Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NbbRfuLaSLgcyITPL7XfdXou-WM.roa
File: NbbRfuLaSLgcyITPL7XfdXou-WM.roa (raw, json)
Hash identifier: fbBEs8hWdYKiaIw1GFmzLgRUIcmSz28eKMrtCAo0p6A=
Subject key identifier: 35:B6:D1:7E:E2:DA:48:B8:1C:C8:84:CF:2F:B5:DF:75:7A:2E:F9:63
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188ED0E96B0E92DA3C370BC6269A36F53E1
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NbbRfuLaSLgcyITPL7XfdXou-WM.roa
Signing time: Sat 24 Jun 2023 10:58:56 +0000
ROA not before: Sat 24 Jun 2023 10:58:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 5.105.230.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:0e:96:b0:e9:2d:a3:c3:70:bc:62:69:a3:6f:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 24 10:58:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35b6d17ee2da48b81cc884cf2fb5df757a2ef963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:94:dc:58:b8:66:e8:70:ee:8b:6d:21:70:
9e:c5:dd:20:fc:61:1b:f5:f1:bd:c4:1d:9d:c0:85:
eb:e5:14:8f:e0:6a:42:84:ab:eb:08:4d:85:4f:2c:
d6:21:5f:e4:36:02:e9:8e:ea:af:d3:29:f1:77:5d:
5a:f9:8b:db:be:ae:ce:db:5e:d3:64:b7:f5:2a:44:
bb:ca:29:6f:d9:7e:11:9f:18:72:2d:24:0c:2e:ce:
3e:ea:42:0e:1e:71:ca:f4:b0:92:5f:4f:e2:ac:3c:
03:5c:72:c9:cf:5b:1d:bf:74:d0:6c:6c:c3:9c:76:
40:2e:91:d1:8f:36:ea:db:b0:24:c1:3b:d3:21:4c:
66:0b:88:5f:22:ab:ca:4a:bb:cc:8f:97:11:10:78:
8d:4c:17:53:66:4e:8b:81:83:38:34:82:29:d8:b5:
64:0c:7a:5e:1e:ea:3d:90:8f:0b:ea:17:76:82:95:
55:da:57:b6:fa:80:22:a5:b4:be:f8:95:27:c0:23:
49:04:29:ed:7f:0d:f2:d3:c8:0a:cd:d5:ee:8d:81:
97:c9:b5:8c:c8:5d:31:75:76:07:fb:75:7b:04:7c:
db:79:bf:d3:fd:e1:e7:b1:29:1e:94:4f:9f:88:cd:
28:c2:fe:0f:3d:42:c3:88:53:de:57:2c:5d:5b:d7:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:D1:7E:E2:DA:48:B8:1C:C8:84:CF:2F:B5:DF:75:7A:2E:F9:63
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NbbRfuLaSLgcyITPL7XfdXou-WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.184.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fe:06:40:3f:0e:40:bc:8a:18:4a:68:f7:59:2d:cf:cf:56:
03:fc:2c:05:e5:37:84:0e:96:b3:56:2a:89:8e:35:ae:3d:63:
f7:84:be:df:9f:c8:8f:67:83:db:62:3a:38:38:32:02:5c:6d:
2e:25:2d:38:71:9c:4e:d4:bd:1b:e8:ba:c6:b1:49:f5:10:7c:
58:ec:36:d1:13:67:cc:c8:bf:72:0d:81:25:e4:23:47:0f:ac:
8f:bb:12:54:c6:a7:d9:71:68:6c:d8:86:d0:38:00:54:9e:84:
ce:74:23:09:88:30:78:a7:61:b9:37:79:be:3d:4f:0f:51:a3:
a8:5e:78:04:3d:db:cf:e6:0a:2a:fb:04:22:10:90:a1:b8:30:
89:66:81:b7:80:2c:c8:c6:51:00:ad:19:0f:49:1a:ff:0d:2c:
2a:09:9c:7c:9c:2a:dd:84:c0:d6:29:bb:4f:1b:5c:97:ad:db:
fb:eb:a8:14:a7:62:e7:39:16:85:d2:ce:b3:90:f3:9b:75:a6:
ef:b4:c1:85:50:6f:68:ab:9a:b7:75:5e:51:0e:7b:14:62:6b:
44:f3:31:61:58:68:6b:f4:16:23:91:42:ff:4f:40:ad:43:a8:
20:a8:ac:ef:a2:74:9e:92:68:7a:7b:0f:17:06:5d:6a:52:55:
40:c7:11:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjtDpaw6S2jw3C8Ymmjb1PhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjI0MTA1ODU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWI2ZDE3ZWUyZGE0OGI4MWNjODg0Y2YyZmI1ZGY3NTdhMmVmOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufSU3Fi4Zuhw7ottIXCexd0g/GEb
9fG9xB2dwIXr5RSP4GpChKvrCE2FTyzWIV/kNgLpjuqv0ynxd11a+Yvbvq7O217T
ZLf1KkS7yilv2X4RnxhyLSQMLs4+6kIOHnHK9LCSX0/irDwDXHLJz1sdv3TQbGzD
nHZALpHRjzbq27AkwTvTIUxmC4hfIqvKSrvMj5cREHiNTBdTZk6LgYM4NIIp2LVk
DHpeHuo9kI8L6hd2gpVV2le2+oAipbS++JUnwCNJBCntfw3y08gKzdXujYGXybWM
yF0xdXYH+3V7BHzbeb/T/eHnsSkelE+fiM0owv4PPULDiFPeVyxdW9dSMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDW20X7i2ki4HMiEzy+133V6LvljMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvTmJiUmZ1TGFTTGdjeUlUUEw3WGZkWG91LVdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWm4AwQA
BWnmMA0GCSqGSIb3DQEBCwUAA4IBAQBg/gZAPw5AvIoYSmj3WS3Pz1YD/CwF5TeE
DpazViqJjjWuPWP3hL7fn8iPZ4PbYjo4ODICXG0uJS04cZxO1L0b6LrGsUn1EHxY
7DbRE2fMyL9yDYEl5CNHD6yPuxJUxqfZcWhs2IbQOABUnoTOdCMJiDB4p2G5N3m+
PU8PUaOoXngEPdvP5goq+wQiEJChuDCJZoG3gCzIxlEArRkPSRr/DSwqCZx8nCrd
hMDWKbtPG1yXrdv766gUp2LnORaF0s6zkPObdabvtMGFUG9oq5q3dV5RDnsUYmtE
8zFhWGhr9BYjkUL/T0CtQ6ggqKzvonSekmh6ew8XBl1qUlVAxxEi
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:25:52 2025 by rpki-client