Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/X1yjfTnpzMJplsyvlx0k_LFtTCg.roa
File: X1yjfTnpzMJplsyvlx0k_LFtTCg.roa (raw, json)
Hash identifier: wEFxkrP/eBXQc7jPX5Slr7OvPWES7HRcKJzugsSOFjY=
Subject key identifier: 5F:5C:A3:7D:39:E9:CC:C2:69:96:CC:AF:97:1D:24:FC:B1:6D:4C:28
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 083A3DED
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/X1yjfTnpzMJplsyvlx0k_LFtTCg.roa
Signing time: Wed 13 Apr 2022 01:19:49 +0000
ROA not before: Wed 13 Apr 2022 01:19:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138034669 (0x83a3ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 13 01:19:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f5ca37d39e9ccc26996ccaf971d24fcb16d4c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:97:37:cb:db:62:c7:98:0c:8d:12:b2:fc:
dc:9b:03:c2:f3:d1:0e:22:38:22:b2:18:31:8b:0f:
a6:ec:a1:42:a3:cb:35:04:71:33:d7:69:29:24:b1:
fa:78:59:ca:03:50:f8:63:06:db:49:3e:31:72:42:
4c:2a:4b:2f:c8:9f:02:fa:7f:80:aa:59:b5:d5:8e:
88:4c:12:8e:e6:30:93:ae:1d:8c:0c:84:30:e1:b1:
5e:a7:a8:8d:c2:0f:4f:76:d3:aa:1c:c6:a5:4d:09:
ca:d1:13:6a:91:9b:22:e2:f4:9c:35:9e:e3:8d:83:
d0:e0:f1:17:a4:dc:94:69:b9:14:ab:82:d5:ef:6c:
93:f0:4a:76:22:e6:93:8d:31:06:ae:bf:c5:b9:82:
5e:9b:50:0d:b7:3b:e0:bc:3e:05:f1:27:49:27:ec:
05:3a:01:fb:30:8a:3a:f4:ec:31:35:34:33:84:e2:
12:16:67:75:8d:65:d9:61:97:b7:2c:ff:50:19:57:
89:8d:a2:45:c6:cd:aa:18:76:b1:1e:7e:d3:ab:58:
4a:72:82:69:6c:e8:d3:4b:f4:86:37:f9:37:00:38:
52:35:e8:69:d5:f2:92:c3:8d:a7:09:ab:40:83:ed:
2a:5e:54:f6:d6:76:e8:76:ef:92:ab:11:44:73:0c:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5C:A3:7D:39:E9:CC:C2:69:96:CC:AF:97:1D:24:FC:B1:6D:4C:28
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/X1yjfTnpzMJplsyvlx0k_LFtTCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.131.0.0/24
45.131.2.0/24
45.136.6.0/23
45.141.150.0/24
45.147.46.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
a4:81:93:58:b4:5d:93:97:2d:d0:72:eb:06:14:3c:fd:94:97:
10:11:58:01:ba:d8:ff:d9:8c:3e:b6:bf:9e:f2:74:9a:54:81:
90:10:e1:a5:83:4e:5f:f5:01:46:6f:55:d8:97:5b:b7:7b:da:
ca:f1:6e:32:9f:b1:0f:cf:c3:11:e6:62:58:1e:ca:1a:ff:20:
54:bf:4b:43:0e:36:c6:0a:1c:79:56:0c:3c:5e:d0:b0:85:2e:
65:b5:6c:8b:02:25:92:4d:41:22:c1:5e:72:36:69:29:ec:a0:
81:11:a5:b0:95:8d:7f:2a:08:bb:7e:eb:e6:01:41:d0:93:0f:
91:a5:1a:1a:fc:01:81:0f:06:77:f9:ec:44:ef:bf:ff:d3:fc:
0c:d5:ee:e9:7c:a5:eb:17:d5:9d:59:d3:5b:b9:0a:94:00:88:
6d:73:77:cb:70:3d:31:a5:46:c3:e7:0c:17:08:9c:04:95:0d:
09:e6:ad:de:23:3a:4b:cf:cf:2a:28:e0:ff:91:8c:c2:8e:8d:
4d:71:89:67:98:fb:c2:a3:07:fb:11:38:17:b5:9a:09:eb:7e:
dc:c7:13:59:29:8c:5c:0a:70:d7:cf:82:c0:ad:24:46:44:91:
aa:f9:50:af:4e:29:1f:8f:06:e6:24:fc:0a:02:fe:1b:40:13:
d6:98:a8:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:20 2025 by rpki-client