Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QrWf8koH6PBzHKWt08bToQQM8pQ.roa
File: QrWf8koH6PBzHKWt08bToQQM8pQ.roa (raw, json)
Hash identifier: JEAQBOIxZ2O/lk6WvnNaPJrYMwMF7jy5VukSXPBA/BM=
Subject key identifier: 42:B5:9F:F2:4A:07:E8:F0:73:1C:A5:AD:D3:C6:D3:A1:04:0C:F2:94
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018322996C8DED76C9D78DC0BDF4C85E9FA6
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QrWf8koH6PBzHKWt08bToQQM8pQ.roa
Signing time: Fri 09 Sep 2022 14:13:43 +0000
ROA not before: Fri 09 Sep 2022 14:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:99:6c:8d:ed:76:c9:d7:8d:c0:bd:f4:c8:5e:9f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 9 14:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42b59ff24a07e8f0731ca5add3c6d3a1040cf294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:a1:3c:c8:07:19:43:ec:dd:70:5c:6d:72:
71:cc:61:26:cd:12:11:dd:68:64:4a:f5:8c:03:d4:
48:d6:c1:94:d6:df:83:2f:af:6a:19:6b:a3:c2:b9:
b2:ab:7f:62:be:32:19:3a:60:d7:d6:db:a9:60:62:
8f:2c:cb:12:9f:1d:b1:ab:f5:20:df:76:59:4f:b1:
ef:f5:18:47:56:6b:56:67:08:8d:73:c0:c4:4f:11:
74:d5:15:dc:b5:c8:7c:32:7e:96:5a:fd:7b:90:18:
5a:e0:6f:87:1e:87:29:54:02:78:8a:af:ac:4c:4d:
95:50:0c:34:c8:73:9c:62:60:da:d1:0f:14:b8:41:
dc:c1:a3:18:a9:55:05:e1:f6:29:0d:96:ef:f6:cf:
af:99:8f:04:99:1b:d9:94:48:ca:bf:11:cb:63:84:
ed:0c:3e:3e:b7:59:1d:88:35:65:f7:f8:66:33:ee:
8f:a3:bb:92:6f:39:c1:b4:f8:83:9a:38:12:88:2e:
6d:a4:7f:97:d2:ce:ae:9d:62:a2:e1:6a:b1:fd:2b:
95:81:8d:22:61:95:44:27:24:71:ca:87:40:2a:3d:
a8:c1:bf:b3:89:3b:c3:82:4d:87:37:f9:7b:37:7d:
96:39:3a:94:72:f0:82:c3:f3:2f:e3:5b:d1:84:15:
8e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B5:9F:F2:4A:07:E8:F0:73:1C:A5:AD:D3:C6:D3:A1:04:0C:F2:94
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QrWf8koH6PBzHKWt08bToQQM8pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.131.2.0/24
45.136.6.0/24
45.141.150.0/24
45.147.45.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
5f:89:de:77:6e:d2:66:5f:df:0f:da:6e:39:8e:ed:2a:02:e0:
5d:79:4b:9b:74:c7:4c:00:a3:d4:b8:6b:33:9b:ce:52:4a:e7:
14:09:5b:19:12:53:f6:48:21:07:6d:9b:4e:c8:8b:50:29:16:
b7:a8:5a:b7:22:5b:a9:55:12:96:1e:1f:d2:62:de:70:48:0f:
0e:5a:4f:57:f5:20:99:f2:c2:f4:1d:be:40:75:ba:7a:5a:1a:
8d:3d:76:13:b9:36:03:74:e4:65:15:16:da:39:31:cb:84:c8:
e8:c8:ab:ec:d2:a6:30:af:e0:71:d2:32:28:18:43:a5:72:94:
43:37:af:e6:66:a1:01:44:25:e9:49:10:df:de:64:74:63:7f:
c3:71:40:13:3b:29:27:8f:39:30:6f:c8:47:2b:86:43:4d:d2:
79:35:4d:0a:25:a8:73:38:53:8d:9f:b2:19:18:54:78:a3:35:
39:7a:da:7f:29:68:2d:7d:81:01:aa:e4:0d:fc:1d:53:47:50:
94:43:15:cc:d3:8b:82:33:dd:9d:ad:de:07:82:f8:00:e6:fd:
16:09:c9:5d:fd:87:82:e2:4e:c7:8c:d8:59:ab:4a:bc:75:65:
82:98:18:d9:3b:09:a4:1f:63:84:2a:ef:31:a5:7f:27:ac:20:
e3:62:45:76
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYMimWyN7XbJ143AvfTIXp+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjIwOTA5MTQxMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmI1OWZmMjRhMDdlOGYwNzMxY2E1YWRkM2M2ZDNhMTA0MGNmMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj02hPMgHGUPs3XBcbXJxzGEmzRIR
3WhkSvWMA9RI1sGU1t+DL69qGWujwrmyq39ivjIZOmDX1tupYGKPLMsSnx2xq/Ug
33ZZT7Hv9RhHVmtWZwiNc8DETxF01RXctch8Mn6WWv17kBha4G+HHocpVAJ4iq+s
TE2VUAw0yHOcYmDa0Q8UuEHcwaMYqVUF4fYpDZbv9s+vmY8EmRvZlEjKvxHLY4Tt
DD4+t1kdiDVl9/hmM+6Po7uSbznBtPiDmjgSiC5tpH+X0s6unWKi4Wqx/SuVgY0i
YZVEJyRxyodAKj2owb+ziTvDgk2HN/l7N32WOTqUcvCCw/Mv41vRhBWObQIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFEK1n/JKB+jwcxylrdPG06EEDPKUMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvUXJXZjhrb0g2UEJ6SEtXdDA4YlRvUVFNOHBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQABbRqAwQA
LYMCAwQALYgGAwQALY2WAwQALZMtAwQCTVPIAwQAwnTlAwQBwnTsAwQAwpIkAwQA
wpIvMA0EAgACMAcDBQMqCYeAMA0GCSqGSIb3DQEBCwUAA4IBAQBfid53btJmX98P
2m45ju0qAuBdeUubdMdMAKPUuGszm85SSucUCVsZElP2SCEHbZtOyItQKRa3qFq3
IlupVRKWHh/SYt5wSA8OWk9X9SCZ8sL0Hb5Adbp6WhqNPXYTuTYDdORlFRbaOTHL
hMjoyKvs0qYwr+Bx0jIoGEOlcpRDN6/mZqEBRCXpSRDf3mR0Y3/DcUATOyknjzkw
b8hHK4ZDTdJ5NU0KJahzOFONn7IZGFR4ozU5etp/KWgtfYEBquQN/B1TR1CUQxXM
04uCM92drd4HgvgA5v0WCcld/YeC4k7HjNhZq0q8dWWCmBjZOwmkH2OEKu8xpX8n
rCDjYkV2
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:34 2025 by rpki-client