Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6WDcmhrqETI7lVvOBKG_M40AubY.roa
File: 6WDcmhrqETI7lVvOBKG_M40AubY.roa (raw, json)
Hash identifier: aFEQwMI80btlsunIOwSw7dM8g4zdybqbC8QylhcYcGc=
Subject key identifier: E9:60:DC:9A:1A:EA:11:32:3B:95:5B:CE:04:A1:BF:33:8D:00:B9:B6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018851F75AC809C8F48E170EF62D04B01E19
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6WDcmhrqETI7lVvOBKG_M40AubY.roa
Signing time: Thu 25 May 2023 08:12:25 +0000
ROA not before: Thu 25 May 2023 08:12:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.41.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:f7:5a:c8:09:c8:f4:8e:17:0e:f6:2d:04:b0:1e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 25 08:12:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e960dc9a1aea11323b955bce04a1bf338d00b9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:17:f0:d6:57:a5:08:15:9c:86:63:08:ac:
a6:a8:1b:a8:de:78:4b:9d:41:d1:47:d9:0c:dc:a1:
13:2b:be:bd:0c:d8:f8:22:d2:aa:91:4e:72:0e:7b:
32:8c:d0:0f:a8:3c:63:76:df:ed:ae:ca:f6:7d:6e:
3f:14:fa:d8:ae:5d:b9:84:81:2a:27:8c:6a:08:48:
d2:e9:a6:e6:d4:f9:28:b5:a5:74:6e:a7:44:b2:cb:
8b:a6:53:17:b9:51:a3:c9:92:50:c4:cc:f1:5f:c7:
ca:72:ae:50:af:98:25:25:5b:fd:0c:50:c6:1a:6c:
75:35:bd:bd:65:0b:25:5c:2d:20:d2:9a:6e:b1:a8:
ac:ef:62:90:02:cc:c1:34:04:c6:8a:39:6a:af:bf:
aa:b0:f2:b7:30:6c:45:ef:e2:4a:5a:0a:44:1e:8d:
a4:64:a9:b9:eb:82:de:89:25:6b:be:4b:76:a1:df:
55:2b:f8:d6:89:6c:26:0b:1c:8d:65:e0:21:d1:18:
50:ea:8f:e6:30:29:95:4f:65:7a:44:ab:57:a0:92:
35:21:20:42:e0:e9:a8:95:8a:ed:e5:10:4f:7a:83:
61:7b:32:9e:73:90:0f:cb:cf:98:64:f1:a5:fa:ce:
24:f4:ee:38:16:59:25:87:fc:f2:52:16:44:65:c8:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:DC:9A:1A:EA:11:32:3B:95:5B:CE:04:A1:BF:33:8D:00:B9:B6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6WDcmhrqETI7lVvOBKG_M40AubY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.41.0/24
5.105.51.0/24
5.105.64.0/24
5.105.71.0/24
5.105.77.0/24
5.105.98.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.188.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.215.0/24
5.105.218.0/24
5.105.221.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.247.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
60:60:0d:37:64:59:3e:c5:50:b4:fe:e8:c6:60:50:39:33:3e:
29:6f:6d:7d:34:f6:ef:0e:f0:a0:6e:5e:d7:f4:19:91:ff:ea:
f1:47:9e:0e:fc:6c:7d:1a:12:73:27:44:63:ec:f4:e2:fa:84:
05:3e:60:90:0e:12:89:eb:bb:53:19:6e:56:df:af:62:4a:54:
8f:85:10:31:28:ce:26:1b:14:ed:60:0d:6c:ed:24:fd:e3:4f:
e0:dc:cd:27:79:6c:cd:03:38:7b:e1:2f:bc:6b:14:bc:ea:b4:
ac:a3:e8:8c:53:38:ee:eb:29:ee:aa:21:48:29:80:91:fe:79:
3e:ec:ac:76:ce:06:0e:11:dc:af:aa:3e:a4:74:50:4a:48:c2:
04:ff:a0:6e:4d:32:f9:99:f9:39:b9:33:54:46:67:18:e5:66:
c5:2d:a7:10:95:39:13:46:b1:0e:95:fb:37:d1:5f:6a:55:43:
ab:16:a2:24:d3:10:3d:7f:13:4f:ad:57:92:8b:51:9b:6a:ea:
38:5d:66:eb:f7:e4:3b:90:57:ad:ae:1c:5a:0d:fc:c9:05:6d:
4a:60:a6:0a:ed:b7:bd:02:5d:e8:93:e1:50:d0:2b:fd:c7:d3:
ed:1c:dc:eb:73:6b:2c:69:84:68:7e:d8:b6:87:c3:8b:79:f8:
4a:cf:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:08:34 2025 by rpki-client