Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TlApH5ff4Rq2IQu69x5p_n8xwtA.roa
File: TlApH5ff4Rq2IQu69x5p_n8xwtA.roa (raw, json)
Hash identifier: Ix29BgJHsjxQWrY1hliTqQUn22v6sY51JZJajMyBVoY=
Subject key identifier: 4E:50:29:1F:97:DF:E1:1A:B6:21:0B:BA:F7:1E:69:FE:7F:31:C2:D0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018969B78901306C42161D4BF6AA8E2220C5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TlApH5ff4Rq2IQu69x5p_n8xwtA.roa
Signing time: Tue 18 Jul 2023 15:56:23 +0000
ROA not before: Tue 18 Jul 2023 15:56:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 5.105.16.0/24 maxlen: 24
5.105.20.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:b7:89:01:30:6c:42:16:1d:4b:f6:aa:8e:22:20:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 18 15:56:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e50291f97dfe11ab6210bbaf71e69fe7f31c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:22:99:ad:32:cb:c1:de:fe:c4:ba:9c:19:
81:78:41:40:79:6f:4c:e4:91:d6:e6:89:84:af:35:
de:3f:1f:e9:eb:3c:cb:5b:98:d8:9b:2e:c6:cd:1f:
ab:19:29:5e:46:ea:e4:29:19:84:09:d4:ec:31:cb:
1f:a5:b2:9a:8a:af:67:27:20:a9:3c:50:fd:38:59:
b2:b3:da:58:6f:ac:f0:58:8b:a6:e9:7b:65:e8:de:
26:7e:29:7e:a4:22:00:ee:3c:33:e3:ac:62:4c:82:
f3:5d:c2:d3:30:4e:26:76:71:c0:c8:df:f0:a6:fe:
01:9d:82:4e:07:c5:2c:2f:d8:de:f8:40:e7:e3:35:
41:a2:6d:ee:e9:dc:07:08:87:bb:d8:b1:b7:c8:61:
69:06:f0:69:bf:53:24:9d:b5:a0:d8:71:b8:e1:ae:
37:54:09:85:73:7c:8a:f6:e5:05:60:2a:5c:25:e1:
e0:93:1c:51:3d:14:f0:3f:49:ef:4b:d1:12:9d:89:
e4:66:fa:04:44:dc:8e:e6:6d:d6:44:2e:f0:2a:d0:
b5:c5:da:e3:17:c3:84:50:58:7a:5b:0f:cf:33:2e:
94:9d:67:c1:23:1c:2b:01:36:d6:46:90:4e:52:5a:
c3:d1:69:d3:03:a0:7a:71:11:86:d1:74:e0:9d:9e:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:50:29:1F:97:DF:E1:1A:B6:21:0B:BA:F7:1E:69:FE:7F:31:C2:D0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TlApH5ff4Rq2IQu69x5p_n8xwtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.20.0/24
5.105.75.0/24
Signature Algorithm: sha256WithRSAEncryption
78:70:4e:5c:ef:bc:43:9c:dd:51:e0:51:a2:d9:68:8a:59:d4:
eb:c4:ee:de:54:f4:0d:b0:fa:fc:2e:3c:6c:c3:c1:85:0f:c7:
36:bc:6a:b2:ca:62:ca:64:b1:74:ae:22:ec:35:4d:86:4a:4b:
94:b9:23:f5:1c:f6:ae:ab:ef:01:f0:36:fa:1c:6b:5f:ff:52:
e8:6e:d5:58:b4:52:be:fa:29:93:fc:57:e0:c9:0a:bf:b0:67:
d6:d4:1c:7d:07:3d:c1:3f:93:6a:d9:98:91:cf:59:be:eb:4c:
c6:13:7c:ff:da:c8:6d:85:d3:45:cb:8f:7d:2f:7e:ea:8c:8e:
56:48:61:3c:27:3a:21:81:a3:b5:3e:02:f0:d1:13:cf:b7:93:
31:c5:db:3a:ef:b6:7b:42:74:a0:70:f1:69:f4:e0:38:9c:07:
e7:c5:1d:0b:55:59:10:65:79:e4:0c:fd:46:f9:c9:d3:c9:62:
0b:9a:28:28:e7:57:1f:21:71:b5:f9:10:39:53:4b:ea:7d:98:
45:c7:d5:55:8c:3f:da:9e:2a:cf:8d:36:10:74:a2:27:45:e4:
59:67:9e:3b:db:5e:91:6e:ea:cc:0d:e1:22:cd:59:2b:66:78:
9f:54:e4:71:2b:86:97:00:d1:49:e5:77:4d:b4:cd:f9:a8:14:
84:e4:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:20:55 2025 by rpki-client