Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ST35iKJ7k-GWN7KCneyZ4o-Gm20.roa
File: ST35iKJ7k-GWN7KCneyZ4o-Gm20.roa (raw, json)
Hash identifier: GeBHeTDyFcd/XhNWJaMd0L37OTFk/JU9y0wimPjWwVk=
Subject key identifier: 49:3D:F9:88:A2:7B:93:E1:96:37:B2:82:9D:EC:99:E2:8F:86:9B:6D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01839F549897EA0E396FAFF75A704458F853
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ST35iKJ7k-GWN7KCneyZ4o-Gm20.roa
Signing time: Mon 03 Oct 2022 19:31:04 +0000
ROA not before: Mon 03 Oct 2022 19:31:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 5.180.106.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
5.180.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:54:98:97:ea:0e:39:6f:af:f7:5a:70:44:58:f8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 3 19:31:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=493df988a27b93e19637b2829dec99e28f869b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:e7:e9:6a:9c:10:fa:32:c5:69:2c:ab:03:
40:dd:6e:3a:b8:ba:25:26:87:0e:bd:22:05:d1:09:
0b:9a:44:ef:4a:5f:51:70:d9:d0:28:13:7f:ac:8a:
cd:42:fb:2d:df:19:02:57:36:c2:0b:63:81:20:b7:
73:fc:d0:4f:10:22:92:b2:e5:5d:cf:c8:a9:0d:1b:
89:e8:cd:ba:88:e8:96:f0:f7:6c:66:ca:dc:cc:f8:
f3:01:9b:f2:9e:22:95:f5:52:6a:ba:4a:65:77:c7:
76:18:5c:ab:e7:0f:01:2a:30:44:b1:3a:9b:38:b0:
fc:90:a6:b6:cf:eb:be:c7:cf:d4:76:89:d6:0f:8f:
8e:9d:9d:ee:1c:63:48:28:a8:c0:38:ae:f3:94:c6:
6e:b2:3c:91:08:cc:04:2e:33:47:37:5a:11:80:9a:
ed:bb:51:ee:4f:c1:44:f8:d8:0e:dd:46:58:fd:52:
be:1e:73:f0:63:9f:55:50:62:7f:75:d1:d2:50:4d:
fb:e7:d6:46:72:5e:50:1d:4a:b4:83:25:13:1b:cf:
5f:ce:81:4c:5b:40:d7:e8:28:b2:5c:b4:53:93:6e:
9c:ba:97:a0:a7:b4:c9:a2:c0:1b:34:43:67:1c:64:
ae:46:e6:c6:fe:e2:cf:f5:d6:e0:f4:86:ac:05:49:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3D:F9:88:A2:7B:93:E1:96:37:B2:82:9D:EC:99:E2:8F:86:9B:6D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ST35iKJ7k-GWN7KCneyZ4o-Gm20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.106.255
45.136.4.0/24
45.141.151.0/24
45.147.46.0/24
Signature Algorithm: sha256WithRSAEncryption
84:47:ed:88:f6:44:96:26:1a:92:1c:27:d6:40:48:83:df:89:
8d:15:bd:92:7e:05:31:c3:1d:a1:b3:4d:39:dc:82:84:bf:0a:
f4:b5:83:0d:cc:de:2a:62:79:69:f7:c7:db:19:43:bd:f3:3e:
d0:ac:6e:c7:b9:08:a3:02:cc:91:e9:79:9f:b5:4e:17:eb:ad:
73:24:ed:bc:df:a3:23:53:2f:67:60:14:83:58:20:c4:d1:f6:
73:e5:81:4f:b3:f6:e2:1d:a5:93:1a:e2:d3:de:43:09:95:f9:
f7:1f:25:70:f9:34:82:f7:b1:7e:30:3b:61:28:30:99:3b:fe:
45:ed:e3:16:eb:b9:cd:ae:9e:59:f4:73:15:56:e4:fa:03:fc:
85:1d:02:10:46:92:a0:7e:b0:2f:bc:46:0d:55:2b:53:fe:1f:
0f:7d:6c:80:94:63:c8:d6:70:f1:b8:36:76:9f:d2:b1:76:85:
03:bd:0d:5f:96:ab:ca:91:7d:9c:67:3d:4f:f0:4a:7a:fb:c1:
e4:db:f5:9d:d8:32:60:7d:5f:2e:28:c5:4f:37:f0:c1:42:65:
02:7b:d6:5f:d3:8d:7f:f4:2f:2a:e2:a6:b2:1c:9e:ae:fc:6e:
f2:aa:dd:56:ca:7c:29:4c:39:74:c8:26:9a:cb:e9:eb:38:80:
87:0d:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:14 2025 by rpki-client