Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UwLWFohvpUWhrVuy7X4ibo8caWM.roa
File: UwLWFohvpUWhrVuy7X4ibo8caWM.roa (raw, json)
Hash identifier: Z2mntb28cNzJngIz17dJc7XXiqb+3SzTgf2PVUeLXaM=
Subject key identifier: 53:02:D6:16:88:6F:A5:45:A1:AD:5B:B2:ED:7E:22:6E:8F:1C:69:63
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018DB1BD64D92122B94441CE54501E122216
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UwLWFohvpUWhrVuy7X4ibo8caWM.roa
Signing time: Fri 16 Feb 2024 11:46:35 +0000
ROA not before: Fri 16 Feb 2024 11:46:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:bd:64:d9:21:22:b9:44:41:ce:54:50:1e:12:22:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 16 11:46:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5302d616886fa545a1ad5bb2ed7e226e8f1c6963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f5:4c:06:b9:6e:38:19:6a:ce:03:73:c8:90:
a4:9b:9c:c7:76:c4:87:8c:3e:f7:b9:50:f3:e6:f9:
ec:7f:a6:96:57:f2:b2:ee:c8:2e:f5:fd:fd:90:c6:
fc:a0:09:80:6e:16:27:34:e3:ab:75:fb:5e:96:37:
fa:c7:98:b9:b9:1e:03:fb:77:e4:cd:b5:13:08:e7:
9c:65:61:a3:e1:dd:8b:8f:20:26:68:e9:41:15:14:
a2:06:99:2f:31:7d:d4:0a:a6:85:f9:1e:78:bf:05:
ae:17:fd:a0:f9:82:9f:40:b9:31:8f:09:ed:f2:9d:
f5:21:78:56:b0:32:9a:3f:8e:16:1d:b4:10:8d:20:
84:d0:3e:45:4c:71:f3:6e:40:9b:22:73:f7:5c:68:
2f:46:7e:3e:be:04:d9:38:ba:fc:cd:0f:ff:4f:a6:
35:85:67:58:4a:43:91:97:81:38:38:d7:a6:c9:a2:
68:40:31:e9:60:4e:e5:ca:15:31:4b:a7:6b:90:9b:
33:9b:8f:a0:a2:ee:b7:4f:bd:59:2b:34:ad:46:c0:
0f:6c:ca:73:11:81:30:96:37:f7:d9:6d:f8:cf:5b:
97:df:d1:54:82:68:13:9e:d3:3b:13:42:73:4b:fa:
fd:f6:59:27:f3:b4:71:fb:4a:b5:74:fc:85:c9:d2:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:02:D6:16:88:6F:A5:45:A1:AD:5B:B2:ED:7E:22:6E:8F:1C:69:63
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/UwLWFohvpUWhrVuy7X4ibo8caWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.136.5.0/24
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/23
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
02:a6:c7:c8:7a:35:01:bd:bd:a5:f2:0b:0c:5c:6d:42:c5:67:
6f:17:32:0d:9a:b9:fa:b9:75:c2:20:3f:d9:a7:ca:37:df:f8:
b2:37:11:b1:7d:c4:b9:e4:12:e0:82:6b:01:e5:e8:2e:05:28:
ad:7d:a8:6f:2d:31:b4:67:c1:e5:91:5f:33:9c:ce:69:6b:22:
aa:d4:44:e4:21:c7:b2:c4:7d:38:e8:ac:d1:ab:23:13:6e:af:
75:c4:93:85:83:f7:10:7f:41:ae:d1:46:bd:d8:6f:a6:30:39:
6f:fc:da:07:8f:c0:99:53:98:c6:2e:9a:07:ca:c5:f5:e9:87:
ba:3c:06:dc:c6:85:13:d0:80:99:a1:32:dd:33:b6:35:87:6a:
f6:c4:31:3e:4c:6e:ad:3d:9a:94:54:b5:05:3d:fa:7a:61:ad:
79:64:d8:dc:c2:d5:49:f0:bf:9a:61:53:8f:96:97:0f:7b:47:
ec:26:26:9f:ba:62:5c:6c:19:4d:b2:a1:a7:2e:c4:52:b3:3c:
6b:9a:03:84:43:f3:17:70:75:4d:1f:cc:5b:0f:d0:bd:e9:8f:
82:e5:0b:be:4c:91:d7:9a:ed:27:36:d7:5c:7e:c2:cb:b8:b8:
6b:d3:a0:4d:9d:a9:ce:49:ad:78:b8:6d:73:b2:96:f5:c1:ab:
4d:14:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:54 2025 by rpki-client