Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BFaRX9hb7hd2G-rmn2tayKvZHxM.roa
File: BFaRX9hb7hd2G-rmn2tayKvZHxM.roa (raw, json)
Hash identifier: VZ9ozX0+mppxpI5mhDPxd3uL0kYdFt/GLhktF6yjVMo=
Subject key identifier: 04:56:91:5F:D8:5B:EE:17:76:1B:EA:E6:9F:6B:5A:C8:AB:D9:1F:13
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01870923B40827EC7D3F5C63680F4A74415E
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BFaRX9hb7hd2G-rmn2tayKvZHxM.roa
Signing time: Wed 22 Mar 2023 11:45:47 +0000
ROA not before: Wed 22 Mar 2023 11:45:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.242.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:23:b4:08:27:ec:7d:3f:5c:63:68:0f:4a:74:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 22 11:45:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0456915fd85bee17761beae69f6b5ac8abd91f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:af:c9:a2:32:c0:40:2c:9d:4b:3a:38:5a:
93:9d:5e:9a:1b:9b:da:37:2b:79:cf:81:33:f5:d8:
00:43:45:11:4d:51:da:bc:20:09:3c:b7:25:85:95:
68:cb:a8:e2:a8:3b:c8:98:50:b9:6c:9b:b5:3d:78:
93:e1:d4:06:62:b1:21:bb:bf:6c:1d:f7:d6:fe:e9:
b3:c2:8e:77:f1:47:7c:5c:64:4d:52:61:0f:37:2c:
7c:4f:bb:82:18:80:8c:f7:98:bd:a0:4c:4f:33:c9:
73:d9:53:f3:2b:50:53:b3:fc:ec:be:c2:0b:3f:ae:
ad:19:e0:54:39:65:f8:9c:ac:56:bb:e8:8c:db:ca:
6e:1f:ca:d0:0c:fe:1e:21:3d:d6:f1:f3:71:21:c3:
ac:e9:25:1e:73:08:7a:8d:a2:9a:29:72:36:76:03:
b9:5e:b2:d1:53:82:7f:a4:92:2a:3b:2a:c8:7f:58:
1a:67:3c:d9:55:ce:12:ea:46:9f:7e:c2:27:d5:69:
7a:61:3f:dc:04:03:6b:cc:d0:6f:89:3d:ea:82:9d:
4b:26:81:6c:ec:ad:47:ac:ac:ca:7a:43:2d:dd:95:
05:fc:48:43:86:c2:13:02:3e:94:88:a4:08:ad:9d:
77:31:5c:e6:83:1c:b7:42:08:02:6b:58:5f:05:d5:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:56:91:5F:D8:5B:EE:17:76:1B:EA:E6:9F:6B:5A:C8:AB:D9:1F:13
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/BFaRX9hb7hd2G-rmn2tayKvZHxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
5.105.66.0/24
5.105.169.0-5.105.170.255
5.105.185.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:b7:7f:37:88:22:83:fa:e9:5a:6b:70:00:4b:fb:63:2f:76:
8d:d8:8d:71:47:ef:fe:82:4a:f3:bc:b2:2b:a3:f1:22:f3:d2:
90:1e:1a:99:d7:da:99:da:3d:a6:21:33:20:3b:7f:24:b0:77:
47:27:f3:23:99:29:17:b8:99:41:0d:09:5d:c0:d4:21:ed:f4:
75:bf:a4:c9:08:c5:c8:88:ab:ed:67:25:ea:52:35:39:93:3a:
13:c6:a8:65:9b:e7:fc:6e:fb:74:5a:c3:dc:79:c7:9f:de:86:
ae:6e:7f:48:58:43:f7:af:92:ba:9f:1d:e9:7f:81:45:fe:f8:
37:b6:bf:01:44:f1:8e:a9:cc:b0:0a:da:c8:e6:7c:01:f9:bc:
d0:69:70:93:16:2c:83:6c:31:d7:f5:e4:1e:93:42:8a:d4:67:
38:c3:54:e0:e4:a7:f1:bc:cf:09:72:b8:26:e9:70:0e:75:56:
6f:a9:8f:15:fb:e1:76:69:7a:4d:c8:c5:39:03:42:7a:e9:c5:
0f:70:e2:4b:f2:9e:3d:2f:8f:f7:fc:65:d8:a9:5f:f4:72:b8:
5f:4b:f2:69:ae:19:43:73:e1:2a:51:7a:20:8d:fb:5a:2a:6d:
f4:1b:3f:98:7c:3a:6d:fe:58:0f:89:62:62:de:52:cf:1c:93:
24:f1:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:56:38 2025 by rpki-client