Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/8H_R1AuNEp6v-hIXkAT85nEqGH0.roa
File: 8H_R1AuNEp6v-hIXkAT85nEqGH0.roa (raw, json)
Hash identifier: FitncGIyRH9gdWxL3djBmx8aoqC2QlBr1+au4+SOkN4=
Subject key identifier: F0:7F:D1:D4:0B:8D:12:9E:AF:FA:12:17:90:04:FC:E6:71:2A:18:7D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0192F775233F129DDCBAE247664DB3B7B642
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/8H_R1AuNEp6v-hIXkAT85nEqGH0.roa
Signing time: Mon 04 Nov 2024 13:55:01 +0000
ROA not before: Mon 04 Nov 2024 13:55:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197555
IP address blocks: 5.180.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:75:23:3f:12:9d:dc:ba:e2:47:66:4d:b3:b7:b6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 4 13:55:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f07fd1d40b8d129eaffa12179004fce6712a187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:1f:ff:03:e7:71:a4:18:5b:db:6e:e0:e1:
86:fd:ed:60:0c:11:57:9a:f3:d0:a6:82:6c:e4:83:
01:76:d2:52:e3:5c:4e:f4:6e:82:43:9e:42:33:55:
e6:4b:e3:be:0d:a5:6d:34:5e:7b:9d:df:42:3f:3f:
46:4b:c4:65:8a:44:ba:58:00:69:8c:8a:ef:c3:7f:
63:ab:71:d7:69:18:9a:6e:91:78:6c:94:fc:00:b3:
77:99:73:5a:96:83:af:a9:83:93:a1:38:b4:db:13:
e1:c7:40:72:f2:de:5f:6e:8a:44:5b:19:dd:82:ab:
f6:0a:83:19:ac:00:a6:eb:6d:2c:c7:f7:07:8c:5d:
0d:ab:ee:b0:51:c2:6d:cf:7e:7a:75:e0:ce:4f:db:
71:94:bf:16:32:f8:8e:06:61:06:62:eb:e4:35:db:
9e:c2:72:d5:4a:b9:c0:3e:d6:a6:e4:e8:a9:4a:a9:
4e:4d:4e:63:e4:cd:38:32:73:ad:93:cb:65:c0:90:
9e:9a:18:1c:65:e0:6b:19:97:77:f2:45:5b:a8:b3:
8b:4e:4f:d9:c1:6e:23:96:4d:b9:24:7b:cb:e8:c3:
f5:14:06:7b:9e:57:02:9d:c5:8a:0a:06:f8:d5:4a:
3a:35:17:33:28:72:9e:b5:76:81:ad:69:b7:0c:78:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:D1:D4:0B:8D:12:9E:AF:FA:12:17:90:04:FC:E6:71:2A:18:7D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/8H_R1AuNEp6v-hIXkAT85nEqGH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0/24
Signature Algorithm: sha256WithRSAEncryption
02:dc:31:dd:56:a1:79:c5:e5:96:db:17:16:a3:01:73:74:fc:
f2:ca:e7:b7:4a:e5:ab:45:ce:af:4f:fe:e8:c2:9f:ac:24:e2:
ea:3b:79:8a:0c:1d:9e:65:80:6a:1d:71:26:f4:d7:28:02:3b:
d5:6c:08:c3:9e:09:19:37:89:2b:a8:d1:42:a0:fb:7c:0b:dc:
fc:4c:a8:4a:93:c5:b8:28:e4:20:29:f9:8b:49:9e:27:f7:26:
75:5c:f9:5b:99:e0:fc:95:f3:38:4c:f0:5c:f3:2e:65:29:42:
a3:41:b7:b5:bb:0e:bc:94:4e:f8:c6:6f:eb:32:75:9b:0c:97:
f7:60:aa:72:dd:9b:4c:2e:84:5c:41:fa:55:79:20:fc:4f:bf:
e4:4e:d2:8b:a8:32:a1:24:29:71:93:d1:9e:e3:db:38:39:96:
8c:a9:57:40:3c:85:d5:30:ce:ee:d0:45:62:ae:44:ff:b6:d3:
06:4f:e9:5c:16:48:0b:65:d1:73:5b:bd:fb:16:8f:ed:aa:42:
b6:d9:cd:27:f0:a0:92:82:38:fb:b4:25:ab:8c:24:b0:02:08:
19:5f:7d:6c:2d:cd:24:49:15:d6:a1:91:ae:53:c1:59:9d:9e:
c5:7d:ed:72:dc:2e:9f:d7:b0:b2:aa:4c:c3:e6:b7:3d:62:8b:
c6:ef:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:52 2025 by rpki-client