Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dLAvGmweY1Ny0LTywcqyGCLDkDM.roa
File: dLAvGmweY1Ny0LTywcqyGCLDkDM.roa (raw, json)
Hash identifier: CFqHI1bKHoFYtfomszwyqT+/GfOjsqKdwzQNf/Ia1uQ=
Subject key identifier: 74:B0:2F:1A:6C:1E:63:53:72:D0:B4:F2:C1:CA:B2:18:22:C3:90:33
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01882EB688385F13FA3CD47C3930366C8943
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dLAvGmweY1Ny0LTywcqyGCLDkDM.roa
Signing time: Thu 18 May 2023 11:54:54 +0000
ROA not before: Thu 18 May 2023 11:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211314
IP address blocks: 5.105.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:b6:88:38:5f:13:fa:3c:d4:7c:39:30:36:6c:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 18 11:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74b02f1a6c1e635372d0b4f2c1cab21822c39033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:99:10:26:b3:b9:10:b8:9f:da:ac:d1:8d:
9b:42:3c:cb:96:59:80:3e:b5:60:4d:05:51:a4:69:
5e:4f:bc:4b:19:d1:96:dd:27:21:06:ce:2c:32:49:
c7:96:9a:70:3b:6d:af:de:da:b1:e8:6b:92:b1:7e:
e3:68:3e:b3:87:50:82:bb:b5:5d:6e:80:25:99:e4:
1c:22:e2:c2:41:3c:05:cf:b7:9c:3b:57:9a:d9:e5:
e1:93:d9:43:b5:1a:d5:de:5f:19:14:62:9e:08:36:
bf:64:33:7d:17:fd:ff:47:12:8e:0d:49:6b:f9:5f:
cc:5d:3a:64:fb:30:52:4d:64:fd:40:fe:76:67:05:
bf:aa:13:1a:3f:fc:94:73:47:fa:b9:86:40:4f:d5:
42:3f:c7:bb:a2:69:48:1d:1f:e9:46:70:14:0f:a4:
ae:bb:2e:b1:ec:f8:06:86:16:87:8e:4c:1e:e0:c3:
b6:f5:4a:21:10:84:fa:9a:d5:9d:6e:aa:3c:d5:a1:
c6:e7:d0:01:13:51:f3:5a:f9:86:8f:d8:b3:71:da:
f4:d6:f6:13:94:f8:6f:b7:b5:75:eb:94:51:e6:02:
a8:c7:f5:7a:d6:0c:06:2b:1e:8a:71:f4:32:d7:ba:
08:b7:59:90:db:17:56:bd:ce:a1:8f:58:38:a5:89:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B0:2F:1A:6C:1E:63:53:72:D0:B4:F2:C1:CA:B2:18:22:C3:90:33
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dLAvGmweY1Ny0LTywcqyGCLDkDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.26.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c4:ae:0b:cc:1e:af:38:65:b1:34:8e:8e:cc:c2:ed:c0:52:
2c:35:98:97:8d:11:e2:e0:7d:ee:5f:0c:a6:c2:43:60:fe:34:
92:b4:ed:cb:8c:eb:21:93:7f:5f:97:c5:51:2c:d7:b5:aa:60:
09:eb:b6:d6:55:9b:fe:4c:d5:32:ff:15:ee:55:4b:ed:67:ce:
75:d5:6d:65:92:4e:49:19:da:8b:8e:d7:06:a9:72:5d:b3:a4:
3b:a3:6b:da:c1:66:74:4b:84:cf:a7:38:cf:f0:32:b6:11:c5:
8c:ad:65:eb:b1:f9:f4:e7:66:26:be:a1:82:3b:d1:91:8d:72:
94:16:57:b5:61:8a:8c:51:ba:72:81:86:14:81:58:34:58:2e:
fa:e1:25:84:ec:61:08:b6:f5:7a:9a:c0:be:21:aa:a0:22:f6:
41:8f:ef:5d:c7:ab:b1:22:51:b2:bc:ec:ad:d2:81:ed:8a:21:
33:6a:04:31:60:48:7b:6e:df:9b:65:ed:e2:49:b7:52:f4:07:
05:98:1d:37:a8:e6:9b:c8:a3:11:b3:d9:ce:05:9f:22:0a:8a:
8d:af:e9:ae:52:4e:ca:95:f7:a0:8a:78:e8:11:06:e1:8b:6d:
86:98:a3:67:ef:2a:a7:0f:ea:d7:d0:bf:62:41:a5:9c:57:77:
11:b6:50:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:20:56 2025 by rpki-client