Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wEGx34ZL0XNgKX8y1T7zJ5x1fa4.roa
File: wEGx34ZL0XNgKX8y1T7zJ5x1fa4.roa (raw, json)
Hash identifier: k4Npu7Jr5QE1pC+3DSfPRgjaYH1vd01YjgS2jtmhvwU=
Subject key identifier: C0:41:B1:DF:86:4B:D1:73:60:29:7F:32:D5:3E:F3:27:9C:75:7D:AE
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188ED0F81BB11F55C4F87F5B39FB865CDFE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wEGx34ZL0XNgKX8y1T7zJ5x1fa4.roa
Signing time: Sat 24 Jun 2023 10:59:56 +0000
ROA not before: Sat 24 Jun 2023 10:59:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:0f:81:bb:11:f5:5c:4f:87:f5:b3:9f:b8:65:cd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 24 10:59:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c041b1df864bd17360297f32d53ef3279c757dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:90:3c:dd:dd:6d:de:ef:f5:56:38:2c:c6:
11:26:17:dd:a2:b1:8d:43:6e:7d:ca:d2:b0:c5:0e:
9b:e9:85:23:b8:a4:a3:5d:f8:a8:64:84:61:e8:17:
0e:23:e2:25:e5:35:69:d2:54:28:19:f7:bf:bd:ab:
1f:28:91:0d:8c:f4:d7:ba:ee:f9:21:dc:2a:ed:66:
15:5f:e4:7c:ee:56:fa:ba:03:02:63:e9:0e:8d:b9:
d7:fd:ac:e0:f9:c8:69:1e:7b:aa:68:a3:71:b6:c5:
6d:b4:bc:1a:50:ed:a3:19:8e:ce:03:4a:f1:ad:8d:
21:fa:8c:49:61:42:6e:82:54:88:3f:59:6f:42:f7:
5f:6b:3e:99:8e:a9:c7:e2:7f:8b:10:e6:89:96:b2:
6b:d8:a0:41:93:ec:0c:ea:b8:b4:84:a0:9e:2b:73:
bb:83:8c:c0:9a:13:40:55:60:99:83:19:94:35:c4:
1a:d8:81:cb:93:51:2f:98:3c:f1:bb:17:f2:f3:03:
7d:4b:31:7f:5d:99:9c:45:34:b9:8b:46:bc:1f:a1:
5e:c4:7b:ff:a2:03:bf:19:08:97:97:31:0c:b8:b8:
31:19:83:70:2a:10:6e:39:d1:42:ef:69:b5:00:87:
35:63:26:d2:ac:0d:8f:3d:ab:e1:24:a8:27:e2:db:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:B1:DF:86:4B:D1:73:60:29:7F:32:D5:3E:F3:27:9C:75:7D:AE
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/wEGx34ZL0XNgKX8y1T7zJ5x1fa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.22.0/24
5.105.45.0/24
5.105.47.0/24
5.105.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d2:11:6f:84:d8:9d:8d:4d:44:c7:42:fe:0f:09:2f:db:4f:
53:26:4d:4e:6c:a7:75:3f:f0:bb:9c:24:c7:65:88:5c:b7:76:
06:a1:e9:71:4a:ca:4d:8b:9f:53:8f:b7:6e:73:d4:6d:62:aa:
f1:3d:74:84:25:64:ef:f6:c3:9f:05:79:1b:ba:a4:fe:b6:60:
88:a8:20:80:90:55:93:d5:49:f3:10:47:8d:98:f4:c8:4a:20:
ca:3a:40:82:40:69:63:ae:8c:3e:6b:f4:08:f0:bf:91:02:47:
e2:27:cb:93:62:8e:c2:4a:10:78:bf:81:4d:ea:66:00:7d:61:
fd:5a:65:7b:1f:da:c6:9f:da:da:e6:ba:ba:19:8d:f9:b6:f3:
d3:dc:e4:8a:59:04:47:dd:39:80:8e:30:1d:f6:a2:3b:96:53:
6b:24:0f:5f:ec:3b:07:d8:10:95:8a:71:e8:a1:a1:55:c5:4f:
63:0a:1e:87:94:0a:37:87:80:61:78:bc:57:47:b4:51:eb:e5:
a5:e7:71:5c:11:06:fe:42:62:dd:53:00:f8:d7:5b:a6:2b:18:
d4:d4:34:83:70:a0:64:f5:a5:39:6a:58:a4:0e:11:40:21:5d:
ea:68:29:42:00:03:b5:7b:85:a8:d5:f1:05:3a:69:bd:1b:96:
0b:24:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:44:43 2025 by rpki-client