Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/CAb49bElt8AfCqne9wYiy5awtm8.roa
File: CAb49bElt8AfCqne9wYiy5awtm8.roa (raw, json)
Hash identifier: WBqlV5huXTGuLMbt0tP2GbuElC2FtTJy5NyCQLMF+X8=
Subject key identifier: 08:06:F8:F5:B1:25:B7:C0:1F:0A:A9:DE:F7:06:22:CB:96:B0:B6:6F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0191EF72E017E0695D29551E7A1C7F982F81
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/CAb49bElt8AfCqne9wYiy5awtm8.roa
Signing time: Sat 14 Sep 2024 07:32:48 +0000
ROA not before: Sat 14 Sep 2024 07:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.104.0/24 maxlen: 24
5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a441::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:72:e0:17:e0:69:5d:29:55:1e:7a:1c:7f:98:2f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 14 07:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0806f8f5b125b7c01f0aa9def70622cb96b0b66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:47:75:5f:55:00:f5:db:27:d3:83:4e:19:
a8:3c:89:5f:22:f4:a0:44:95:66:7a:c2:53:be:63:
d2:73:c9:67:8f:7a:c2:b7:4c:63:21:a3:03:bf:78:
4a:e8:b1:c2:0f:cc:3f:43:64:95:d7:c1:fa:72:3f:
fa:96:09:8c:cb:ad:c2:18:14:64:5a:9c:77:4f:f3:
c3:df:d6:7e:52:46:76:e2:c9:90:ba:18:aa:98:c8:
28:02:75:4f:f0:80:c1:5a:89:c9:4e:c3:02:cf:c0:
18:25:f3:04:c1:cb:e4:b5:8f:ca:1f:99:26:8c:59:
e1:b1:e9:f7:3c:27:bd:b4:02:19:b8:4d:0b:3b:b0:
5f:00:12:e1:c2:95:13:96:fb:2a:19:0b:77:de:86:
12:71:41:5c:d2:ce:cb:d8:64:e9:ea:3b:3f:41:73:
65:65:ca:60:61:ac:bd:d1:05:05:b8:22:ac:7a:a3:
0a:0b:03:4f:f1:61:cf:07:76:ea:16:dc:5d:89:32:
4f:f7:42:86:ef:6e:80:48:b1:9a:de:da:01:cd:32:
8e:d0:29:73:e1:b9:15:99:f0:64:89:ef:15:83:d9:
6e:a5:7e:4a:1a:98:ae:90:97:5d:86:4f:4f:cd:2f:
35:8b:5b:d7:ba:11:2f:47:ba:ee:13:68:ce:24:56:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:06:F8:F5:B1:25:B7:C0:1F:0A:A9:DE:F7:06:22:CB:96:B0:B6:6F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/CAb49bElt8AfCqne9wYiy5awtm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/22
45.131.0.0/23
45.131.3.0/24
45.136.4.0/24
45.141.148.0/24
45.141.150.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a441::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
19:63:38:45:21:be:71:3f:4f:38:76:9a:b1:53:93:a0:3c:53:
a3:b3:46:a6:97:a8:b6:72:d4:80:0f:fd:24:ac:46:6a:88:a0:
f1:b9:28:51:ed:4f:3d:54:b4:dc:28:cf:b8:08:cc:69:08:4b:
ed:ef:0a:9d:ec:6d:f5:33:4e:3f:d4:77:d9:3e:fd:76:e4:fb:
7a:45:5b:12:ae:0c:9e:cb:a9:d5:39:b6:95:ad:7b:de:f7:20:
6b:8f:f2:a2:31:2f:db:e1:31:c1:d1:d7:dd:31:ed:1e:9c:7b:
ce:07:2e:c1:64:bf:48:07:d6:1d:2a:d4:78:b3:89:6d:db:b2:
2a:ab:24:c5:82:a9:c2:66:3a:dc:e9:f6:5b:d4:be:64:90:35:
79:07:05:a2:8b:5b:41:03:72:b2:58:f8:4b:3a:11:82:a0:66:
81:b3:62:1a:3d:1f:d5:fc:4f:84:11:3e:26:08:b4:07:4a:9a:
29:0d:de:03:ec:06:93:78:4f:8c:de:f9:7b:ab:fe:a2:93:18:
1e:4d:45:b8:51:e1:ac:c5:f5:b5:10:1d:fd:35:b4:3b:a1:bd:
4e:8f:42:fd:2e:c9:6d:61:5d:c3:5a:41:f6:ee:01:9b:15:63:
e3:34:c6:ec:c7:67:0e:e8:47:23:c3:a3:79:73:86:da:8d:40:
96:76:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:36 2025 by rpki-client