Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa
File: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (raw, json)
Hash identifier: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=
Subject key identifier: 25:B9:47:01:D9:E4:CF:B2:03:44:EF:10:98:7D:89:30:E8:F3:93:24
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 019420681206DDB4D8480DAC32786B669BB8
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa
Signing time: Wed 01 Jan 2025 05:47:58 +0000
ROA not before: Wed 01 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204393
IP address blocks: 103.215.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:12:06:dd:b4:d8:48:0d:ac:32:78:6b:66:9b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Jan 1 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25b94701d9e4cfb20344ef10987d8930e8f39324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:63:76:b2:1f:64:e0:88:01:86:7e:49:0b:
6a:27:ed:8b:69:93:a8:97:bf:8d:30:99:4b:37:fa:
da:4c:f2:d3:ce:76:01:86:d9:1e:3d:0e:d5:5c:e7:
6e:43:b7:75:ef:bb:f0:5b:70:4d:bf:69:5e:60:6c:
9d:38:03:ab:3e:a1:64:3e:aa:55:db:1d:6a:f0:31:
fc:2f:53:5c:ae:f4:55:96:ec:42:92:09:09:b4:6b:
9c:e1:c6:a6:5e:f9:2b:fe:7f:28:43:9e:7e:1e:af:
ec:ba:b2:39:28:68:4a:1e:ca:2f:cd:f2:15:28:e0:
92:6d:93:17:2a:10:66:5d:af:26:a5:2d:28:cf:01:
cb:c6:38:8d:c8:6e:d8:77:9c:96:1c:17:6d:1a:46:
94:3b:ca:4a:57:eb:93:7d:f8:db:b2:f3:5d:ca:d3:
ef:e1:22:65:6b:0a:74:08:11:2f:f4:e6:ac:64:59:
f4:f5:a3:94:6a:c3:d6:42:12:f2:f9:aa:e1:10:86:
12:a5:5b:37:80:11:e0:73:0b:6a:75:61:2e:57:ba:
ea:54:c2:da:70:29:9d:9a:32:4b:5e:e2:a5:76:46:
42:97:6d:1f:44:98:99:82:fb:0f:eb:2e:d3:9c:c0:
3f:36:48:d5:d8:0c:65:06:83:71:b3:a2:e2:32:68:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B9:47:01:D9:E4:CF:B2:03:44:EF:10:98:7D:89:30:E8:F3:93:24
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a9:33:32:aa:d1:b7:70:8c:dc:7d:73:d6:a9:e8:61:aa:9c:
7d:10:9a:98:74:45:9e:94:96:68:9b:4b:cb:33:87:7d:7e:18:
92:71:92:03:a6:50:a8:3d:ad:23:6c:bc:ef:9f:00:10:9e:8f:
39:47:a0:f0:25:60:51:28:bb:2e:db:5a:3d:89:75:ad:e1:a1:
92:1e:2d:8d:a8:ab:ec:92:e6:62:3d:d9:f6:d3:a2:a1:cb:91:
7a:62:77:27:95:c5:66:55:d1:f9:34:c8:d7:ce:59:07:54:9d:
36:a1:e7:09:d9:b4:fd:b2:f5:33:3b:36:23:b2:9a:5b:e7:c5:
a1:e5:d4:09:a8:03:d9:ee:ab:aa:62:55:05:3a:ed:ac:e0:f1:
36:25:27:0f:f6:35:13:f6:24:24:aa:9e:bc:a6:49:ce:84:0c:
2f:d4:19:2c:25:51:7f:b5:2d:89:7c:e3:d8:a6:33:17:3c:25:
f6:6e:b4:1a:99:79:d8:3f:1c:78:9c:7e:b2:58:9b:51:1f:f9:
c9:cc:c8:b0:b3:84:af:4b:fc:07:dd:da:8d:21:db:c5:1d:f0:
14:48:98:59:a2:48:82:fa:70:20:b5:71:fa:40:88:69:c9:22:
a5:32:15:97:b8:7f:04:b3:ce:f8:b1:bf:04:38:4b:96:f1:12:
0a:6e:62:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaBIG3bTYSA2sMnhrZpu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk
ZmQ5YTgwHhcNMjUwMTAxMDU0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWI5NDcwMWQ5ZTRjZmIyMDM0NGVmMTA5ODdkODkzMGU4ZjM5MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8tjdrIfZOCIAYZ+SQtqJ+2LaZOo
l7+NMJlLN/raTPLTznYBhtkePQ7VXOduQ7d177vwW3BNv2leYGydOAOrPqFkPqpV
2x1q8DH8L1NcrvRVluxCkgkJtGuc4camXvkr/n8oQ55+Hq/surI5KGhKHsovzfIV
KOCSbZMXKhBmXa8mpS0ozwHLxjiNyG7Yd5yWHBdtGkaUO8pKV+uTffjbsvNdytPv
4SJlawp0CBEv9OasZFn09aOUasPWQhLy+arhEIYSpVs3gBHgcwtqdWEuV7rqVMLa
cCmdmjJLXuKldkZCl20fRJiZgvsP6y7TnMA/NkjV2AxlBoNxs6LiMmjxJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCW5RwHZ5M+yA0TvEJh9iTDo85MkMB8GA1UdIwQY
MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt
MThkMWE0MDZhYWVkLzEvSmJsSEFkbmt6N0lEUk84UW1IMkpNT2p6a3lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk
LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9feMA0G
CSqGSIb3DQEBCwUAA4IBAQALqTMyqtG3cIzcfXPWqehhqpx9EJqYdEWelJZom0vL
M4d9fhiScZIDplCoPa0jbLzvnwAQno85R6DwJWBRKLsu21o9iXWt4aGSHi2NqKvs
kuZiPdn206Khy5F6YncnlcVmVdH5NMjXzlkHVJ02oecJ2bT9svUzOzYjsppb58Wh
5dQJqAPZ7quqYlUFOu2s4PE2JScP9jUT9iQkqp68pknOhAwv1BksJVF/tS2JfOPY
pjMXPCX2brQamXnYPxx4nH6yWJtRH/nJzMiws4SvS/wH3dqNIdvFHfAUSJhZokiC
+nAgtXH6QIhpySKlMhWXuH8Es874sb8EOEuW8RIKbmLv
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:52 2025 by rpki-client