Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QLdNI4lvtdYj60g3Pt2MxQBWhnk.roa
File: QLdNI4lvtdYj60g3Pt2MxQBWhnk.roa (raw, json)
Hash identifier: 2+AzxlHYouvi0QQofcILMs9LdYS96BJ7p687AW8s4eE=
Subject key identifier: 40:B7:4D:23:89:6F:B5:D6:23:EB:48:37:3E:DD:8C:C5:00:56:86:79
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0183F6F2D2CF1DD54C18380838AF4CF53131
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QLdNI4lvtdYj60g3Pt2MxQBWhnk.roa
Signing time: Thu 20 Oct 2022 19:50:52 +0000
ROA not before: Thu 20 Oct 2022 19:50:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397373
IP address blocks: 5.105.159.0/24 maxlen: 24
5.105.167.0/24 maxlen: 24
5.105.171.0/24 maxlen: 24
5.105.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:f2:d2:cf:1d:d5:4c:18:38:08:38:af:4c:f5:31:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 20 19:50:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40b74d23896fb5d623eb48373edd8cc500568679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:85:a9:14:b8:4b:cc:fb:3e:72:74:8d:12:
7f:c2:16:37:2c:57:e9:47:7b:16:ad:fa:dc:d7:c3:
a3:b4:95:48:6e:ac:6c:cf:5d:41:1c:1e:b9:ca:59:
cd:0e:cb:0c:a9:7d:a7:e4:05:05:60:aa:1a:6b:8e:
9f:60:ff:5d:f9:0c:06:dc:f2:4f:fb:e8:45:6e:c8:
dc:1b:ad:35:96:8f:34:a0:51:ae:78:44:38:35:2d:
55:c9:24:0a:47:8f:97:25:cd:5a:fe:dc:b4:33:1b:
d1:e9:84:24:49:93:d4:49:a7:c0:3a:45:fd:f5:e8:
23:c7:3d:76:8b:ce:5f:ce:e0:be:a0:42:2e:d2:5a:
69:01:64:9c:28:3e:56:81:0c:1d:1e:a1:e9:af:d1:
ba:b5:c5:3f:1a:69:fb:88:f3:29:85:71:f9:f5:c4:
71:c8:02:9f:38:01:bc:b2:63:4e:ee:36:26:c3:e1:
05:46:08:86:b4:57:c6:1c:c9:5e:5f:90:9f:79:31:
df:7f:d2:4f:99:bb:28:28:3a:4a:71:50:fe:3b:ee:
fa:b5:88:6e:a3:4a:b7:68:43:46:c0:73:01:53:5d:
73:9a:45:5c:bd:dd:f7:fe:c8:09:03:11:a3:ef:67:
a9:f8:c4:c1:2e:bc:2b:0a:b4:32:cc:4d:08:ea:a6:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B7:4D:23:89:6F:B5:D6:23:EB:48:37:3E:DD:8C:C5:00:56:86:79
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QLdNI4lvtdYj60g3Pt2MxQBWhnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.159.0/24
5.105.167.0/24
5.105.171.0/24
5.105.173.0/24
Signature Algorithm: sha256WithRSAEncryption
21:7d:d8:65:d7:54:ec:aa:33:66:39:e5:59:d2:d5:32:77:fc:
bb:ec:ee:34:c2:1b:78:d1:0e:37:51:a5:87:77:de:52:84:af:
be:92:16:3e:67:f3:5a:f2:53:48:16:b2:14:f5:84:2e:6c:45:
ef:69:43:6a:e0:40:79:5c:73:94:29:25:c6:5b:d0:f7:36:2d:
49:40:f6:bb:0d:ce:71:f1:47:1e:da:b7:35:65:86:a6:ef:9c:
32:29:84:44:ec:63:4f:61:86:77:83:e6:16:8c:97:39:3e:81:
71:a7:0a:07:aa:fe:1d:aa:34:31:53:f4:37:83:01:0d:12:6e:
e0:8d:37:73:82:7a:46:6d:26:bd:72:21:d2:f7:51:79:0f:db:
88:91:ac:f6:50:81:30:96:c2:24:89:50:27:54:3a:ec:52:bc:
b1:1e:79:9f:e9:90:61:24:d4:6f:04:7a:60:ea:68:0a:13:bb:
0e:72:fa:29:d5:a7:29:f5:05:b5:b4:88:bc:61:bd:a0:6e:b0:
43:f9:df:8e:30:7b:35:f3:79:8d:bc:db:9d:d4:fc:92:5f:b0:
24:47:15:ab:ee:89:6d:b2:f6:56:8f:8d:bc:da:8d:b8:fb:94:
71:0b:c9:b2:d7:49:7b:c4:b7:56:be:7a:e9:8b:f6:55:4f:0c:
28:0e:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:11 2025 by rpki-client