Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/O2XYgIblTqF2VOn-xArytT9hc84.roa
File: O2XYgIblTqF2VOn-xArytT9hc84.roa (raw, json)
Hash identifier: wjE2YiRsmBjlmU8WHfMJDEOVKAB4K9xLCLNuA6LPSmE=
Subject key identifier: 3B:65:D8:80:86:E5:4E:A1:76:54:E9:FE:C4:0A:F2:B5:3F:61:73:CE
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018E8000934F40F8FCE4DB1F9241BDCBB126
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/O2XYgIblTqF2VOn-xArytT9hc84.roa
Signing time: Wed 27 Mar 2024 13:01:45 +0000
ROA not before: Wed 27 Mar 2024 13:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:00:93:4f:40:f8:fc:e4:db:1f:92:41:bd:cb:b1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 27 13:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b65d88086e54ea17654e9fec40af2b53f6173ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:59:f5:f2:9e:59:5d:dc:1a:8a:b6:7d:12:
a9:27:b7:0f:5b:47:55:bf:8f:66:ef:e0:5e:ac:ae:
22:13:88:68:2d:f4:a1:86:a2:92:f0:cd:5d:3b:64:
db:9f:71:f5:6b:cd:ea:2e:f1:c0:df:70:58:dd:a8:
c2:b1:c9:fb:66:3d:52:4f:c0:a0:ee:59:c2:81:0f:
0d:d1:1e:29:bb:08:ec:08:4c:0d:4b:62:c8:fa:a2:
74:97:49:e9:c9:fb:55:ad:71:98:ee:f5:3e:5d:10:
fc:16:59:cb:4a:90:2f:73:61:32:bf:3d:af:cb:a6:
8d:52:1b:f5:75:02:db:47:4e:6b:8e:0b:0c:c5:24:
d4:43:2c:df:a0:83:20:43:ff:df:7b:4b:67:84:2d:
ac:9c:33:53:fb:27:9d:24:73:40:84:38:bb:67:a0:
b8:b1:6c:15:cb:e7:dc:8c:4b:7d:9e:c6:1f:d6:a3:
4b:ec:80:85:ec:04:39:e5:25:28:28:6c:9b:f7:da:
30:45:d2:3d:79:15:24:a5:07:81:e4:32:43:74:dc:
59:a0:04:7a:74:2e:49:f2:e9:91:b5:67:f1:b5:5f:
09:b0:9f:31:6e:b6:95:a9:53:98:15:b4:09:b0:56:
6e:83:c0:d9:a2:ac:d4:11:ed:b7:74:59:ea:1b:b1:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:D8:80:86:E5:4E:A1:76:54:E9:FE:C4:0A:F2:B5:3F:61:73:CE
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/O2XYgIblTqF2VOn-xArytT9hc84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.136.5.0/24
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/23
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
Signature Algorithm: sha256WithRSAEncryption
6f:f9:0e:bf:87:ba:40:84:15:66:03:d9:ba:3e:aa:07:f9:1d:
a8:a6:87:ca:e0:b7:7a:fd:47:e7:a2:4c:bb:97:57:fd:a9:0f:
df:40:a4:b0:7c:13:be:44:0d:32:82:24:2e:49:51:31:ac:bf:
ee:e6:92:7c:1b:13:60:87:33:9e:e1:33:af:2e:0e:cd:e7:83:
3b:3a:ea:01:e9:f1:ba:80:a0:86:9a:49:7a:84:2f:10:63:f8:
25:fa:d0:db:9b:f6:93:7b:52:3b:8e:2d:6b:4f:74:0a:7b:6b:
16:f0:50:04:33:29:6c:9c:8f:4b:59:1a:9e:dd:01:c5:ad:52:
31:88:cc:d5:04:91:ac:d3:30:db:31:ac:15:5e:47:c3:d5:06:
f8:49:e5:37:ac:83:3e:78:37:e6:e5:30:07:5f:14:6d:b7:fb:
29:9f:df:90:eb:2d:63:c7:43:9d:6d:70:f0:0e:2a:11:8c:c7:
72:23:04:05:ec:d7:28:5b:d0:39:9c:37:f9:c0:ed:fc:0b:1a:
54:15:b0:ae:f8:cf:be:62:c4:de:0f:f2:43:65:ed:77:fc:fa:
97:e0:2d:26:fd:18:ca:74:c2:ac:55:68:b5:7d:80:fa:b0:cf:
5f:05:f8:3c:39:25:2a:7d:4b:e7:23:bd:a3:93:12:9b:ab:2f:
70:c5:37:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:00 2025 by rpki-client