Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5o1drJhMxPKvUKdyV1IfusUnhqs.roa
File: 5o1drJhMxPKvUKdyV1IfusUnhqs.roa (raw, json)
Hash identifier: XINchL4vPoKO7EFD7MwzRxqGHVWAhkkTeBBJ+OUpC4A=
Subject key identifier: E6:8D:5D:AC:98:4C:C4:F2:AF:50:A7:72:57:52:1F:BA:C5:27:86:AB
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189965B37AAE0694CE59AC5C54682C34E36
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5o1drJhMxPKvUKdyV1IfusUnhqs.roa
Signing time: Thu 27 Jul 2023 07:58:27 +0000
ROA not before: Thu 27 Jul 2023 07:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.142.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:5b:37:aa:e0:69:4c:e5:9a:c5:c5:46:82:c3:4e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 27 07:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e68d5dac984cc4f2af50a77257521fbac52786ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:cb:05:8a:2b:56:6c:a7:36:fe:e3:78:1c:
76:6f:e9:71:19:c6:f3:5d:63:18:cf:3c:7f:89:5e:
df:85:4a:e3:f0:5e:bd:b8:b6:8f:7d:1f:8f:3a:b0:
1b:bb:aa:25:62:d3:12:c1:fb:b7:c8:f5:08:84:eb:
60:6e:03:d6:7c:83:e8:4d:04:18:6a:a8:ae:44:08:
b6:10:e2:fe:e7:0d:68:e4:f3:b3:4c:76:36:63:f4:
ab:a3:82:7a:23:03:f9:32:61:b1:38:97:ce:e8:7a:
09:bb:a8:36:94:66:e0:94:96:2e:f7:b1:61:d0:03:
32:59:3f:a1:2e:56:87:a0:f4:68:7d:fd:ed:6f:9a:
32:a9:6e:c5:6c:87:39:fc:28:41:72:3a:fb:33:77:
e6:2b:c6:69:0a:75:ce:58:58:b8:89:19:88:7f:cb:
17:ac:ee:67:41:16:10:c7:39:6b:a4:a9:64:ae:67:
2f:ec:4e:ef:74:91:e3:2e:8b:3a:4a:83:c7:cd:3b:
b2:d9:73:b0:17:f4:0c:db:45:18:e5:33:d8:3c:45:
e3:a0:3c:ae:95:36:0d:e2:4e:53:73:c6:5d:cf:8d:
85:0e:1c:46:8e:fa:03:f9:43:13:bf:1d:3a:4b:aa:
dc:a7:e9:18:a8:ac:a7:2b:55:af:5c:5f:e8:f6:e0:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8D:5D:AC:98:4C:C4:F2:AF:50:A7:72:57:52:1F:BA:C5:27:86:AB
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/5o1drJhMxPKvUKdyV1IfusUnhqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.142.0/24
5.105.207.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b5:a8:8c:34:43:6e:50:7d:31:a5:2e:e1:a3:31:7c:1f:9e:
57:5d:aa:f4:2f:a3:6c:ca:69:ba:3e:14:59:e5:c7:79:bd:64:
ab:9b:3b:25:ce:f0:6c:32:01:aa:35:08:56:f7:83:57:88:1a:
ef:45:0b:c3:8f:3e:25:51:bf:b5:1f:d6:bd:41:64:1c:39:12:
f6:8b:ec:4f:83:8f:ec:e4:39:4a:8c:62:a4:91:23:93:91:9e:
c7:06:8e:b4:39:ad:9c:4b:71:43:da:e7:bc:38:88:7c:e7:b5:
ca:84:7f:9b:69:9a:12:fd:7d:91:0e:fa:67:e4:1e:75:a7:a6:
19:99:e2:ae:99:75:ec:69:ed:00:24:e2:47:64:2b:09:3f:97:
de:d1:e4:61:cc:51:f4:54:23:42:d0:e7:7e:0c:09:e4:7f:20:
3b:af:f5:f7:ea:d3:37:2b:ed:f0:a4:44:63:43:65:e8:19:78:
0f:52:49:0f:de:e8:02:88:d1:68:b5:99:d8:c8:f6:b1:6a:a6:
a6:71:6f:b7:5a:fd:9f:38:64:2f:a7:87:2c:1d:07:01:e9:78:
7d:cf:b0:aa:72:2b:fc:da:2d:4d:ed:cb:13:4e:3e:28:f4:23:
3b:22:ba:9a:77:a3:72:22:39:70:06:cf:15:56:be:37:d8:71:
c3:78:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:00:18 2025 by rpki-client