Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/XCHu7-I6mD9FgrX2z3YuLymn3fM.roa
File: XCHu7-I6mD9FgrX2z3YuLymn3fM.roa (raw, json)
Hash identifier: K8ZRR9eugAmutN0/yQJu0vNsJkKEcI94G0SWwzzxkvk=
Subject key identifier: 5C:21:EE:EF:E2:3A:98:3F:45:82:B5:F6:CF:76:2E:2F:29:A7:DD:F3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01828BB836E0111EE704442586212ED68C06
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/XCHu7-I6mD9FgrX2z3YuLymn3fM.roa
Signing time: Thu 11 Aug 2022 07:04:41 +0000
ROA not before: Thu 11 Aug 2022 07:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211376
IP address blocks: 45.147.44.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.1.114/32 maxlen: 32
194.116.228.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.116.228.174/32 maxlen: 32
45.131.1.0/24 maxlen: 24
2a0f:b700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:b8:36:e0:11:1e:e7:04:44:25:86:21:2e:d6:8c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 11 07:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c21eeefe23a983f4582b5f6cf762e2f29a7ddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:78:64:7d:fa:c9:54:1d:45:6c:e7:c6:08:
37:89:00:a4:66:05:07:a5:75:92:12:66:cf:04:32:
fc:c5:ab:f3:d9:36:c4:8c:2c:1d:57:7b:82:7b:be:
69:40:12:f6:e8:62:64:26:4c:c0:0f:c7:1a:3f:a8:
e3:b8:a8:b0:2d:11:2f:37:cc:d6:4e:97:89:b9:6d:
f9:5c:ce:3c:90:87:de:48:14:a5:78:62:37:8f:9f:
93:ab:6a:47:9c:c1:8c:4e:d3:a0:88:66:55:a1:8a:
7b:b8:9a:7d:ed:88:66:45:e8:e9:78:e6:ea:dc:4d:
dc:b5:52:1b:e0:5c:07:da:b1:23:66:d2:51:7a:c3:
fd:1d:8a:e7:7f:58:6d:42:86:9b:03:82:b2:2c:c5:
7f:c9:91:a5:1c:4c:a0:b7:37:af:93:f0:d7:c7:ed:
82:19:9c:0d:a6:a8:ab:04:d4:e3:f3:9c:80:ab:68:
05:2b:d3:d8:86:d8:ef:3b:4f:7d:40:a4:38:16:88:
99:72:f7:e1:3d:2c:97:18:f4:5b:8e:9b:41:ab:eb:
1b:9b:0d:57:34:e7:e1:68:37:bc:e9:3a:a5:12:ca:
3a:7a:a3:2f:63:5b:7d:7e:52:49:3e:da:e1:8a:f5:
1b:c4:ed:d3:ea:93:bd:d6:89:e4:ff:1b:ab:21:e5:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:21:EE:EF:E2:3A:98:3F:45:82:B5:F6:CF:76:2E:2F:29:A7:DD:F3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/XCHu7-I6mD9FgrX2z3YuLymn3fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.1.0/24
45.147.44.0/24
194.116.228.0/24
194.146.26.0/24
IPv6:
2a0f:b700::/29
Signature Algorithm: sha256WithRSAEncryption
3c:03:fd:f8:59:a0:da:ed:26:4c:bb:7b:4a:20:88:47:1a:cd:
c4:af:72:b7:08:fa:c0:a1:71:97:4d:44:b9:73:fc:44:cc:47:
e6:ee:d7:bc:bd:37:6c:a6:17:0e:4b:97:84:9a:10:f6:44:1e:
4f:a9:a8:d7:32:db:09:4c:7f:ef:80:2f:32:5d:4e:89:5d:e6:
43:e8:cb:d1:17:c1:08:29:74:09:15:27:e0:2e:df:d5:20:fd:
47:fe:b3:1b:fd:2b:a2:3b:62:d7:22:c3:c9:b7:33:6f:b4:9d:
6c:3a:be:a9:26:2e:4e:65:8a:07:bd:63:b1:1a:d2:64:e1:88:
a1:d8:1c:ab:87:cd:fa:98:f0:49:29:86:b9:49:d2:d6:6d:08:
5f:62:3c:c0:7c:30:aa:bc:f9:e8:e9:db:34:05:6d:81:73:e8:
ae:b1:28:8a:0b:0e:67:70:4d:5f:a3:77:2b:af:a6:59:3c:71:
a2:b5:25:af:70:60:4f:2b:4e:ea:87:08:97:b9:a1:d9:41:f8:
72:b0:09:ab:78:3b:a1:31:65:27:78:80:06:a6:e8:60:b2:e1:
d8:4f:3a:50:c9:d5:d7:a2:61:d6:c1:c4:3c:0a:28:0c:ae:ca:
5d:c2:23:f3:20:51:c4:a4:67:4b:86:e2:88:69:49:b1:92:b5:
3b:83:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:35 2025 by rpki-client