Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/glJSEIHwgzuD4WWnSpTOjUMtt4A.roa
File: glJSEIHwgzuD4WWnSpTOjUMtt4A.roa (raw, json)
Hash identifier: CAWrKmm6kBvsjycLggLZoxc+9Amg5NzAQAXaooj/j44=
Subject key identifier: 82:52:52:10:81:F0:83:3B:83:E1:65:A7:4A:94:CE:8D:43:2D:B7:80
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018804DB6FF1FE91CC86E2828B1DC62D9CAB
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/glJSEIHwgzuD4WWnSpTOjUMtt4A.roa
Signing time: Wed 10 May 2023 08:51:09 +0000
ROA not before: Wed 10 May 2023 08:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:db:6f:f1:fe:91:cc:86:e2:82:8b:1d:c6:2d:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 10 08:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8252521081f0833b83e165a74a94ce8d432db780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:50:89:79:c7:3a:43:a7:58:53:66:36:c1:
f7:21:3a:68:9b:14:a5:c1:99:0f:12:43:38:4f:f0:
4e:45:09:86:6b:96:12:01:4a:b8:99:66:d2:c4:ef:
d7:b5:36:28:79:e6:95:1c:4e:16:f8:57:90:37:99:
1d:a5:d2:03:05:2d:ff:94:3a:0e:ff:56:0c:82:4d:
b8:48:c3:af:cd:62:e7:2b:e6:d0:2e:53:8a:70:63:
d4:b4:0a:d4:c1:b6:4b:46:c5:f1:ae:60:8c:6c:ad:
67:a0:45:8c:4b:2f:1e:8f:0c:34:3a:01:8c:61:ec:
94:78:bb:58:36:f5:2a:f8:85:92:47:b3:65:9a:9c:
f5:09:96:1a:49:b9:25:d4:6b:cb:f1:05:06:23:b7:
08:1b:58:69:07:b6:2b:ad:3a:e2:57:16:fb:49:2b:
4e:5e:c4:b1:4a:d0:87:d7:29:91:3f:d6:fd:dd:eb:
00:58:ef:46:8a:f7:76:39:82:4d:41:e1:bd:ca:f0:
75:17:07:1a:77:ab:9e:d5:85:4d:08:8f:0e:d9:89:
b7:10:1b:f5:9e:65:b4:4b:a1:a8:87:7e:42:f9:4d:
cb:13:3b:2b:fd:c8:68:d1:8d:84:f7:1a:3d:35:d1:
1f:5d:11:e3:75:d5:44:68:79:a1:2c:24:09:15:ea:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:52:52:10:81:F0:83:3B:83:E1:65:A7:4A:94:CE:8D:43:2D:B7:80
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/glJSEIHwgzuD4WWnSpTOjUMtt4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.22.0/24
5.105.45.0-5.105.47.255
5.105.143.0/24
Signature Algorithm: sha256WithRSAEncryption
72:18:7d:97:34:1d:60:ec:e4:1d:e7:39:a4:aa:1d:e9:8d:20:
1d:5b:92:c4:35:8b:4f:2b:20:99:22:f3:b6:47:90:f8:82:a7:
05:4f:55:1c:5c:2d:2b:9c:1c:40:82:05:20:b1:32:8b:02:c2:
f6:a0:5d:9d:2a:c5:0b:1f:98:9b:11:75:ff:59:94:ef:ba:e4:
1a:9b:dc:4f:d9:cd:ec:f6:a3:8a:e7:9b:66:2a:c8:1e:08:e0:
21:5e:3d:f3:2b:51:28:03:df:2e:38:a1:d7:2a:26:70:af:ae:
09:f0:9d:98:0b:ee:a3:0d:27:71:47:02:c6:64:f4:4f:4a:33:
9f:4d:6a:ef:45:f2:a4:75:c3:da:da:a8:16:7c:7c:82:88:ee:
98:f8:30:a0:ce:04:e5:de:c4:f0:5a:c9:09:05:9a:80:17:77:
36:ef:2b:50:57:86:0f:24:e9:7a:d9:51:c4:50:a3:78:74:e2:
84:42:62:8e:e3:5f:f6:e8:21:6f:6e:c9:8f:bb:41:62:1b:56:
c6:96:28:01:4e:75:13:14:af:8e:ef:ae:2a:c3:92:3b:ab:8b:
50:08:89:5b:e7:96:f8:8b:d6:49:44:74:2c:77:8b:91:04:89:
01:25:17:fa:6f:1f:e6:78:1b:b5:79:58:c7:31:33:b6:fe:f5:
57:79:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:18:18 2025 by rpki-client