Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/EDvQmlHZ7QDKZpglZJsPBR2gMNs.roa
File: EDvQmlHZ7QDKZpglZJsPBR2gMNs.roa (raw, json)
Hash identifier: 83LFh+oiCzsEVnZHYHg6QjNlv2NWpzaVpsb2jBRdIzs=
Subject key identifier: 10:3B:D0:9A:51:D9:ED:00:CA:66:98:25:64:9B:0F:05:1D:A0:30:DB
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018291FA6293C1670F466CE9E5BF80D2FE43
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/EDvQmlHZ7QDKZpglZJsPBR2gMNs.roa
Signing time: Fri 12 Aug 2022 12:14:41 +0000
ROA not before: Fri 12 Aug 2022 12:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211376
IP address blocks: 45.147.44.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.1.114/32 maxlen: 32
194.116.228.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
194.116.228.174/32 maxlen: 32
45.131.1.0/24 maxlen: 24
2a0f:b700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:fa:62:93:c1:67:0f:46:6c:e9:e5:bf:80:d2:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 12 12:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=103bd09a51d9ed00ca669825649b0f051da030db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:a2:57:cc:2c:54:88:dc:f5:dd:d2:6c:7a:
68:8f:fc:14:fa:1f:5f:75:6e:75:8c:a5:69:3e:7d:
67:a6:fb:d2:b8:31:4b:c7:e7:0a:45:f5:6f:92:1f:
69:df:71:82:5f:41:ff:aa:0b:e3:ba:14:5f:c8:09:
6c:be:66:ce:dd:6b:06:a4:45:c1:d1:0a:d0:46:fd:
15:f6:74:5c:9a:77:07:ab:e6:2b:ad:e4:15:85:b3:
a6:6a:e2:b1:09:e1:4a:09:d8:45:bd:87:28:90:7d:
20:42:53:20:09:ea:73:ee:52:98:9e:6c:f6:db:69:
e8:1c:31:8e:d6:b6:79:6c:61:e5:0e:9b:be:d9:47:
de:8a:5c:44:56:a1:e4:7d:40:b7:eb:8d:79:a0:47:
73:18:af:9f:fc:bf:fb:fa:cb:4c:81:48:c9:1e:0d:
cc:f6:4b:db:6c:e1:c7:bc:57:ef:3d:a0:35:79:ac:
a4:b6:02:a7:79:e9:1c:85:4e:d1:6d:db:2a:01:91:
df:80:15:e0:28:d6:4e:42:fc:5b:55:5e:71:c8:f8:
ee:21:31:4f:13:c8:0d:c9:80:4f:21:9d:10:74:25:
6c:39:99:bd:9a:8d:6a:81:ef:6d:a4:1e:b9:c1:bc:
0f:e9:a0:18:7b:4c:ca:66:50:56:fc:40:58:07:ba:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:D0:9A:51:D9:ED:00:CA:66:98:25:64:9B:0F:05:1D:A0:30:DB
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/EDvQmlHZ7QDKZpglZJsPBR2gMNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.1.0/24
45.136.5.0/24
45.147.44.0/24
194.116.228.0/24
194.146.26.0/24
IPv6:
2a0f:b700::/29
Signature Algorithm: sha256WithRSAEncryption
50:ef:39:0d:89:c0:aa:79:a2:e1:b9:fe:95:94:fd:6f:04:a9:
56:e9:ed:3e:18:05:99:fa:a8:46:ab:05:22:1b:a6:fc:45:0d:
db:4d:de:a9:bc:e4:be:5f:ea:60:62:e2:2f:53:b4:1d:79:ba:
d4:35:bf:f4:5c:4e:6b:2a:c9:49:93:00:57:16:37:ae:26:4e:
8d:42:6c:9a:54:6c:6c:dd:07:f4:c6:b8:5c:3d:f8:6a:dd:c0:
0a:12:5d:b3:fc:d2:93:09:fb:3e:e2:56:8f:63:4c:3a:31:6e:
d4:01:75:ab:a1:0b:51:64:64:38:c7:14:86:0e:ca:f9:7c:27:
99:7a:bf:79:33:b9:d2:8c:79:c1:af:6e:08:d2:41:22:57:db:
41:95:b9:96:17:a8:f1:2a:01:95:80:0c:f4:a7:55:9a:d9:33:
9b:08:a9:df:ac:a2:b3:a4:47:1b:7f:07:89:f0:d2:18:9c:9b:
51:1f:19:c2:49:09:e4:ba:84:36:54:0f:34:8a:90:e7:26:cb:
d8:3b:21:f1:6e:0e:56:ff:eb:e8:b2:a4:ad:e3:a8:4a:5a:62:
16:f7:e0:fc:10:fc:6b:4c:54:89:3e:94:59:39:35:e0:e4:a2:
18:77:2b:32:a1:24:dc:9e:6f:fd:32:a5:77:70:f9:f9:7f:d9:
1b:00:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:21 2025 by rpki-client