Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bPWZR7p78t_NuiCN824ECbRfDKc.roa
File: bPWZR7p78t_NuiCN824ECbRfDKc.roa (raw, json)
Hash identifier: p+gaTGigr45HBKIF380RyX/qqZmn/hQWxvCXKliPbMs=
Subject key identifier: 6C:F5:99:47:BA:7B:F2:DF:CD:BA:20:8D:F3:6E:04:09:B4:5F:0C:A7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188DD38C419BA93E7B105AAD6B60D389B89
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bPWZR7p78t_NuiCN824ECbRfDKc.roa
Signing time: Wed 21 Jun 2023 09:11:04 +0000
ROA not before: Wed 21 Jun 2023 09:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.14.0/24 maxlen: 24
5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:38:c4:19:ba:93:e7:b1:05:aa:d6:b6:0d:38:9b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 21 09:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cf59947ba7bf2dfcdba208df36e0409b45f0ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:9f:31:68:f0:8b:40:e7:01:b5:86:95:03:
5d:3e:1a:ee:24:69:f4:90:99:6c:7f:f6:4c:02:6e:
45:71:86:ee:e7:ba:76:9c:eb:e6:fc:00:3b:90:9f:
a2:56:a8:ad:fc:35:7e:9b:94:47:1b:df:78:1f:c9:
d3:6f:14:7d:64:a4:5c:aa:ea:b4:9a:77:90:3b:a3:
b7:c8:ff:b3:8b:ff:40:25:77:3b:d0:9c:81:6a:f6:
35:7f:ac:59:f5:17:e2:2f:a4:95:c4:fe:4c:13:62:
d7:c2:88:49:e4:94:0f:e3:3b:50:3d:58:c9:07:16:
0d:38:26:69:0c:1f:25:74:a9:b3:b3:2f:f4:c6:03:
77:e4:3b:8b:f0:f4:73:88:b0:ea:60:d0:70:b4:60:
2f:d0:50:31:aa:c2:26:1a:0f:12:89:3b:f4:80:b0:
4d:0a:e7:9b:26:69:61:20:68:43:7f:14:cc:cc:af:
76:73:7c:1a:27:60:20:6a:8d:80:43:a1:67:97:37:
80:53:89:64:a6:02:45:11:53:61:25:fc:f1:ab:1c:
0b:ba:f4:20:3f:5a:67:67:c2:92:39:f0:4c:4e:15:
50:5b:a9:c9:ac:7b:ca:f2:69:a7:7b:d0:5c:06:22:
25:c0:da:de:89:3b:f8:17:36:6f:ff:fa:17:14:f3:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:99:47:BA:7B:F2:DF:CD:BA:20:8D:F3:6E:04:09:B4:5F:0C:A7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/bPWZR7p78t_NuiCN824ECbRfDKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.14.0/24
5.105.39.0/24
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.142.0/24
5.105.157.0/24
5.105.200.0/24
5.105.207.0/24
5.105.221.0/24
5.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f0:e9:52:08:8b:24:c7:0a:d6:db:d2:4b:54:f1:be:91:76:
e8:3a:d1:52:7a:77:ad:e1:70:7c:0e:57:84:91:8a:bb:62:f2:
6d:e8:c1:6d:c7:68:79:ed:8c:eb:bf:3b:bc:4f:10:17:f9:7a:
d1:2e:ef:62:65:40:93:e7:6a:95:8b:35:4f:ca:73:e6:26:75:
59:5b:9c:22:8c:bc:bc:6a:fb:46:40:04:d6:07:09:c3:db:75:
7a:1a:19:87:48:06:16:63:d5:30:b6:e9:8c:97:1f:3f:ba:86:
d6:7e:4d:7e:da:5d:57:1b:6f:1a:d4:d3:ce:e5:64:bc:6b:72:
7c:54:46:24:9c:0e:96:1f:09:11:4d:5d:c4:a7:54:38:a8:ae:
8c:06:c0:f5:c9:fe:3e:86:a0:d7:80:12:c1:07:44:80:66:70:
18:f9:fc:af:76:57:0a:5c:25:87:7f:b8:a4:fb:db:e3:7c:fe:
bf:22:ca:06:85:ce:06:9d:6d:0c:d5:45:f1:6d:5a:7a:b7:05:
53:ec:fa:d9:ad:75:37:00:7a:a0:f3:da:98:91:bc:8a:3f:7f:
62:c3:3e:ef:31:79:e9:90:e8:d0:bf:7d:f7:66:02:68:49:ff:
a8:f7:57:11:60:ce:57:7f:b8:a5:7f:20:02:8d:08:5a:df:89:
94:72:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:33:40 2025 by rpki-client