Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TFpiNCX7-aHNs2864nbuVVl5ZkQ.roa
File: TFpiNCX7-aHNs2864nbuVVl5ZkQ.roa (raw, json)
Hash identifier: lbQZQ0qTXDH2upgsQYdUmU0M4Mp14n9gWFqN00+boc0=
Subject key identifier: 4C:5A:62:34:25:FB:F9:A1:CD:B3:6F:3A:E2:76:EE:55:59:79:66:44
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A4FBEE3E8E539D6DAD42F7FD0A46CA317
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TFpiNCX7-aHNs2864nbuVVl5ZkQ.roa
Signing time: Fri 01 Sep 2023 07:57:04 +0000
ROA not before: Fri 01 Sep 2023 07:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63018
IP address blocks: 5.105.132.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:be:e3:e8:e5:39:d6:da:d4:2f:7f:d0:a4:6c:a3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 1 07:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c5a623425fbf9a1cdb36f3ae276ee5559796644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:e3:32:b2:d9:de:7e:64:bf:5c:ae:b3:8c:
81:bc:26:20:d0:73:7d:ba:9b:63:cc:e2:39:0b:4e:
1f:3b:2f:b9:b0:40:a3:e3:e5:aa:07:fc:f4:ab:4a:
85:1f:1e:b7:5d:47:ee:4e:f3:0a:a9:8e:2f:48:4e:
fa:82:6e:05:4a:17:eb:1d:cd:79:7b:27:2d:8c:63:
22:4f:77:44:c9:62:55:0b:a0:9d:2e:21:ed:72:6b:
4c:4f:4a:48:89:fa:5c:6f:f9:70:91:e4:9e:bf:2c:
2a:17:8b:73:fa:1a:a6:6b:98:01:10:81:f1:36:71:
36:7d:dd:d9:e6:88:f0:75:ae:34:8c:2c:c2:59:ae:
94:d8:fe:ca:e8:49:54:10:27:fe:fc:9e:09:e7:52:
64:9b:77:3c:33:ae:33:d8:44:ab:f5:db:ea:b2:4d:
7b:97:fc:ef:60:04:34:d2:45:95:53:3c:57:3b:1f:
77:dc:b3:7f:28:2c:69:65:08:71:ec:61:b8:7a:e7:
05:3a:2d:aa:47:c1:68:17:2e:22:aa:7f:5b:77:9f:
e9:3b:03:1c:79:bf:ff:dc:9a:96:3d:36:ae:f6:e3:
e0:01:f6:7d:0d:e4:9d:2e:48:73:5e:6b:bf:b6:f6:
34:80:4e:a7:ea:c2:1c:10:4d:5e:8e:da:16:aa:0c:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:62:34:25:FB:F9:A1:CD:B3:6F:3A:E2:76:EE:55:59:79:66:44
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TFpiNCX7-aHNs2864nbuVVl5ZkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.132.0/24
5.105.141.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:32:96:de:67:03:51:97:00:1c:e5:cb:87:4d:b4:cb:9d:f1:
38:e1:27:97:b9:26:56:96:80:7b:9e:4f:e4:c8:f0:8d:fe:5a:
cd:8c:31:05:fc:ba:e2:8f:80:09:df:08:3a:75:11:5b:01:1c:
e5:8b:05:b9:12:b6:57:be:f9:48:de:fb:42:ab:e4:52:43:9d:
f7:8a:26:31:ce:68:25:f1:82:6f:4c:c4:53:55:b4:c0:c7:71:
ba:5b:7e:54:06:2b:15:ac:2b:c3:78:9f:84:72:48:e6:e3:53:
e6:2f:64:25:57:9d:7b:2a:6e:f6:f9:6c:83:c3:6e:1a:86:95:
8e:2a:a9:cf:55:23:f5:37:db:2c:29:cf:39:37:57:bf:79:69:
9d:2a:3b:8a:fd:02:9a:1e:2b:3e:72:c0:53:b4:2c:77:3e:e0:
3e:81:56:25:ee:d2:fa:d6:8d:26:20:d9:a0:90:37:c0:0d:9a:
cc:6c:24:a5:53:d8:a6:4d:87:b9:76:e9:0a:50:56:38:bf:a7:
ed:ca:d9:7b:3f:3f:24:59:95:48:da:8f:a0:dd:62:9f:94:62:
bd:a8:4e:26:b9:f3:5d:d9:ff:4a:2d:74:7a:13:7a:ed:8d:a3:
7c:57:ee:d4:50:38:11:25:d3:48:75:29:ad:53:94:ca:8d:d0:
d4:9f:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:06:55 2025 by rpki-client