Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Odx_6DVHdV0WfRD0t07RSzOMgsQ.roa
File: Odx_6DVHdV0WfRD0t07RSzOMgsQ.roa (raw, json)
Hash identifier: o1n2UU2Ri914zDS3OvSDYZs9xYzSskKDSW0+sNjjfPg=
Subject key identifier: 39:DC:7F:E8:35:47:75:5D:16:7D:10:F4:B7:4E:D1:4B:33:8C:82:C4
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01892A7EDB79BA207FAA968B56F51669A550
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Odx_6DVHdV0WfRD0t07RSzOMgsQ.roa
Signing time: Thu 06 Jul 2023 09:18:24 +0000
ROA not before: Thu 06 Jul 2023 09:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 5.105.165.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:7e:db:79:ba:20:7f:aa:96:8b:56:f5:16:69:a5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 6 09:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39dc7fe83547755d167d10f4b74ed14b338c82c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:da:a6:51:2b:fc:95:6f:86:ca:f0:27:06:
05:ea:92:e0:dd:a8:b5:f8:d2:c9:42:ae:c3:41:99:
ce:a2:dd:0e:2a:5a:c4:7f:b1:32:62:23:d4:c0:b3:
d9:c7:f1:e5:3b:bc:34:fc:93:67:50:14:6d:69:d7:
a5:82:62:22:ab:44:c5:24:82:80:b9:45:2e:5e:32:
41:fd:da:23:65:65:ab:50:ab:85:b0:1d:1b:1d:65:
7f:43:5c:51:c0:27:18:ee:63:92:91:09:a2:59:ee:
8e:bf:ee:01:f4:2f:9e:2f:c5:a4:c3:9d:4c:1a:ea:
ea:af:bb:f1:08:94:c9:56:2f:49:04:c6:f0:33:6a:
09:d9:5f:e8:12:21:04:9a:34:1c:6b:6a:bc:80:b8:
9d:5d:48:64:c2:c4:f6:88:d5:af:48:55:a2:3c:df:
51:c6:67:12:ed:40:3f:91:b7:83:6b:55:cb:e8:71:
3e:fc:ca:c1:ab:37:83:6d:55:9e:fb:15:1e:c6:80:
48:4e:dd:1d:a0:d3:5e:d6:6e:0b:db:08:2f:86:b7:
b9:24:8f:87:b9:9d:68:d0:4a:00:de:0c:25:24:e2:
1a:99:ae:ab:4a:fd:d7:f4:67:4d:7b:4c:57:6f:5a:
67:35:7f:de:f6:92:97:7d:46:f9:1f:a1:13:53:3b:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DC:7F:E8:35:47:75:5D:16:7D:10:F4:B7:4E:D1:4B:33:8C:82:C4
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Odx_6DVHdV0WfRD0t07RSzOMgsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.62.0/24
5.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:85:9a:be:dc:3d:65:55:a8:33:67:db:5d:46:d0:d2:de:dc:
05:c5:ad:2b:5f:68:1f:89:fe:65:c8:6d:1f:44:ec:b8:f8:ee:
07:6f:e5:aa:ab:5c:cf:4a:33:65:bf:80:86:4d:f7:33:65:45:
26:e1:fd:89:f3:71:7d:c4:6f:b7:a0:77:b6:32:00:c3:9d:9e:
9d:86:b5:69:db:da:dd:d4:c4:ca:b7:41:4d:ad:66:90:8b:e2:
89:4e:85:25:69:bb:1d:9b:54:10:82:23:7a:fd:8d:80:e8:0e:
1d:5b:18:f3:19:c1:17:31:12:68:ba:42:60:c2:88:b3:0a:9f:
18:2e:ef:8d:9e:c4:16:e3:ba:02:7f:18:00:9d:f2:67:94:fb:
c9:12:b7:c4:63:74:95:65:4a:90:15:4a:63:25:b6:b3:90:86:
7e:87:7d:b8:53:20:ba:b1:83:23:87:64:57:7a:7e:e3:61:85:
a4:71:c6:9e:46:c7:32:91:d3:ae:44:0d:f7:fe:e2:20:4b:f6:
26:ce:af:1f:57:f2:25:a1:3f:e6:02:63:21:6b:3a:d6:bb:7d:
07:47:ca:49:95:79:1c:8b:3f:08:8d:5c:74:45:3f:96:3d:bf:
d1:cd:dd:db:69:33:96:8f:1a:eb:df:9b:8e:f8:bb:17:86:24:
c4:0d:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:09:14 2025 by rpki-client