Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DdthIHCzqJAqd-uoPRICrd-wbfw.roa
File: DdthIHCzqJAqd-uoPRICrd-wbfw.roa (raw, json)
Hash identifier: bMIfyKRc0KMen9jFmCOa4X+RUP6k+uzMUl+XQr12LKA=
Subject key identifier: 0D:DB:61:20:70:B3:A8:90:2A:77:EB:A8:3D:12:02:AD:DF:B0:6D:FC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018FF4854C94A01B7492DE4522CDD001F74A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DdthIHCzqJAqd-uoPRICrd-wbfw.roa
Signing time: Fri 07 Jun 2024 21:05:27 +0000
ROA not before: Fri 07 Jun 2024 21:05:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.104.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f4:85:4c:94:a0:1b:74:92:de:45:22:cd:d0:01:f7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 7 21:05:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ddb612070b3a8902a77eba83d1202addfb06dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:af:6a:49:44:18:1a:4a:d0:22:e2:cb:56:
6f:b7:5b:3f:83:db:1c:35:b0:dd:41:24:bd:91:e3:
d0:b2:35:9f:06:da:ad:25:eb:3a:58:e9:64:80:5a:
9e:ba:cc:34:bc:11:bc:b9:6d:6e:74:e1:2b:b0:18:
49:34:eb:d3:fd:56:0c:cf:63:44:a6:f1:ad:7f:44:
9d:73:e8:ec:d6:04:60:97:82:d3:03:20:d7:c2:ce:
fb:b2:b0:22:c7:09:7f:ff:1a:90:60:f4:af:0d:69:
8c:08:64:8b:e4:51:30:e7:f1:30:42:76:40:a1:d4:
98:36:d2:2b:c4:b9:42:ba:3d:5f:89:e9:1f:d4:bc:
00:b2:7c:8d:73:86:df:dd:bc:a3:c0:5c:33:f7:98:
19:85:fd:3f:22:36:0a:52:f3:82:be:cf:18:77:72:
55:64:57:10:bf:5c:ac:95:6c:49:7f:91:d6:63:39:
91:19:9f:48:19:54:90:57:dc:2e:03:ae:79:47:2f:
9a:e5:5c:42:39:c4:7f:84:7b:d2:c4:4a:be:20:cc:
9f:6c:27:b0:4a:d4:35:cc:8b:9c:8c:29:07:fa:3e:
e9:7d:1a:a5:c7:b3:3d:63:3a:21:d5:b3:b0:8a:e4:
f8:ca:3e:9e:8e:c6:61:36:89:1a:97:da:90:6a:12:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:61:20:70:B3:A8:90:2A:77:EB:A8:3D:12:02:AD:DF:B0:6D:FC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/DdthIHCzqJAqd-uoPRICrd-wbfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.141.148.0/24
45.141.150.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
51:fe:6d:3c:68:93:1e:5f:96:87:07:fb:18:ae:0f:3d:83:37:
98:0d:dd:b1:d5:ff:71:c9:cf:46:cf:58:2f:b9:58:2c:78:33:
dd:c5:f7:09:e0:63:56:68:83:64:f5:ea:7d:6b:16:84:bd:a4:
f5:3a:a0:53:c3:2f:5d:e5:b0:98:2c:f8:46:3d:49:49:15:64:
38:0b:67:23:22:d3:5d:ab:81:ca:ab:18:66:b2:87:e9:9d:19:
2a:59:8c:c6:f3:72:22:5c:a7:67:a9:ae:a8:d8:6a:89:a1:4d:
69:d4:21:b5:d5:ec:cb:a7:04:1a:c8:6f:a6:11:47:15:0d:a2:
fe:6d:eb:07:9e:61:b1:ad:82:4d:a5:6a:64:c7:df:9a:db:db:
22:e6:5e:ae:88:7a:5a:03:55:c7:b7:8a:f4:a1:59:63:c8:76:
cf:4b:1f:da:d2:9b:d1:78:5a:d7:d9:01:ae:9a:de:4e:ab:14:
d7:8a:21:3a:a1:50:33:01:26:7f:48:cc:f8:cf:8b:dc:a3:7d:
b5:40:c6:82:4a:87:9d:d5:51:8d:9f:6d:71:ed:40:f3:9a:a5:
92:61:9c:f0:14:9b:51:ab:7b:ba:02:db:b8:42:6e:18:4a:a3:
6f:1f:9d:6b:0d:84:98:be:3f:36:a0:19:58:a6:3f:88:f0:9a:
b9:96:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:02 2025 by rpki-client