Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/KC67bUzfDKSrHmCB6UUpuneAEt0.roa
File: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (raw, json)
Hash identifier: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=
Subject key identifier: 28:2E:BB:6D:4C:DF:0C:A4:AB:1E:60:81:E9:45:29:BA:77:80:12:DD
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 019420D5EC66046F10D446BB29D370FBE9AC
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/KC67bUzfDKSrHmCB6UUpuneAEt0.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216053
IP address blocks: 202.37.103.0/24 maxlen: 24
203.21.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ec:66:04:6f:10:d4:46:bb:29:d3:70:fb:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=282ebb6d4cdf0ca4ab1e6081e94529ba778012dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:b8:4a:23:5a:db:4d:2d:73:37:fa:30:a3:
c2:7c:bd:60:4b:de:39:0a:c4:e0:e3:67:d0:5b:32:
83:d2:3f:8c:ed:d6:5b:e3:df:b2:1e:a6:07:aa:bf:
6e:48:b0:5b:3d:2f:75:b8:e1:69:ec:a6:e2:c3:bb:
90:1b:77:f4:c4:73:0d:97:b7:0b:24:98:5b:74:f1:
a5:c5:9b:7e:c1:24:1d:6d:84:04:a2:43:f9:6b:ac:
3f:c7:0f:2e:5f:9b:e6:c8:78:88:f8:a1:cd:34:2b:
bb:e6:e7:0c:cd:42:d7:35:d9:ce:06:c8:44:6c:f8:
60:9a:de:f8:63:96:92:c8:63:40:1f:be:72:7e:cd:
57:7c:ea:55:77:a0:6c:34:2e:39:81:94:cf:13:7f:
0a:0e:21:01:7e:1f:a0:a9:42:0f:84:1d:c0:1f:2c:
f6:ea:ba:6e:da:a4:e1:59:83:08:84:54:fc:22:65:
88:57:96:27:be:ac:02:33:f0:30:56:18:96:18:71:
6d:cc:7b:e7:4a:d1:a3:0e:16:a8:ae:e0:2e:e4:e4:
c0:28:e6:fa:92:e0:6b:ab:98:80:01:01:b6:62:34:
5d:e1:72:d7:0c:88:99:6a:e6:fb:2c:9d:62:03:6e:
06:97:87:74:34:a6:d0:f3:d5:e4:60:20:22:c7:40:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:BB:6D:4C:DF:0C:A4:AB:1E:60:81:E9:45:29:BA:77:80:12:DD
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/KC67bUzfDKSrHmCB6UUpuneAEt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.37.103.0/24
203.21.4.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1b:7b:f8:6f:0e:11:df:d1:6e:55:1c:1d:0b:6f:9a:11:d7:
77:a4:55:5c:38:3d:08:2f:b1:f4:50:2e:51:1a:13:8b:c9:ff:
9f:5e:55:49:ec:f2:72:59:4e:5b:c6:fe:1d:f8:9b:43:94:4a:
61:f1:6a:e8:ae:f4:bb:4c:13:3b:d5:9f:56:bd:ae:7e:c5:0b:
35:ba:50:ba:78:3f:54:88:f9:11:97:f1:83:30:40:42:e7:12:
a4:0a:dd:ab:72:4f:16:79:2b:50:ee:fd:42:c2:b5:db:f6:e7:
10:6d:58:e4:2c:17:64:5f:71:ab:e4:10:9f:7b:f7:fd:3e:29:
e3:72:7e:1c:5e:82:e5:59:35:0c:47:a2:12:e3:68:d5:6c:87:
9f:a1:dc:1e:96:f6:f9:6c:dd:87:18:f1:7d:48:5b:d8:23:95:
d4:04:fe:5d:e6:6e:88:26:cc:31:36:ad:97:22:49:0e:52:00:
92:79:1d:9d:49:cb:ea:a4:1f:e7:a8:75:93:d0:fb:83:87:c2:
e0:a0:2b:d0:28:e6:04:3b:ad:2f:e3:34:0e:bd:59:6d:f8:2e:
b1:d4:8d:c6:99:09:ec:7e:4a:48:2f:a6:e2:66:ba:23:7d:a3:
e7:af:89:17:3d:c3:a6:6c:1a:bf:9e:e8:1e:4c:15:29:91:c2:
47:17:57:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1exmBG8Q1Ea7KdNw++msMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNWExMDkzMzZkZTg5NzEyZTI0OWM5ODQ2YzlkYmIxYjNj
OThjN2UwHhcNMjUwMTAxMDc0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODJlYmI2ZDRjZGYwY2E0YWIxZTYwODFlOTQ1MjliYTc3ODAxMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF+4SiNa200tczf6MKPCfL1gS945
CsTg42fQWzKD0j+M7dZb49+yHqYHqr9uSLBbPS91uOFp7Kbiw7uQG3f0xHMNl7cL
JJhbdPGlxZt+wSQdbYQEokP5a6w/xw8uX5vmyHiI+KHNNCu75ucMzULXNdnOBshE
bPhgmt74Y5aSyGNAH75yfs1XfOpVd6BsNC45gZTPE38KDiEBfh+gqUIPhB3AHyz2
6rpu2qThWYMIhFT8ImWIV5YnvqwCM/AwVhiWGHFtzHvnStGjDhaoruAu5OTAKOb6
kuBrq5iAAQG2YjRd4XLXDIiZaub7LJ1iA24Gl4d0NKbQ89XkYCAix0CpFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCguu21M3wykqx5ggelFKbp3gBLdMB8GA1UdIwQY
MBaAFJBaEJM23olxLiScmEbJ27GzyYx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYt
YjI0OGNmYTk2YTY5LzEvS0M2N2JVemZES1NySG1DQjZVVXB1bmVBRXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYtYjI0OGNmYTk2YTY5
LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAyiVnAwQA
yxUEMA0GCSqGSIb3DQEBCwUAA4IBAQA9G3v4bw4R39FuVRwdC2+aEdd3pFVcOD0I
L7H0UC5RGhOLyf+fXlVJ7PJyWU5bxv4d+JtDlEph8WrorvS7TBM71Z9Wva5+xQs1
ulC6eD9UiPkRl/GDMEBC5xKkCt2rck8WeStQ7v1CwrXb9ucQbVjkLBdkX3Gr5BCf
e/f9Pinjcn4cXoLlWTUMR6IS42jVbIefodwelvb5bN2HGPF9SFvYI5XUBP5d5m6I
JswxNq2XIkkOUgCSeR2dScvqpB/nqHWT0PuDh8LgoCvQKOYEO60v4zQOvVlt+C6x
1I3GmQnsfkpIL6biZrojfaPnr4kXPcOmbBq/nugeTBUpkcJHF1e6
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:39 2025 by rpki-client on console.sobornost.net