK7Yq6F1sSVRWpbInrU.roa (raw, json)
Hash identifier: oPF7sitJ4zPDpIEln2I0Bk/n2GZeoTKDV06cS72G7ng=
Subject key identifier: 31:08:69:CC:09:62:94:AE:D8:AB:A1:75:B1:25:51:5A:96:C8:9E:B5
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 0195DD969BABEBED30CE42EC0D515C31BE66
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/MQhpzAlilK7Yq6F1sSVRWpbInrU.roa
Signing time: Fri 28 Mar 2025 16:29:49 +0000
ROA not before: Fri 28 Mar 2025 16:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36137
IP address blocks: 103.17.202.0/24 maxlen: 24
103.17.203.0/24 maxlen: 24
103.124.156.0/23 maxlen: 23
110.34.32.0/24 maxlen: 24
110.34.37.0/24 maxlen: 24
110.34.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:96:9b:ab:eb:ed:30:ce:42:ec:0d:51:5c:31:be:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 28 16:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=310869cc096294aed8aba175b125515a96c89eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:19:98:16:6d:af:8a:3d:8a:d2:31:73:1c:
65:2f:70:08:68:03:3d:22:ee:2a:cc:b2:06:b5:dd:
bd:6b:69:8a:f8:0c:12:d1:1b:53:aa:d3:6b:9d:2a:
39:0f:e2:52:4a:00:c3:80:54:70:44:d2:1f:e6:80:
08:02:83:66:d2:d9:96:a3:09:5a:a9:68:e3:c9:ad:
73:57:55:85:af:93:73:4a:3d:c0:c8:7d:bb:85:77:
af:d8:fe:68:da:82:fc:0e:84:2f:e4:6c:9d:27:74:
26:bc:87:f7:c8:9e:3d:9e:a9:78:3d:0e:02:97:8e:
34:6d:21:a7:69:b0:e1:b0:b9:7e:87:16:e4:09:0a:
a6:d3:9e:a5:bc:e1:b9:b1:4c:df:47:fb:3e:67:17:
f3:c3:d4:50:23:13:ee:9c:9c:08:a8:8d:1e:cd:2d:
18:ce:42:f3:c0:03:5f:09:44:c8:12:e2:ec:d8:43:
c9:81:5c:f5:21:f0:11:b0:01:91:2e:ad:18:d3:26:
0c:25:bd:29:57:a5:d2:de:ff:e2:b3:70:d7:8c:e4:
42:20:c6:e5:a3:0d:ea:85:bb:38:f0:ea:f3:a8:68:
1d:c3:34:a9:1d:17:5b:bb:33:c1:15:3f:65:b0:d1:
ad:c6:2c:04:3f:71:4c:88:e3:7e:08:b0:ec:04:a1:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:69:CC:09:62:94:AE:D8:AB:A1:75:B1:25:51:5A:96:C8:9E:B5
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/MQhpzAlilK7Yq6F1sSVRWpbInrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.202.0/23
103.124.156.0/23
110.34.32.0/24
110.34.37.0-110.34.38.255
Signature Algorithm: sha256WithRSAEncryption
93:8d:c0:4d:7b:46:d7:31:60:20:1f:b2:51:22:9d:1b:b4:78:
28:9c:e3:ca:cc:68:7c:45:ab:3d:3c:04:63:44:74:fb:74:0d:
79:42:14:2e:58:71:ab:ae:0a:e7:75:77:b0:1b:62:1c:bc:a8:
16:9d:9d:6d:c7:f7:85:21:6b:28:c6:2b:d4:6f:53:4d:01:6a:
b2:2f:26:c3:4f:32:45:19:85:30:29:6f:6f:68:c9:22:7a:ab:
9e:fe:42:24:54:06:e7:1e:c2:d2:ee:86:ca:cb:a5:8e:34:c1:
2d:a7:76:22:fe:e8:2c:ab:7f:ed:f7:2f:7f:33:be:d4:4e:d0:
08:99:a4:00:7a:00:ab:8f:58:02:a9:1d:ac:dd:01:2d:b0:52:
d8:85:af:c6:27:70:c3:ea:56:0d:2d:de:f8:82:22:94:93:5d:
78:ad:1d:5a:00:cf:f3:bd:67:cf:8c:a4:56:87:a5:42:a0:00:
f5:b0:08:71:3a:d1:5d:0f:14:21:58:e4:9d:0f:77:20:b4:64:
29:19:7e:a7:8e:71:ba:6b:9a:77:d8:39:a2:1e:92:3d:a8:be:
4e:11:ba:3e:e7:76:f1:0a:4c:49:db:37:95:42:6b:dc:12:08:
f1:39:67:93:59:cc:4c:5e:ac:52:a1:ac:8f:44:f4:7a:31:46:
80:24:f6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:30 2025 by rpki-client on console.sobornost.net