Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QdEhQYW1pe-3YuTiD-tQrzzIeaQ.roa
File: QdEhQYW1pe-3YuTiD-tQrzzIeaQ.roa (raw, json)
Hash identifier: FloPnBAPH2kN6/FBU8PlPAJGSLyR3MV57bIVxJENQdI=
Subject key identifier: 41:D1:21:41:85:B5:A5:EF:B7:62:E4:E2:0F:EB:50:AF:3C:C8:79:A4
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018F63ED2419BFEC9E6732BB76ACC9C5729C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QdEhQYW1pe-3YuTiD-tQrzzIeaQ.roa
Signing time: Fri 10 May 2024 19:13:56 +0000
ROA not before: Fri 10 May 2024 19:13:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.104.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a0f:e900::/29 maxlen: 29
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:63:ed:24:19:bf:ec:9e:67:32:bb:76:ac:c9:c5:72:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 10 19:13:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41d1214185b5a5efb762e4e20feb50af3cc879a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:c0:28:cc:6c:23:35:5f:f1:b5:5d:f8:01:
d3:42:68:2e:89:2c:4f:ad:54:eb:c9:f8:17:72:01:
b3:1a:7e:b2:ca:cb:29:c2:ee:95:9f:ec:f7:11:ec:
71:fa:c0:0f:e7:6b:7e:06:e8:6f:e8:b8:ba:e8:c0:
e1:f9:44:90:32:70:b3:0c:2e:a3:a3:18:86:84:68:
74:49:22:1e:62:7a:93:55:5b:b9:0a:03:8f:57:e7:
8f:1c:c7:f3:17:89:d5:f7:21:11:ba:c8:62:17:03:
38:63:ad:9b:a1:40:0e:28:98:f4:a9:d0:fc:11:24:
28:e1:96:07:8c:e8:24:d4:ee:31:68:43:4a:5a:f8:
e5:a4:2b:1c:4b:b3:18:23:70:c0:35:b9:2d:a5:56:
c9:1d:e3:b0:1e:fe:68:49:bd:6a:8d:b8:32:d5:4e:
45:48:0a:79:4e:ce:2f:99:e7:d4:f7:ca:77:d5:86:
f7:78:0f:c8:49:62:4c:17:c6:be:38:03:55:12:e3:
cc:8a:ed:b7:36:02:e4:a1:11:65:dd:5c:4c:e0:99:
0a:e9:ce:f6:c3:13:f7:b1:29:af:6d:cc:8f:fc:20:
f2:c8:db:54:68:93:62:22:18:d3:ec:0a:b0:af:8a:
7a:d9:be:85:38:99:d3:17:e0:35:6a:6e:9a:42:b3:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:21:41:85:B5:A5:EF:B7:62:E4:E2:0F:EB:50:AF:3C:C8:79:A4
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QdEhQYW1pe-3YuTiD-tQrzzIeaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.141.148.0/24
45.141.150.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a0f:e900::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/32
Signature Algorithm: sha256WithRSAEncryption
a2:1b:22:61:68:27:cc:ef:f1:01:0c:07:ae:4c:4d:67:b3:2b:
c5:d8:e8:e5:ff:49:96:3f:47:3b:08:9f:11:dc:e1:22:be:2c:
aa:88:9e:68:e3:37:c1:35:9d:23:c1:3d:db:a5:ef:49:06:be:
b0:51:74:c2:e1:1c:7f:50:c7:2b:f9:57:37:5e:2d:59:f7:f4:
b8:04:4f:76:05:b6:8a:b5:8b:22:0f:f7:5e:ba:cb:e1:52:83:
7a:f9:84:3e:78:df:2b:69:96:ec:9b:b2:e5:e5:fd:08:6e:d5:
0b:5b:f1:68:6a:17:4f:b6:c0:27:20:48:02:50:6a:96:82:d1:
c2:f1:79:7f:15:ce:50:41:39:05:ec:b5:cc:d5:a2:95:c2:3d:
65:df:fe:ef:d2:08:d2:18:f8:f6:91:c1:a8:3b:be:78:de:40:
a9:0a:d7:fd:e9:a1:65:03:82:ab:d1:72:fe:97:ba:94:fc:05:
12:80:fb:07:e1:bb:e5:4f:95:6a:56:7c:4c:65:c7:41:a2:d2:
40:13:75:fb:fd:63:3b:63:81:33:57:b1:47:06:6a:97:2d:d6:
bd:9a:6f:78:58:fa:a0:2b:cc:98:09:b0:d5:37:e0:e4:53:db:
32:42:9e:45:54:b7:93:b1:38:c6:15:73:b4:8e:58:a3:6c:e7:
4f:3e:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:52 2025 by rpki-client