Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9YSB4ACVLnXK3QfXqlTMlsl6WLw.roa
File: 9YSB4ACVLnXK3QfXqlTMlsl6WLw.roa (raw, json)
Hash identifier: iGgkL0eT9OG/ppq4yvbFfFOIeD2R9B5pFZ2L1E8/WXw=
Subject key identifier: F5:84:81:E0:00:95:2E:75:CA:DD:07:D7:AA:54:CC:96:C9:7A:58:BC
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188787FF890725C4DC7B6D1B405D1689D89
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9YSB4ACVLnXK3QfXqlTMlsl6WLw.roa
Signing time: Thu 01 Jun 2023 19:47:12 +0000
ROA not before: Thu 01 Jun 2023 19:47:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:7f:f8:90:72:5c:4d:c7:b6:d1:b4:05:d1:68:9d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 1 19:47:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58481e000952e75cadd07d7aa54cc96c97a58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:a1:19:4d:d5:93:64:c0:c5:c4:bf:b4:f3:
27:7f:75:cf:16:7a:3b:1b:a9:a8:5b:04:b6:a5:63:
81:38:1a:7a:a1:99:5c:8d:46:b3:72:8c:5c:33:90:
30:03:53:5b:8f:dd:f6:df:c4:39:90:9b:d3:d9:88:
97:bf:84:1d:a2:56:1e:25:33:85:92:74:82:4a:9e:
c5:79:29:71:c0:22:eb:19:8a:12:40:38:ff:b2:98:
6e:3c:9b:9d:9d:3c:10:60:ca:21:0d:a3:eb:1d:23:
ae:74:c3:9c:f4:42:22:a3:9b:65:10:4c:8f:f8:4b:
4a:a1:a8:59:df:1a:b0:cc:99:33:b9:1a:10:66:9b:
1b:50:89:7e:5a:cd:58:f0:bc:ce:10:d3:47:c0:cb:
f4:cb:07:21:f9:7b:d5:30:fc:39:5c:ac:f2:7d:02:
19:4e:a2:9d:10:06:d9:aa:14:95:42:69:4b:64:31:
39:05:8e:68:48:9b:72:4c:da:9a:26:52:cf:c1:23:
fe:fb:7b:8b:5f:eb:5b:88:53:7f:0a:47:90:70:df:
9f:e9:9d:13:59:e4:b8:94:be:2a:1f:11:fe:c8:e5:
8f:79:be:a8:0d:65:ac:35:cb:17:d5:ae:b3:2b:eb:
b9:3a:00:c0:23:86:99:32:e2:0b:62:a1:19:74:d2:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:84:81:E0:00:95:2E:75:CA:DD:07:D7:AA:54:CC:96:C9:7A:58:BC
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9YSB4ACVLnXK3QfXqlTMlsl6WLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.31.0/24
5.105.51.0/24
5.105.64.0/24
5.105.71.0/24
5.105.77.0/24
5.105.85.0/24
5.105.98.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.188.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.221.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3b:0d:06:5e:8d:6e:1a:5f:53:fc:3f:8c:78:8b:ab:7d:ac:
07:72:e4:14:3c:70:c0:01:64:70:a9:68:23:8a:aa:ea:c3:b4:
cd:e6:31:ed:08:b8:49:1a:78:34:79:7b:c5:59:12:68:bd:d5:
50:3d:23:48:b5:74:25:72:e1:34:0d:ab:68:40:6e:5b:c3:75:
ed:4e:1b:9e:88:5d:58:29:3e:0b:6f:5b:c6:6c:7e:62:24:9a:
ab:61:08:ea:2a:fe:ba:7a:55:3f:ce:b5:d5:c3:7a:14:1a:95:
7e:f2:2e:e1:05:25:a9:bc:d7:14:49:da:71:57:ef:c5:60:18:
ea:2f:ae:7a:3e:72:90:12:a5:78:e0:f8:d5:0b:8e:ca:83:a7:
4f:a8:20:56:82:35:fe:d2:23:c5:09:ad:95:8e:c6:8f:aa:3a:
9f:16:f4:c0:7a:58:56:5b:cf:b7:a1:eb:31:b3:a2:73:0a:e2:
fd:23:63:cd:7f:dc:73:1f:1e:56:cc:c1:e2:e0:c9:99:50:af:
62:5f:4c:2f:5b:fd:d0:6e:2e:2d:c2:7d:fd:d3:63:01:06:2d:
b8:b3:12:e0:54:84:1f:85:93:f1:d0:99:99:7f:a7:e5:ee:99:
61:be:ee:14:e9:b3:9a:a7:cc:c3:aa:1b:33:fe:58:78:0e:b7:
02:c0:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:41:58 2025 by rpki-client