Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7RVYeuwKOFjcITXo4OM4hU7qZS0.roa
File: 7RVYeuwKOFjcITXo4OM4hU7qZS0.roa (raw, json)
Hash identifier: msi3QoEJr4ax2rpOlQj77627SyAOkvIk5dWDE6QiCrE=
Subject key identifier: ED:15:58:7A:EC:0A:38:58:DC:21:35:E8:E0:E3:38:85:4E:EA:65:2D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018FF97035BFA2765C4BE736B7FB0A933482
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7RVYeuwKOFjcITXo4OM4hU7qZS0.roa
Signing time: Sat 08 Jun 2024 20:00:31 +0000
ROA not before: Sat 08 Jun 2024 20:00:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f9:70:35:bf:a2:76:5c:4b:e7:36:b7:fb:0a:93:34:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 8 20:00:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed15587aec0a3858dc2135e8e0e338854eea652d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:67:ed:4c:2b:e9:8f:ef:8e:70:de:37:50:
a8:45:73:59:59:93:b3:10:ac:93:e9:a9:bd:87:41:
0a:c0:0d:25:27:04:f7:1a:03:42:a0:5c:f8:dd:e2:
49:09:5c:04:6d:9e:90:fe:5b:19:0a:bb:2b:2a:a3:
d7:8d:91:d5:10:a1:4e:5c:88:44:a4:d6:a5:f8:57:
39:a5:f5:8a:b3:a7:ac:d8:72:e4:53:4b:8e:dc:eb:
e5:1f:f4:12:2e:b4:17:b8:a1:46:48:fc:29:5e:c7:
d1:2c:ee:00:2e:42:d7:22:7e:a0:e0:2d:f7:3d:8a:
62:e7:d6:c6:a1:e8:61:33:a1:11:f7:df:82:e6:51:
fc:f6:fb:80:75:86:8f:98:00:d7:5f:e7:0d:71:1a:
f4:8f:8c:e7:d7:1f:86:e2:4f:ed:04:72:5c:4a:b4:
b2:f4:d5:34:65:9a:fb:ee:7b:ca:e2:ab:6f:e6:ef:
1c:b1:1d:41:a2:c5:3a:30:24:f1:0f:27:96:0e:b8:
c9:ff:86:b6:0d:82:0d:8e:1c:fe:9c:e6:22:d7:09:
8c:47:52:4b:3b:82:8a:aa:3a:52:cf:a0:71:08:f2:
28:f1:b8:96:b0:34:8b:66:5b:e3:a7:44:55:57:c4:
bc:d9:84:55:7e:a7:04:fd:13:bb:d4:4f:9b:77:24:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:15:58:7A:EC:0A:38:58:DC:21:35:E8:E0:E3:38:85:4E:EA:65:2D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/7RVYeuwKOFjcITXo4OM4hU7qZS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
1a:72:bd:58:a7:97:3a:1d:cc:9e:8a:b5:fc:f4:79:9d:76:2f:
17:40:e7:4d:96:08:9f:7b:dd:e1:c8:4f:46:9d:9f:b3:b0:42:
09:f2:80:ff:81:7e:00:d2:08:1f:bf:00:b4:21:5f:7c:91:4e:
3a:8e:f8:8f:bf:bb:74:f4:be:95:a4:ae:17:ed:c1:68:09:a4:
fb:97:78:f6:d7:4e:80:73:6d:64:94:64:b7:32:6a:ce:e1:fd:
96:01:ed:43:72:2f:6a:22:aa:40:1f:1b:6c:57:76:ab:45:99:
9e:41:84:5d:25:19:3b:3d:b2:7c:37:58:bb:a0:cf:75:9f:c8:
eb:aa:b0:9e:ab:bd:92:ce:f8:3a:60:26:af:ac:0c:ee:43:56:
37:4e:44:8f:e3:92:e5:56:23:46:05:f0:6a:91:a9:64:84:a1:
a3:fc:44:be:b7:72:8e:6d:b0:aa:9a:89:e4:8b:90:06:7f:ff:
8c:c9:4f:b0:f6:64:48:8d:a5:a4:7c:65:2c:f8:a3:b4:85:e3:
d3:ec:8d:b6:fd:82:60:45:60:3f:4c:d2:15:df:5f:1a:0a:6a:
f9:95:e1:fd:4a:53:5d:49:ab:42:57:59:80:ec:25:40:92:de:
a9:05:2d:de:50:a4:61:05:92:47:3b:0b:83:b7:e7:19:d6:7c:
35:40:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:11 2025 by rpki-client