Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_vjZCvtNu-Mqzmjs7D9gYWb-JpY.roa
File: _vjZCvtNu-Mqzmjs7D9gYWb-JpY.roa (raw, json)
Hash identifier: PAKzPcIwbr+skfGU9Scb3nQytTCqNTumn3fg8eXVVi8=
Subject key identifier: FE:F8:D9:0A:FB:4D:BB:E3:2A:CE:68:EC:EC:3F:60:61:66:FE:26:96
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189B0D79C1893286D120311496A73504501
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_vjZCvtNu-Mqzmjs7D9gYWb-JpY.roa
Signing time: Tue 01 Aug 2023 11:24:27 +0000
ROA not before: Tue 01 Aug 2023 11:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
5.105.117.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.209.0/24 maxlen: 24
5.105.15.0/24 maxlen: 24
5.105.14.0/24 maxlen: 24
5.105.13.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:d7:9c:18:93:28:6d:12:03:11:49:6a:73:50:45:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 1 11:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fef8d90afb4dbbe32ace68ecec3f606166fe2696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cc:71:5e:2d:a6:30:4e:4e:97:30:f2:d5:58:
1f:0a:a6:38:3c:f0:96:e1:a2:d6:fa:6b:56:ad:10:
1e:77:89:eb:0e:49:02:33:f4:74:40:27:e0:d5:66:
19:b4:e9:74:32:dd:46:8b:8c:5e:3b:d1:13:dc:d5:
65:b6:23:48:fa:d3:ef:b8:bf:f1:91:40:8e:6c:c0:
df:9a:5f:6a:7b:a7:08:e8:52:13:15:52:78:ff:c9:
01:d5:df:73:50:c5:c9:52:20:81:a7:60:ac:43:96:
4c:42:06:24:44:c9:84:3b:fa:94:cb:b8:94:99:7d:
06:ac:b7:3c:46:ca:bb:8f:4a:d8:4f:2a:98:26:8a:
9f:a1:d3:08:57:68:a7:ab:36:80:f3:8f:c7:d9:0d:
08:f2:59:49:46:62:8a:f8:3b:10:78:50:97:eb:0c:
f7:27:5c:57:71:67:3d:28:5e:e8:78:94:cf:ad:0f:
c1:fc:60:e0:38:ba:ca:c6:b9:5f:ad:8f:5a:8c:16:
a7:fb:24:00:ae:e8:67:14:61:97:1c:30:23:51:e3:
4d:9d:35:9a:d5:ca:e5:e7:96:25:a2:d6:a9:ef:b0:
59:53:08:12:eb:05:97:3d:06:6c:41:0a:f1:07:28:
2e:18:d9:a1:1f:65:21:1e:2c:5c:4a:06:04:33:67:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F8:D9:0A:FB:4D:BB:E3:2A:CE:68:EC:EC:3F:60:61:66:FE:26:96
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_vjZCvtNu-Mqzmjs7D9gYWb-JpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.13.0-5.105.15.255
5.105.18.0/24
5.105.21.0/24
5.105.26.0/24
5.105.30.0/24
5.105.32.0/23
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.101.0/24
5.105.111.0/24
5.105.117.0/24
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/23
5.105.169.0/24
5.105.186.0/23
5.105.202.0/23
5.105.209.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.247.0/24
5.105.249.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:81:d8:26:6e:b0:a3:7d:5f:42:34:25:2c:2f:4b:92:c0:5e:
84:d7:d8:66:13:cd:ad:26:68:c3:92:c0:23:c9:d4:bc:6b:bf:
94:d1:9c:95:6a:f0:59:74:9c:ac:c9:d8:11:15:74:ad:ba:2b:
98:20:f1:7a:a1:50:82:ac:46:a8:80:4f:54:a5:b6:96:65:71:
41:d5:0a:fe:48:49:9b:66:71:70:4c:4c:75:f8:f3:51:bf:ae:
59:52:16:38:1c:5c:76:4c:5d:13:e3:a6:7a:52:22:45:ca:10:
d9:fc:72:89:47:ce:1b:03:c4:c3:b8:d8:8d:04:0e:37:0a:d8:
61:c4:da:9a:fe:0a:9f:86:6b:80:c3:63:02:0d:e2:6f:7c:52:
9e:b8:65:07:9b:9f:04:70:eb:d2:b3:85:14:3f:5b:dd:4a:b0:
09:99:9e:02:0c:48:c6:b9:56:f1:0c:86:f5:eb:23:bc:75:98:
d5:07:06:8a:25:e6:83:03:69:75:5f:19:20:f8:c2:07:1c:44:
2c:40:78:b3:5e:21:48:05:8e:a9:a3:1a:f5:ce:5d:df:b9:70:
8f:4e:24:75:67:00:fa:5b:1b:4b:7a:63:d1:4c:2f:e3:3e:a2:
b8:43:cd:2d:64:a7:09:1e:d2:5a:2c:b4:90:78:55:cf:15:aa:
54:ad:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:03:23 2025 by rpki-client