Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Id012AQ8ZVkNP5wo8NAsSTYD8ZA.roa
File: Id012AQ8ZVkNP5wo8NAsSTYD8ZA.roa (raw, json)
Hash identifier: FGapHW1MTgmUhpIIOZuD1qZvI5GjqtDfd6IKqaV8kt0=
Subject key identifier: 21:DD:35:D8:04:3C:65:59:0D:3F:9C:28:F0:D0:2C:49:36:03:F1:90
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B382F292F4F12EDA472D8D2792882A4B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Id012AQ8ZVkNP5wo8NAsSTYD8ZA.roa
Signing time: Tue 13 Jun 2023 06:48:03 +0000
ROA not before: Tue 13 Jun 2023 06:48:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.36.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:82:f2:92:f4:f1:2e:da:47:2d:8d:27:92:88:2a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 13 06:48:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21dd35d8043c65590d3f9c28f0d02c493603f190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:c7:22:e8:7b:f4:4b:60:23:dc:77:10:fd:
47:9b:7f:8f:0f:c4:e1:50:1d:47:c4:d5:1b:90:5b:
9c:c1:32:85:50:5c:a6:10:62:59:b3:de:59:8b:8e:
e2:5a:a6:20:a0:73:58:d4:c8:de:52:75:f5:37:8c:
2c:ad:ca:6d:19:d0:e8:16:33:71:56:58:93:d4:10:
43:c9:16:fa:14:6b:40:66:8c:a3:08:e2:73:aa:eb:
38:d3:92:34:06:f4:18:d4:a2:c1:a4:51:26:bf:4b:
58:44:eb:bc:31:45:db:ec:dd:28:4f:3d:22:6f:6f:
59:28:43:35:b7:ad:46:49:a9:e5:4b:89:8e:5f:f3:
62:87:11:71:16:e3:07:48:e8:6b:7f:27:30:e4:f2:
66:f7:6e:8e:74:17:89:c6:d8:ad:c8:7a:a0:01:b0:
16:4d:b7:26:71:b5:f0:65:13:48:c7:5a:32:38:59:
19:4f:bf:d2:41:a8:66:a2:ea:73:f1:be:67:0b:fd:
a4:de:53:43:7c:a0:31:e1:78:3c:bb:26:32:66:56:
c2:c5:e2:02:87:a1:8b:33:fb:26:3f:a6:15:cd:46:
be:92:ee:aa:c0:0a:90:ff:07:d7:2d:de:70:95:51:
80:77:61:3b:73:20:16:05:a7:b8:50:94:49:36:19:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:35:D8:04:3C:65:59:0D:3F:9C:28:F0:D0:2C:49:36:03:F1:90
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Id012AQ8ZVkNP5wo8NAsSTYD8ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.5.0/24
5.105.7.0/24
5.105.15.0/24
5.105.18.0/23
5.105.36.0/24
5.105.113.0/24
5.105.118.0/24
5.105.123.0/24
5.105.143.0/24
5.105.162.0/24
5.105.170.0/24
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.206.0/24
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.253.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:72:30:13:93:ed:9c:c3:98:63:74:1a:a5:d4:52:c0:89:c2:
3d:01:5d:12:d5:2d:21:75:ba:f7:46:ed:35:8b:ee:72:69:43:
de:36:44:e2:a5:ee:a9:90:44:2a:a0:0f:53:a9:57:06:70:88:
23:99:27:df:5b:74:c3:6a:84:12:3f:4d:f8:c8:48:ca:56:b6:
15:c1:f9:0c:83:a4:f6:5d:51:f3:c6:1e:ab:02:97:cd:51:94:
70:bb:ab:fe:b4:63:4f:95:ad:8e:dc:52:05:75:21:55:55:b7:
06:83:19:10:68:55:6b:eb:68:e3:0d:b7:90:4d:b6:d7:23:d9:
45:a3:d3:a6:2b:cb:46:89:5c:df:bd:2c:76:06:ba:af:61:97:
55:69:05:40:f4:c1:0a:fa:53:23:cd:3c:d0:71:28:a9:ea:2b:
43:77:b6:9e:f0:d4:b1:ce:b8:33:aa:59:6f:b8:f4:6a:e7:32:
0c:e8:9a:b5:f7:03:ad:ea:e5:09:e0:28:30:37:cf:28:26:53:
44:92:8d:1f:80:73:b3:d1:53:4c:b5:6f:a7:87:bc:6a:ac:b8:
5c:d5:35:48:84:b2:60:f0:f1:d8:2d:e8:4d:80:88:58:b8:15:
62:ac:96:23:5d:47:6c:47:70:9e:f6:7c:2c:1a:96:5c:fd:17:
19:ce:fc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:08:27 2025 by rpki-client