Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E9pT9FP6qmNLGOiMyJrTFJCj4HM.roa
File: E9pT9FP6qmNLGOiMyJrTFJCj4HM.roa (raw, json)
Hash identifier: 1WSXPmrdwHzhKGB93BZLMljlcV9ER6RYH91aOqTV2Yo=
Subject key identifier: 13:DA:53:F4:53:FA:AA:63:4B:18:E8:8C:C8:9A:D3:14:90:A3:E0:73
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018F2082FE453C904AFF7E22048B0805B845
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E9pT9FP6qmNLGOiMyJrTFJCj4HM.roa
Signing time: Sat 27 Apr 2024 17:03:26 +0000
ROA not before: Sat 27 Apr 2024 17:03:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 5.180.104.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:82:fe:45:3c:90:4a:ff:7e:22:04:8b:08:05:b8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 27 17:03:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13da53f453faaa634b18e88cc89ad31490a3e073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:73:e3:79:0a:fb:82:70:8e:31:ca:f2:a7:
de:b0:0f:cd:48:7b:02:74:39:3e:5a:74:f9:44:de:
e3:4b:15:c0:59:63:c5:46:73:b6:a3:ab:89:ad:bf:
2f:1e:f9:b2:f8:ff:ab:4f:1f:07:e2:85:69:af:8f:
27:49:b4:62:a0:ec:fc:e8:da:dc:46:bd:66:e0:03:
6a:ca:74:59:ce:df:95:59:aa:13:5d:f8:32:ce:c4:
67:c3:71:2e:15:25:3a:2e:d2:e4:ca:92:f6:10:8e:
63:d8:57:25:2a:fa:bf:b0:25:fd:49:28:bc:c5:16:
9b:23:ef:18:0e:54:30:e5:c1:6c:1c:2f:8f:7f:b1:
13:84:e0:4e:9b:c3:b8:84:b0:7f:f3:82:22:d1:b1:
1e:44:66:23:54:21:39:91:1d:67:75:be:f2:14:7f:
d8:47:35:29:be:aa:df:f0:d9:5a:a0:7b:75:1d:5d:
1e:2e:11:0b:72:d4:07:b4:d1:e9:e9:42:73:82:84:
b4:bb:f7:68:ad:00:79:e7:b4:e1:31:52:ff:c2:63:
82:29:92:22:5c:bd:6c:9f:a9:10:71:5e:b7:ad:18:
a1:75:33:7e:9e:b9:9d:5c:4a:e8:79:e4:20:f3:f9:
48:f1:1a:aa:bf:5b:66:f5:d6:29:4e:ff:c4:8c:24:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DA:53:F4:53:FA:AA:63:4B:18:E8:8C:C8:9A:D3:14:90:A3:E0:73
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/E9pT9FP6qmNLGOiMyJrTFJCj4HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.141.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:9f:1c:03:f2:30:b6:49:6f:c4:14:40:14:f3:49:23:1f:9d:
12:da:c6:f8:78:34:34:fd:09:c7:80:3d:28:15:c4:b2:ba:89:
93:ef:15:5d:df:21:bd:ce:63:76:ee:95:a9:43:fb:0a:fe:95:
ff:5f:d1:69:17:9a:e9:af:1f:55:54:d4:21:35:48:04:37:a2:
75:d1:0c:ae:f4:29:cc:76:34:ff:a1:95:a1:18:be:dc:79:21:
50:ad:74:ed:29:48:fb:7d:01:1f:03:c2:9d:de:09:e5:8f:1e:
78:7f:97:45:15:fc:41:6e:99:bd:cb:87:8f:6f:09:1d:55:e7:
a3:95:56:5d:43:a0:9b:b5:0b:93:87:86:8a:fa:cb:1d:ec:df:
ad:30:64:85:f5:b9:ff:65:12:31:f0:19:8c:77:d9:ae:1e:4d:
80:3b:f3:08:04:ee:8d:ba:bb:e0:8d:0a:b0:5d:18:8d:a7:f7:
34:7e:55:ae:86:02:87:41:4b:c1:09:2c:43:10:21:bf:67:3a:
26:58:42:31:da:35:ee:db:b2:d2:09:16:a9:7e:f0:2c:c7:93:
71:eb:5c:2f:a0:cb:23:22:7a:d7:13:4c:d2:a3:69:bb:4f:2c:
52:19:7b:06:6e:d6:6a:82:94:34:f1:3e:33:a7:5c:77:25:57:
5b:96:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:11 2025 by rpki-client