Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa
File: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (raw, json)
Hash identifier: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=
Subject key identifier: C9:C7:AA:A3:B6:56:FC:85:60:24:5C:53:6E:91:92:3A:20:F6:AE:D8
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01941FFA41C8AF2DC5338C97F608F154505F
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205250
IP address blocks: 192.103.85.0/24 maxlen: 24
192.103.86.0/24 maxlen: 24
192.103.91.0/24 maxlen: 24
192.103.92.0/24 maxlen: 24
192.103.105.0/24 maxlen: 24
192.103.106.0/24 maxlen: 24
192.103.110.0/24 maxlen: 24
192.103.111.0/24 maxlen: 24
192.103.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:c8:af:2d:c5:33:8c:97:f6:08:f1:54:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9c7aaa3b656fc8560245c536e91923a20f6aed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:e6:c7:57:70:d7:1f:cb:be:71:b7:02:60:
21:a9:7e:27:b4:f1:0d:1f:02:cb:3e:eb:f4:6d:b4:
7b:fd:9f:a6:4d:50:92:c6:90:8a:89:6a:c8:e6:e4:
a6:b4:08:28:c1:16:46:03:74:70:f2:d4:5d:81:5e:
ec:78:ed:bf:aa:11:ad:38:20:f4:7d:34:c4:34:99:
99:1e:d4:68:97:ca:ca:73:a2:77:a6:62:b9:f7:e8:
ae:e6:c4:f8:28:cd:4f:34:f4:44:7c:b1:a2:9f:ba:
c9:39:ad:ed:94:29:4e:74:ce:f2:c2:bd:48:9b:1a:
66:8b:f6:71:2f:ec:b6:e1:f0:8c:a6:21:48:6f:69:
03:b6:c6:4a:c2:a6:6f:d3:c5:5a:19:7e:71:6d:e1:
32:87:d6:91:2c:e9:5e:25:c1:2a:42:de:7b:f4:e4:
4c:42:03:87:5b:a6:30:54:79:7f:12:60:34:93:c3:
79:59:3b:a7:57:fb:05:2c:db:0d:5d:31:57:df:92:
b3:9c:2c:dc:2c:25:f0:2f:44:25:f3:f4:c7:91:26:
d8:6e:1a:db:d1:54:77:31:fa:c0:e6:f2:2d:d7:ef:
6d:2c:ca:90:5e:22:c6:42:74:11:b0:3d:41:be:14:
5f:71:6f:1e:64:5f:52:05:73:e3:df:2e:ba:67:49:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:AA:A3:B6:56:FC:85:60:24:5C:53:6E:91:92:3A:20:F6:AE:D8
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.103.85.0-192.103.86.255
192.103.91.0-192.103.92.255
192.103.105.0-192.103.106.255
192.103.110.0/23
192.103.116.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f4:e2:77:c2:14:4e:bb:e3:d0:5a:e6:31:d4:17:75:96:56:
c5:94:56:e7:17:a4:65:f6:58:50:c4:d8:4d:f0:d2:27:8e:08:
96:80:cb:e1:dc:d0:ad:3a:ff:5e:b8:fa:40:ac:6c:2e:72:09:
aa:37:e0:df:6e:ad:52:3e:e9:13:48:44:18:bd:3b:d4:6d:cc:
14:de:d9:3c:11:ca:f4:0e:36:f5:36:36:fd:72:98:0c:c1:18:
4a:75:9f:54:28:73:44:87:21:10:88:1c:b5:68:73:98:33:f7:
10:ab:90:cb:53:13:76:29:a1:a9:74:53:46:1c:3e:40:4c:b2:
39:14:61:1d:a4:b9:8b:d5:e6:7b:8c:fc:ce:65:9e:75:74:c1:
47:7a:05:16:b7:a1:ef:34:59:9a:01:16:15:2f:de:08:7c:8a:
e0:cd:63:b0:ba:98:47:6e:a6:eb:4b:9e:60:af:7c:4d:69:07:
e3:d4:85:f1:e7:eb:bf:0e:f6:bd:08:dd:44:a8:b5:00:c1:31:
ea:13:f7:bd:a3:21:b5:70:3e:e0:12:cd:f9:1a:7a:ac:1c:45:
42:db:0a:44:57:cc:1a:2f:d7:e2:0f:e3:16:a3:86:69:f7:86:
f7:f1:73:c6:a5:10:c7:ef:cc:00:b7:69:f3:f3:cd:12:2c:71:
f1:0f:91:9c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQf+kHIry3FM4yX9gjxVFBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj
NWRiNDYwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWM3YWFhM2I2NTZmYzg1NjAyNDVjNTM2ZTkxOTIzYTIwZjZhZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdfmx1dw1x/LvnG3AmAhqX4ntPEN
HwLLPuv0bbR7/Z+mTVCSxpCKiWrI5uSmtAgowRZGA3Rw8tRdgV7seO2/qhGtOCD0
fTTENJmZHtRol8rKc6J3pmK59+iu5sT4KM1PNPREfLGin7rJOa3tlClOdM7ywr1I
mxpmi/ZxL+y24fCMpiFIb2kDtsZKwqZv08VaGX5xbeEyh9aRLOleJcEqQt579ORM
QgOHW6YwVHl/EmA0k8N5WTunV/sFLNsNXTFX35KznCzcLCXwL0Ql8/THkSbYbhrb
0VR3MfrA5vIt1+9tLMqQXiLGQnQRsD1BvhRfcW8eZF9SBXPj3y66Z0kEwwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFMnHqqO2VvyFYCRcU26Rkjog9q7YMB8GA1UdIwQY
MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt
YTRjYThiOWMyMDViLzEveWNlcW83WldfSVZnSkZ4VGJwR1NPaUQycnRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi
LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBADAZ1UD
BADAZ1YwDAMEAMBnWwMEAMBnXDAMAwQAwGdpAwQAwGdqAwQBwGduAwQAwGd0MA0G
CSqGSIb3DQEBCwUAA4IBAQB59OJ3whROu+PQWuYx1Bd1llbFlFbnF6Rl9lhQxNhN
8NInjgiWgMvh3NCtOv9euPpArGwucgmqN+Dfbq1SPukTSEQYvTvUbcwU3tk8Ecr0
Djb1Njb9cpgMwRhKdZ9UKHNEhyEQiBy1aHOYM/cQq5DLUxN2KaGpdFNGHD5ATLI5
FGEdpLmL1eZ7jPzOZZ51dMFHegUWt6HvNFmaARYVL94IfIrgzWOwuphHbqbrS55g
r3xNaQfj1IXx5+u/Dva9CN1EqLUAwTHqE/e9oyG1cD7gEs35GnqsHEVC2wpEV8wa
L9fiD+MWo4Zp94b38XPGpRDH78wAt2nz880SLHHxD5Gc
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:32 2025 by rpki-client