Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2asxOQaz-3K94CoPAFDMPMDBFS4.roa
File: 2asxOQaz-3K94CoPAFDMPMDBFS4.roa (raw, json)
Hash identifier: YLvKfXEjZ4PFJbgJm7Yl3c2ISpP6oBE6eVo1C3WXauo=
Subject key identifier: D9:AB:31:39:06:B3:FB:72:BD:E0:2A:0F:00:50:CC:3C:C0:C1:15:2E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0188860A1E29A8726A9C18E609D5597595C9
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2asxOQaz-3K94CoPAFDMPMDBFS4.roa
Signing time: Sun 04 Jun 2023 10:53:09 +0000
ROA not before: Sun 04 Jun 2023 10:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 45.147.47.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:86:0a:1e:29:a8:72:6a:9c:18:e6:09:d5:59:75:95:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 4 10:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9ab313906b3fb72bde02a0f0050cc3cc0c1152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8c:af:f3:62:1e:55:c3:27:bc:54:7d:e2:50:
45:f3:e6:57:a6:b5:f7:9c:36:ae:4e:ec:60:1b:e5:
e2:63:f5:29:41:ae:da:89:d2:56:90:5b:8b:94:ce:
48:95:55:05:62:63:11:ee:db:29:da:b2:20:d1:c7:
1c:76:bb:99:24:a3:27:fd:18:e6:e0:cd:aa:9b:02:
c3:61:02:40:91:d5:51:29:0c:22:c5:14:bb:c8:7a:
26:e6:15:a9:79:92:47:d4:c1:a2:73:2f:5b:e4:04:
60:26:00:f7:e7:07:62:d4:1d:9f:cd:0b:b1:ab:68:
d1:66:ee:fd:e7:4e:f6:0c:fe:8b:7c:0d:55:16:99:
8c:27:3d:19:4c:4b:4b:46:a5:c1:b4:59:69:7d:8b:
32:0a:49:d7:eb:b4:43:44:fe:5f:60:95:87:20:18:
cb:72:63:2c:6d:d8:46:04:d3:db:62:12:f3:7d:0b:
87:3d:66:ef:1e:0b:65:9b:25:fc:a0:b3:70:b4:e6:
8c:1f:91:db:7a:6f:01:06:74:db:59:05:d0:6e:b2:
b6:af:50:c3:56:53:bf:ed:40:21:9c:04:4b:e5:72:
2f:db:29:be:5c:6d:74:df:a9:59:45:ba:a6:6e:78:
84:6c:45:8c:df:3a:52:26:51:cb:cb:63:9f:94:fd:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AB:31:39:06:B3:FB:72:BD:E0:2A:0F:00:50:CC:3C:C0:C1:15:2E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2asxOQaz-3K94CoPAFDMPMDBFS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.47.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
7e:3f:a5:b9:b9:82:3a:9f:d5:e8:9e:ce:35:38:fd:c8:1d:41:
12:77:49:3b:e5:bb:47:bf:f5:7b:25:c4:42:40:50:60:df:d8:
c0:4c:2e:03:5c:ef:7b:95:5a:4a:be:64:09:1b:96:4d:c6:6d:
30:3c:56:12:81:d2:12:b7:08:58:bc:67:af:a9:01:bd:a1:0f:
95:d7:fe:be:4a:32:41:e9:e6:9b:33:e7:ed:3a:76:c1:45:e2:
a1:eb:76:f5:16:41:72:47:8b:f4:bc:cf:42:0e:cc:dd:25:0f:
de:5c:bc:94:b8:b6:17:59:c0:22:b8:c9:78:6e:6a:d8:40:89:
38:cc:11:c1:04:57:fa:99:27:e3:2d:00:88:c3:92:a4:8c:9f:
0b:3e:75:1c:11:8b:fa:2b:eb:8f:4f:96:3f:a3:99:af:28:28:
74:2e:7f:8c:5c:4c:67:85:a6:c0:0b:82:19:fc:3b:43:e5:91:
a7:e1:76:92:d4:22:b8:77:5c:77:d4:79:93:f7:0b:54:1d:e1:
da:bc:e1:89:de:f0:6a:92:14:b9:57:d5:48:f7:c8:c4:6c:d1:
21:08:df:51:23:9a:76:b7:43:45:69:e5:ab:33:bc:7e:91:76:
82:e0:3a:1c:59:02:89:c2:d4:1e:87:72:12:e4:b2:d7:b4:2b:
c9:d3:6e:05
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYiGCh4pqHJqnBjmCdVZdZXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMwNjA0MTA1MzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWFiMzEzOTA2YjNmYjcyYmRlMDJhMGYwMDUwY2MzY2MwYzExNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYyv82IeVcMnvFR94lBF8+ZXprX3
nDauTuxgG+XiY/UpQa7aidJWkFuLlM5IlVUFYmMR7tsp2rIg0cccdruZJKMn/Rjm
4M2qmwLDYQJAkdVRKQwixRS7yHom5hWpeZJH1MGicy9b5ARgJgD35wdi1B2fzQux
q2jRZu795072DP6LfA1VFpmMJz0ZTEtLRqXBtFlpfYsyCknX67RDRP5fYJWHIBjL
cmMsbdhGBNPbYhLzfQuHPWbvHgtlmyX8oLNwtOaMH5Hbem8BBnTbWQXQbrK2r1DD
VlO/7UAhnARL5XIv2ym+XG1036lZRbqmbniEbEWM3zpSJlHLy2OflP0VlQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFNmrMTkGs/tyveAqDwBQzDzAwRUuMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvMmFzeE9RYXotM0s5NENvUEFGRE1QTURCRlM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQALZMvAwQC
TVPIAwQAwnTlAwQBwnTsAwQAwpIkAwQAwpIvMA0EAgACMAcDBQMqCYeAMA0GCSqG
SIb3DQEBCwUAA4IBAQB+P6W5uYI6n9Xons41OP3IHUESd0k75btHv/V7JcRCQFBg
39jATC4DXO97lVpKvmQJG5ZNxm0wPFYSgdIStwhYvGevqQG9oQ+V1/6+SjJB6eab
M+ftOnbBReKh63b1FkFyR4v0vM9CDszdJQ/eXLyUuLYXWcAiuMl4bmrYQIk4zBHB
BFf6mSfjLQCIw5KkjJ8LPnUcEYv6K+uPT5Y/o5mvKCh0Ln+MXExnhabAC4IZ/DtD
5ZGn4XaS1CK4d1x31HmT9wtUHeHavOGJ3vBqkhS5V9VI98jEbNEhCN9RI5p2t0NF
aeWrM7x+kXaC4DocWQKJwtQeh3IS5LLXtCvJ024F
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:52 2025 by rpki-client