Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ex0z0nUB7sFMhcWISAnfGTf-0_U.roa
File: Ex0z0nUB7sFMhcWISAnfGTf-0_U.roa (raw, json)
Hash identifier: 1xYyPhw34CDlMZbBP4Bj9VKTp4/Quh3D+0+mTmCKFas=
Subject key identifier: 13:1D:33:D2:75:01:EE:C1:4C:85:C5:88:48:09:DF:19:37:FE:D3:F5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188ED78CE083170E6F911768D3E26182E39
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ex0z0nUB7sFMhcWISAnfGTf-0_U.roa
Signing time: Sat 24 Jun 2023 12:54:57 +0000
ROA not before: Sat 24 Jun 2023 12:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
217.67.76.0/23 maxlen: 24
5.105.52.0/22 maxlen: 22
5.105.103.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:78:ce:08:31:70:e6:f9:11:76:8d:3e:26:18:2e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 24 12:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=131d33d27501eec14c85c5884809df1937fed3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c1:34:fd:ef:dc:97:a9:ca:aa:b2:dc:ba:41:
33:ba:42:62:6b:13:ca:df:53:89:1c:43:88:87:c5:
38:11:2a:45:f3:bd:0a:c5:01:d2:33:5a:5d:60:4a:
4e:7f:ed:c2:27:6e:f5:33:8a:db:8d:e1:89:11:22:
88:f9:10:60:6d:bd:f1:f9:9e:24:b2:18:62:f0:2d:
ab:b5:cc:dd:3f:20:b0:98:9d:1e:4e:1d:24:ba:2a:
5c:63:b9:02:25:50:00:f3:02:ad:56:77:86:09:04:
c3:42:67:23:46:8a:cc:2b:77:05:04:ec:a7:d6:52:
bb:c8:ce:c7:db:77:d8:63:3e:40:bc:2d:d1:00:b4:
90:07:da:10:f2:00:67:b7:e0:90:79:bc:b2:0f:35:
a9:47:88:a8:95:89:5d:79:ad:9b:82:e4:b3:09:2d:
72:ac:b2:61:51:10:a7:b8:5d:4d:77:94:f7:10:27:
46:89:2d:b7:1a:e5:62:0f:2b:e3:a9:8c:5a:34:34:
27:a9:f9:e8:d3:dd:d9:27:82:67:5b:83:77:21:b6:
04:f9:23:02:8b:d2:b2:26:8d:ba:e6:c7:f7:49:79:
e1:33:78:93:ab:fb:61:94:b2:24:e7:14:9e:a0:a9:
19:e9:21:5d:60:37:8f:36:de:38:cd:64:87:3a:45:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:33:D2:75:01:EE:C1:4C:85:C5:88:48:09:DF:19:37:FE:D3:F5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ex0z0nUB7sFMhcWISAnfGTf-0_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.52.0/22
5.105.100.0/24
5.105.103.0/24
5.105.106.0/24
5.105.137.0/24
5.105.219.0/24
5.105.227.0/24
217.67.76.0/23
Signature Algorithm: sha256WithRSAEncryption
60:63:a9:02:74:8c:1b:4c:43:12:b4:15:e6:a5:8a:0a:b2:b2:
70:6a:57:b2:9c:fb:95:26:c0:d1:6e:01:64:0e:46:79:b1:77:
84:d0:14:d3:a5:d0:d7:c5:46:25:05:86:77:68:57:6e:e0:29:
f0:3f:e2:c7:c1:61:87:22:90:e8:1c:ad:47:d5:20:39:6c:c1:
61:10:50:e8:c5:e1:09:d3:f5:7b:c0:6c:e0:4a:16:d1:e2:ae:
fc:28:3b:01:3b:cf:14:67:01:01:47:eb:92:40:5a:d8:89:17:
4b:2d:96:aa:86:05:d5:72:ac:d1:23:02:45:a9:43:7b:67:2e:
1e:a5:dc:d1:4f:a0:38:66:67:f1:14:2c:c8:0e:77:af:78:39:
d8:1c:40:e6:1f:1f:89:7c:18:8a:79:57:3f:f9:2b:de:c8:d8:
06:11:30:a6:a9:89:a7:d1:60:6b:b4:d4:da:e2:f6:5d:3f:04:
76:3a:ec:4f:56:d2:c5:5d:a7:1e:54:c8:53:d9:e5:a7:9b:b7:
cd:c6:1d:3d:f1:95:5f:a7:bb:de:97:e1:46:a8:a1:5f:85:ba:
68:c5:e0:db:d8:0f:2a:c9:3e:4a:de:23:b7:32:6a:2f:41:7e:
a2:c6:a4:b8:9b:24:63:8a:67:69:80:51:4a:73:81:ec:26:c8:
0a:89:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:12:47 2025 by rpki-client