Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/SIvCgrnZaRJvkDFv_8jmXHh3C5A.roa
File: SIvCgrnZaRJvkDFv_8jmXHh3C5A.roa (raw, json)
Hash identifier: 4/9ZfHEIjuZMGMJTCUeRAb4tD/+t7gKiaJwQ87Z/hQE=
Subject key identifier: 48:8B:C2:82:B9:D9:69:12:6F:90:31:6F:FF:C8:E6:5C:78:77:0B:90
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01863BE24116D8B8E9577AB1FB4C9F796B54
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/SIvCgrnZaRJvkDFv_8jmXHh3C5A.roa
Signing time: Fri 10 Feb 2023 15:12:08 +0000
ROA not before: Fri 10 Feb 2023 15:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210912
IP address blocks: 5.105.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:e2:41:16:d8:b8:e9:57:7a:b1:fb:4c:9f:79:6b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 10 15:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=488bc282b9d969126f90316fffc8e65c78770b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:5b:34:b7:21:ae:00:63:a8:d7:6a:8a:94:
4b:b4:b6:44:bf:d9:05:fc:d5:34:09:e8:8b:9a:9f:
0f:c7:f7:e2:b3:fe:fc:63:46:84:02:4d:ee:de:db:
f1:4a:21:8a:df:eb:46:f2:1c:39:bb:2a:ca:9b:af:
4b:b2:af:d8:f5:ac:8f:be:00:7f:82:3d:07:99:2c:
07:5c:be:75:8d:21:63:d1:a1:c2:77:bd:1b:d4:f7:
f3:6b:5f:7b:b2:13:61:a6:72:0a:86:54:27:0d:a7:
84:84:93:b1:7b:05:a8:fb:69:03:a1:7f:5d:17:48:
88:2b:20:df:80:93:79:69:0c:8a:29:4c:3f:98:b3:
5d:c3:31:63:06:21:14:66:10:93:6f:d9:c6:a6:c8:
b8:c6:1e:55:c2:83:d6:a1:c1:e8:31:6a:58:77:71:
b8:ee:2f:35:89:6e:e0:5c:36:40:71:09:ca:fc:67:
3a:dd:a0:97:08:e8:a8:c2:2e:02:94:54:8c:f1:9d:
4a:fc:bb:57:56:04:ce:0c:25:fc:33:f7:37:c8:61:
37:9c:5c:68:52:a3:35:00:40:ee:74:86:90:53:90:
db:c6:44:ca:34:e1:1a:4d:2a:28:41:67:77:cb:97:
1a:9e:43:98:e7:9e:ef:0f:ad:e2:a2:48:2c:73:1d:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8B:C2:82:B9:D9:69:12:6F:90:31:6F:FF:C8:E6:5C:78:77:0B:90
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/SIvCgrnZaRJvkDFv_8jmXHh3C5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.39.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2c:54:71:cd:e8:a0:69:29:38:eb:91:88:61:42:ed:32:94:
08:09:57:18:b2:67:a1:59:36:3c:15:6f:3d:22:ea:ea:f8:a3:
44:78:f6:95:4e:74:1d:27:83:d4:e5:33:44:b5:64:e7:2a:8b:
56:30:39:79:76:df:37:9b:82:31:af:05:ff:01:c9:c9:a5:d6:
b6:77:82:72:8f:07:79:59:7b:4a:f2:f9:19:b0:65:a7:78:c9:
d9:f2:8d:ab:ed:4e:52:7f:06:e4:79:e5:a6:ac:27:bc:1a:31:
0c:d0:6f:49:0d:e3:c4:d3:c0:1a:78:7d:4d:4b:30:6b:ea:55:
fa:7b:e4:7a:ee:b7:a7:84:92:13:9e:f6:26:1e:b8:86:63:2a:
25:a9:f0:a0:35:36:cf:d1:9f:fc:8b:88:51:82:4e:64:c0:94:
3e:f3:90:e0:ce:fa:38:e0:93:12:10:be:be:fc:50:f6:e5:13:
13:4b:75:3c:9b:f4:e8:fc:a4:a8:30:44:6a:b2:59:35:b3:d6:
dc:a6:08:d3:d5:d0:b3:c0:f5:03:3f:27:1b:00:9c:b6:15:89:
30:31:b3:42:6f:cd:1b:94:8d:c2:26:47:3f:db:83:cb:dc:7e:
1a:87:3d:9d:fc:0e:38:cf:0d:40:eb:da:e8:11:02:5a:fe:c1:
85:64:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:20 2025 by rpki-client