Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/40MX2OmRGrs-gwWi0SLr8QRxVx0.roa
File: 40MX2OmRGrs-gwWi0SLr8QRxVx0.roa (raw, json)
Hash identifier: nZ28mhT9WdB2V2kCocqKHMymoHs39wf4KfhR/T76HnM=
Subject key identifier: E3:43:17:D8:E9:91:1A:BB:3E:83:05:A2:D1:22:EB:F1:04:71:57:1D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018F54D85CD75E1EE333E051A879C85482DE
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/40MX2OmRGrs-gwWi0SLr8QRxVx0.roa
Signing time: Tue 07 May 2024 20:56:56 +0000
ROA not before: Tue 07 May 2024 20:56:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:d8:5c:d7:5e:1e:e3:33:e0:51:a8:79:c8:54:82:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 7 20:56:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e34317d8e9911abb3e8305a2d122ebf10471571d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:fe:5b:f2:47:33:19:70:a9:70:78:28:31:
20:e2:df:30:7f:46:cc:54:ca:68:69:32:d9:af:c4:
9d:2c:8e:d6:51:b1:c7:c1:1e:a8:db:fc:0a:86:c2:
e3:d0:71:dc:a0:58:f8:51:fb:78:10:fa:7b:75:cc:
c6:a7:12:a1:b7:bd:a8:2e:71:f0:ff:e6:cb:7c:48:
b6:7b:15:35:f6:47:59:f8:3c:83:8b:32:0a:10:e5:
38:1f:11:a7:0b:5b:01:3f:d4:bd:a1:8f:45:50:19:
e6:61:1e:28:2b:ed:a9:04:12:f7:41:6e:28:91:62:
59:dc:fe:49:c5:ac:84:4a:28:d1:d2:45:29:90:70:
3c:e1:8e:2d:e5:5b:7d:0f:e0:5a:bc:f9:1b:92:66:
b0:28:4e:cc:f7:b2:75:f8:68:a3:9b:09:1c:54:ed:
bc:0e:1a:23:a6:4a:ac:b6:2d:ca:bc:56:d1:df:8a:
c5:df:fd:cb:6d:1d:ba:7b:1c:f9:68:7b:e2:11:57:
ef:4a:dd:11:ab:cf:30:36:65:78:09:0e:2d:c8:b7:
7f:da:49:9a:7b:6b:e9:7e:7e:77:8c:e6:52:29:66:
e0:94:ff:a2:fc:1b:11:35:5a:5d:a4:2e:6b:d5:ce:
7c:44:15:84:8c:11:85:b2:c2:97:46:59:c4:f2:c3:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:43:17:D8:E9:91:1A:BB:3E:83:05:A2:D1:22:EB:F1:04:71:57:1D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/40MX2OmRGrs-gwWi0SLr8QRxVx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/29
Signature Algorithm: sha256WithRSAEncryption
22:3c:51:75:9c:da:70:f7:b8:a9:5e:4f:e2:ec:06:35:b5:77:
f3:79:10:b0:b2:34:1c:a9:a9:7f:e9:d7:cc:2b:81:e0:fb:03:
5f:77:f7:af:fc:a1:ef:da:64:46:e0:c3:d0:07:ff:01:0b:9b:
b9:c0:60:99:b1:b5:1e:8c:41:dd:38:56:89:f5:73:01:ff:94:
0e:c6:50:68:5d:3d:f4:c0:75:2e:b7:d6:e9:34:91:d5:d5:48:
f7:c7:a9:0d:8e:37:42:d9:fd:86:93:97:60:b9:8e:49:af:d2:
68:36:9b:c9:d8:f8:ee:51:96:b1:44:2a:53:44:4b:fa:91:0b:
f2:40:ef:1c:79:3e:09:ff:c1:5f:fa:e3:e2:16:b5:74:df:b9:
e3:cc:df:4e:24:7e:b1:d3:56:1f:f0:50:56:6f:03:73:40:06:
d6:9d:58:30:08:75:b8:ba:28:bc:83:7f:49:2f:27:0d:06:2b:
9a:1d:72:8b:ad:36:17:70:ef:22:df:d4:de:bd:1e:62:22:d4:
75:e1:60:e3:34:6a:30:4d:34:71:a9:e9:4b:77:c1:df:a7:ce:
01:07:d5:a9:9c:2e:37:5d:3c:3d:69:44:db:8c:5d:89:12:7f:
0a:ac:28:c4:88:89:fb:21:bd:48:8f:96:a8:8b:c6:28:5d:74:
33:d3:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:50 2025 by rpki-client