Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6vWiT2wAyTejEC9xtxd2HavnSpc.roa
File: 6vWiT2wAyTejEC9xtxd2HavnSpc.roa (raw, json)
Hash identifier: YZ5VKMFIZascYBKcKMuZ2EqL8NF4if+tOemip23OPmI=
Subject key identifier: EA:F5:A2:4F:6C:00:C9:37:A3:10:2F:71:B7:17:76:1D:AB:E7:4A:97
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018554150587BD39D1FE29220940B296A2F2
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6vWiT2wAyTejEC9xtxd2HavnSpc.roa
Signing time: Tue 27 Dec 2022 14:55:41 +0000
ROA not before: Tue 27 Dec 2022 14:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:54:15:05:87:bd:39:d1:fe:29:22:09:40:b2:96:a2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 27 14:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaf5a24f6c00c937a3102f71b717761dabe74a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:81:d6:8e:84:25:e9:09:19:89:64:6f:a8:
ad:6a:44:a8:2c:8f:31:61:75:92:2b:91:2a:c3:cb:
e6:59:36:52:e7:6a:40:ad:22:45:af:78:3e:76:4b:
bf:f5:8f:9d:05:ef:c3:00:f2:6c:e7:2b:b9:0d:49:
6b:de:5c:49:44:6f:db:f8:b6:ab:b5:01:1d:83:3f:
d7:aa:36:31:e6:c4:94:57:f9:10:49:e1:71:6b:e2:
46:99:7e:b1:36:0a:eb:6d:a4:8a:e4:82:6a:16:c4:
aa:eb:6d:7c:44:69:e0:dd:5d:97:a3:dc:06:1b:4f:
b7:ab:aa:86:d3:ac:bf:e7:f8:db:98:5a:45:87:c3:
90:d8:53:94:f5:a4:50:7d:26:4d:25:19:81:1e:fe:
e6:19:ce:40:a6:4e:81:25:23:73:6b:cc:a1:a8:79:
63:45:a4:e5:91:49:53:f1:f1:f7:ff:d3:f0:06:6f:
3d:1d:26:25:15:e6:05:86:2c:3a:27:86:af:8e:4d:
7a:2d:43:c3:e1:db:f3:c7:6d:08:e5:ac:7f:ad:5a:
19:a9:72:93:b2:e3:93:d6:30:eb:39:ee:41:31:b8:
52:0b:34:b5:09:6e:e4:4e:45:79:0e:e6:58:dd:30:
12:ab:01:27:13:72:d1:44:43:29:97:e2:0a:4e:24:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:A2:4F:6C:00:C9:37:A3:10:2F:71:B7:17:76:1D:AB:E7:4A:97
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/6vWiT2wAyTejEC9xtxd2HavnSpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.30.0-5.105.33.255
5.105.38.0/23
5.105.63.0/24
5.105.96.0/24
5.105.130.0/24
5.105.184.0/24
5.105.200.0/24
5.105.215.0/24
5.105.226.0/24
5.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d1:3c:20:20:ed:ad:71:86:f2:41:fd:96:bd:8e:17:d2:64:
d7:95:e4:e2:d5:07:b9:05:3c:50:9f:99:e8:55:bb:90:0a:c2:
02:90:bc:6f:75:ff:b6:80:1a:3a:79:85:f1:1d:b0:6a:04:61:
85:56:2c:56:cc:69:7a:64:d3:6e:0f:bd:67:c6:85:44:7a:2b:
e2:b0:0e:c5:17:ab:bf:64:aa:f2:92:48:04:73:73:f0:15:db:
9c:a1:fa:8a:33:28:6b:d2:e7:4e:fb:98:43:db:04:5b:7d:1b:
0e:dd:4a:e4:e4:10:a1:62:a8:70:df:bb:6a:4e:fe:33:7d:ce:
b0:de:3f:90:91:c8:da:ba:99:41:7c:45:7a:0a:2c:f5:9c:2b:
b8:73:4d:8e:6e:61:b6:f1:28:b1:57:ae:af:21:74:92:79:4b:
4a:c7:c4:8a:03:4f:f4:b6:e2:6e:a3:4b:e9:82:13:d6:c0:bd:
42:e9:4e:92:bb:74:ce:27:b2:8b:90:48:46:9c:ba:5e:7b:20:
cc:67:ae:04:d9:4f:1b:5d:a3:3d:00:98:53:e5:ce:78:7a:71:
70:b5:15:2e:c4:b2:ad:99:9d:9d:12:40:4d:1b:d2:8c:f2:91:
aa:6c:55:24:fc:27:e2:84:ef:5e:b9:78:0b:08:df:95:c6:4a:
81:e1:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:58:49 2025 by rpki-client