Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TnW288cpH0BqI7D40u2o16mvSOM.roa
File: TnW288cpH0BqI7D40u2o16mvSOM.roa (raw, json)
Hash identifier: ViqUS5sOljIBxuRRJpS22eDB1U28rpQjS9dcK7dBNU4=
Subject key identifier: 4E:75:B6:F3:C7:29:1F:40:6A:23:B0:F8:D2:ED:A8:D7:A9:AF:48:E3
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188730E87D9CDEABCF3EF0E62D4D87D5F51
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TnW288cpH0BqI7D40u2o16mvSOM.roa
Signing time: Wed 31 May 2023 18:25:12 +0000
ROA not before: Wed 31 May 2023 18:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.158.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.71.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
5.105.98.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.188.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.41.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:0e:87:d9:cd:ea:bc:f3:ef:0e:62:d4:d8:7d:5f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 31 18:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e75b6f3c7291f406a23b0f8d2eda8d7a9af48e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:5a:48:e1:5a:42:ab:fe:60:61:1a:8f:2d:
bc:d6:3f:53:d9:bc:5e:23:a5:9e:bc:b3:38:9c:08:
73:83:b4:3d:26:75:81:8c:1e:6a:fd:a4:45:23:bd:
48:fd:76:14:9e:17:bb:be:61:56:95:55:a4:0d:c1:
70:00:d6:c6:23:53:3e:41:4f:79:2e:f3:38:28:3b:
52:33:d9:e6:30:83:95:62:fa:b2:f1:25:b0:2c:f8:
7e:18:03:f7:f0:a7:3e:19:9f:30:13:b5:4a:a0:74:
09:35:64:a4:59:ba:b7:1f:92:60:96:9e:e6:0c:b0:
8d:f9:9f:c8:86:be:31:46:f2:9e:90:60:75:d1:1d:
59:0c:e2:3b:7d:3f:b7:a8:24:4c:3b:b4:c7:04:53:
37:7f:dd:c8:27:38:12:e0:04:37:bf:10:2d:4c:61:
a7:6f:4e:27:78:e3:86:79:f3:cf:a5:c3:4f:68:c5:
7f:1b:23:10:90:f6:43:ff:a9:e6:3d:9a:c7:a5:ab:
26:d6:ba:cf:e6:b5:83:1e:b3:a3:31:8b:6f:dc:9d:
0e:42:d4:8a:ec:1d:d4:cc:f2:6e:7d:98:04:59:81:
11:d8:f2:f2:92:b6:0d:97:8f:05:de:0c:ed:b0:61:
13:02:ea:9f:64:64:d5:c6:3f:14:45:30:29:62:1e:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:75:B6:F3:C7:29:1F:40:6A:23:B0:F8:D2:ED:A8:D7:A9:AF:48:E3
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/TnW288cpH0BqI7D40u2o16mvSOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.41.0/24
5.105.51.0/24
5.105.64.0/24
5.105.71.0/24
5.105.77.0/24
5.105.85.0/24
5.105.98.0/24
5.105.104.0/24
5.105.118.0/24
5.105.158.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.170.0/24
5.105.185.0-5.105.188.255
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.215.0-5.105.216.255
5.105.218.0/24
5.105.221.0/24
5.105.228.0/23
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
60:19:9d:ee:72:70:6e:eb:17:c0:ba:b3:4f:11:ec:ca:17:b1:
8c:74:51:c4:28:77:c4:f4:cf:2d:eb:e2:52:9d:d5:28:54:84:
99:2f:63:ea:4c:9f:02:a4:a9:07:f5:3a:4a:cf:02:7d:cb:8a:
96:cb:7a:07:b4:94:d6:9a:28:3b:55:75:9b:b6:96:e7:68:30:
57:e2:fc:02:af:35:23:fc:8f:93:32:fb:9d:c1:06:95:e1:4b:
7f:be:92:f2:7e:25:9f:0a:ec:8a:af:1c:8a:d7:12:bf:0c:3e:
b3:67:b7:7b:13:a8:3c:cc:95:9f:61:90:e6:65:6d:57:3b:3f:
63:9a:24:57:d2:73:30:c5:22:53:c4:ce:38:16:44:a1:9c:ab:
51:3b:6f:7b:a6:41:ec:8d:31:ff:c0:68:fb:e0:9b:df:6d:81:
bc:15:67:58:2e:c9:a1:ac:b8:40:89:4e:49:ac:c1:be:99:57:
6a:e7:45:35:12:ba:3d:10:d2:fe:3f:0a:a9:10:ac:58:d0:a9:
55:63:c8:a7:32:d4:92:ad:f2:5a:1e:8e:95:4b:a1:bb:df:6d:
fc:fc:b9:41:91:66:d6:1e:33:dc:85:8d:21:0e:40:0e:ae:3e:
35:9e:2b:1d:d0:2a:a5:5a:cd:e9:3d:b8:8a:9e:07:74:80:2c:
e4:5c:49:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:47:26 2025 by rpki-client