Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa
File: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (raw, json)
Hash identifier: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=
Subject key identifier: EA:CF:FA:47:D4:20:E8:1D:01:58:CC:EC:49:86:9D:73:20:8F:4C:D2
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 019427B61B5E938DD64B57641E9086A47F53
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49596
IP address blocks: 103.231.136.0/24 maxlen: 24
103.231.137.0/24 maxlen: 24
103.231.138.0/24 maxlen: 24
103.231.139.0/24 maxlen: 24
185.137.108.0/22 maxlen: 22
185.137.108.0/24 maxlen: 24
185.137.109.0/24 maxlen: 24
185.137.110.0/24 maxlen: 24
185.137.111.0/24 maxlen: 24
2a07:380::/29 maxlen: 29
2a07:387::/32 maxlen: 32
2a0a:40c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1b:5e:93:8d:d6:4b:57:64:1e:90:86:a4:7f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eacffa47d420e81d0158ccec49869d73208f4cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:81:3b:c6:6e:59:73:6d:a7:ca:1b:89:ec:
c2:ae:90:63:48:25:32:55:6d:7e:7f:1f:5e:96:64:
1e:97:67:1a:0e:93:9c:d2:c1:31:7a:5a:ff:9c:01:
84:50:56:0f:26:a9:d9:4f:1a:fb:bf:8f:1c:94:13:
4e:9f:fb:35:b4:07:a6:0f:02:16:36:9d:aa:4f:46:
d4:63:5d:08:cc:c9:2e:13:b4:1e:ee:7e:87:b8:08:
55:5b:c2:f7:a5:74:d4:a5:2c:4b:2b:34:44:2c:ea:
32:b3:70:89:87:95:cc:1f:a9:2f:cc:ea:64:54:15:
5e:4a:93:34:12:b9:f9:2e:bd:07:1f:c3:73:4d:16:
70:ad:d4:b9:c7:76:11:44:45:d3:0d:14:2b:71:d9:
c0:05:80:14:a8:5a:00:e1:4a:36:c8:44:60:dc:4f:
6c:21:96:9b:ed:d4:b9:88:c2:22:02:58:d6:d9:fb:
17:5c:1f:21:9b:d1:8a:ea:d1:5b:ff:7a:36:89:41:
e2:8e:07:0e:8a:ee:73:0e:8c:0c:7d:f8:c3:e6:a0:
8d:46:87:15:98:37:b9:95:fd:75:34:f6:e4:bc:18:
0f:56:99:b8:55:4c:5f:0b:93:9c:c4:18:4a:59:c1:
97:b5:79:7a:4c:ae:1a:34:eb:f3:70:99:79:3a:4c:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CF:FA:47:D4:20:E8:1D:01:58:CC:EC:49:86:9D:73:20:8F:4C:D2
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.231.136.0/22
185.137.108.0/22
IPv6:
2a07:380::/29
2a0a:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:ba:9b:dd:af:f3:5e:fd:4c:e9:8e:a1:c0:73:51:78:e8:40:
a4:be:d4:02:1e:54:4b:79:37:0b:61:7a:06:27:2f:0f:a9:aa:
14:ff:08:c4:db:32:ac:16:22:ab:76:0b:b6:f7:47:94:43:bd:
68:77:9f:93:85:94:53:12:c9:49:91:a0:b0:35:fa:0f:e6:06:
ca:3a:ca:ed:ae:67:44:dc:6b:be:bb:10:9a:d8:25:99:7e:5e:
8c:c7:47:7b:a0:70:13:cd:9e:e3:c5:e9:89:62:09:da:8e:c1:
11:8d:4b:40:e4:11:5d:bf:e9:bb:ec:27:44:25:93:93:38:0d:
09:9e:73:d5:d6:7d:bf:15:99:be:68:66:29:d9:f4:45:6e:9d:
41:c8:3f:77:ec:30:49:59:89:a6:24:17:60:17:4e:b6:d1:82:
fa:d9:13:0c:3e:f2:54:b7:b4:4f:5d:32:6d:13:16:42:ae:c4:
38:5c:96:36:06:f5:8d:bd:f9:f9:72:55:54:f3:c3:ab:14:5a:
4c:93:5d:a6:f8:7f:af:d6:3d:bb:90:c7:08:58:bf:4c:6d:f4:
f3:a6:db:5a:51:cd:af:ea:28:b2:43:89:5f:79:e6:70:3e:86:
46:55:c2:c5:fa:5d:91:df:f2:4e:3f:00:28:a3:c3:03:93:7a:
82:7d:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:40 2025 by rpki-client