Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/C6mGitfp6Od0Xog-f0kw4EYr9Q8.roa
File: C6mGitfp6Od0Xog-f0kw4EYr9Q8.roa (raw, json)
Hash identifier: HFFI42x9h9suxJvvriFd6uRM4fN3sk8W5eK/pT0X+6Y=
Subject key identifier: 0B:A9:86:8A:D7:E9:E8:E7:74:5E:88:3E:7F:49:30:E0:46:2B:F5:0F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0735F30A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/C6mGitfp6Od0Xog-f0kw4EYr9Q8.roa
Signing time: Sat 01 Jan 2022 14:08:21 +0000
ROA not before: Sat 01 Jan 2022 14:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211376
IP address blocks: 5.180.107.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
2a0f:b700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120976138 (0x735f30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 1 14:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ba9868ad7e9e8e7745e883e7f4930e0462bf50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:b1:d1:a8:d7:00:71:aa:61:a6:c2:65:d8:
66:91:93:5a:e1:18:de:33:a6:29:29:60:1a:60:13:
fa:60:1e:1e:fa:bd:a3:bc:6b:1d:94:79:01:18:4a:
c4:5b:dc:2a:12:02:59:4a:98:c5:64:af:67:ac:56:
56:d2:7b:06:0c:ad:48:26:b2:93:e8:47:e5:29:0f:
2f:1f:8a:df:71:70:f2:fa:99:b4:04:e8:c6:80:4a:
b0:97:d5:9e:6a:e5:37:ee:17:09:d0:59:19:1f:ee:
c5:8a:4b:ad:97:70:2e:27:47:d0:2c:00:bf:38:a4:
ce:52:47:f1:b0:ba:9a:fe:1e:52:84:e7:96:dd:87:
19:84:1a:c5:f9:9b:2e:03:ba:99:27:38:5e:96:ea:
5e:81:ec:98:02:74:a5:11:12:59:df:d3:34:f6:2f:
59:70:0c:1c:51:79:31:75:fc:06:3f:be:11:dd:07:
63:f0:da:a9:1f:db:11:35:ef:00:6f:9a:9c:22:9a:
52:d3:03:af:ed:70:d3:96:5d:2b:83:06:de:a4:27:
89:b4:f3:25:9d:66:c2:f6:d1:f3:d7:fa:be:b7:9b:
c9:9c:9e:33:ab:79:fe:57:34:9d:4a:7e:76:ca:b8:
4e:c8:46:62:e6:0c:3e:a8:4d:ab:68:d0:f4:e7:51:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A9:86:8A:D7:E9:E8:E7:74:5E:88:3E:7F:49:30:E0:46:2B:F5:0F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/C6mGitfp6Od0Xog-f0kw4EYr9Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.1.0/24
45.136.5.0/24
194.116.228.0/24
IPv6:
2a0f:b700::/29
Signature Algorithm: sha256WithRSAEncryption
11:29:5b:41:ce:98:18:7a:01:0e:05:8c:6f:0f:51:1f:32:da:
49:15:a8:f4:f7:c9:16:7b:a7:2f:da:36:61:d9:10:09:ab:4a:
ef:c9:3f:bc:75:36:d3:64:e5:dd:40:5f:1e:d3:8d:2a:a8:c4:
5b:9b:50:81:bc:a6:33:df:ba:47:76:49:9e:a0:da:84:a5:a4:
ce:64:e7:bf:53:12:28:19:d5:3c:7d:5c:9d:f3:f3:90:2e:b5:
bc:ed:6d:62:bf:8e:a0:37:f5:53:97:fe:0c:94:22:5c:d4:b9:
e9:8f:ea:a2:89:b4:9b:10:2f:1d:12:51:94:b2:22:44:11:51:
ec:a2:7e:8d:ce:c9:1d:22:44:b2:5d:b4:f1:e1:07:d3:6d:41:
db:fc:a1:24:d5:25:5c:d0:04:09:5c:00:df:2b:00:8f:ce:80:
f1:2b:78:5a:8b:57:18:c8:91:f3:76:53:8e:7e:15:cf:c1:a7:
97:49:07:c7:35:59:56:84:9a:f9:2e:49:1e:41:71:78:78:a8:
a2:5e:38:df:60:3b:15:32:6a:5a:9f:4a:a4:c6:68:78:57:e5:
41:a1:4c:04:04:b9:20:52:1d:8b:ce:6f:27:5f:dc:54:35:4f:
83:08:92:0c:97:55:73:0d:06:30:5c:e7:1b:bc:5b:48:be:6d:
88:f6:d8:8e
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEBzXzCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODA1ZjE3YzJkNzEzM2QyZGFkM2E4ZGY3ZTM1MzE1ZTM3ZWY1ZGFmMB4XDTIyMDEw
MTE0MDgyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGJhOTg2OGFkN2U5
ZThlNzc0NWU4ODNlN2Y0OTMwZTA0NjJiZjUwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOBIsdGo1wBxqmGmwmXYZpGTWuEY3jOmKSlgGmAT+mAeHvq9
o7xrHZR5ARhKxFvcKhICWUqYxWSvZ6xWVtJ7BgytSCayk+hH5SkPLx+K33Fw8vqZ
tAToxoBKsJfVnmrlN+4XCdBZGR/uxYpLrZdwLidH0CwAvzikzlJH8bC6mv4eUoTn
lt2HGYQaxfmbLgO6mSc4XpbqXoHsmAJ0pRESWd/TNPYvWXAMHFF5MXX8Bj++Ed0H
Y/DaqR/bETXvAG+anCKaUtMDr+1w05ZdK4MG3qQnibTzJZ1mwvbR89f6vrebyZye
M6t5/lc0nUp+dsq4TshGYuYMPqhNq2jQ9OdR5F0CAwEAAaOCAiowggImMB0GA1Ud
DgQWBBQLqYaK1+no53ReiD5/STDgRiv1DzAfBgNVHSMEGDAWgBRIBfF8LXEz0trT
qN9+NTFeN+9drzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8x
L0M2bUdpdGZwNk9kMFhvZy1mMGt3NEVZcjlROC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
OGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8xL1NBWHhmQzF4TTlM
YTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAAW0awMEAC2DAQMEAC2IBQMEAMJ0
5DANBAIAAjAHAwUDKg+3ADANBgkqhkiG9w0BAQsFAAOCAQEAESlbQc6YGHoBDgWM
bw9RHzLaSRWo9PfJFnunL9o2YdkQCatK78k/vHU202Tl3UBfHtONKqjEW5tQgbym
M9+6R3ZJnqDahKWkzmTnv1MSKBnVPH1cnfPzkC61vO1tYr+OoDf1U5f+DJQiXNS5
6Y/qoom0mxAvHRJRlLIiRBFR7KJ+jc7JHSJEsl208eEH021B2/yhJNUlXNAECVwA
3ysAj86A8St4WotXGMiR83ZTjn4Vz8Gnl0kHxzVZVoSa+S5JHkFxeHiool4432A7
FTJqWp9KpMZoeFflQaFMBAS5IFIdi85vJ1/cVDVPgwiSDJdVcw0GMFznG7xbSL5t
iPbYjg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:00 2025 by rpki-client