Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/aEG_jKR7fe0CGglCgLH_f2meQ48.roa
File: aEG_jKR7fe0CGglCgLH_f2meQ48.roa (raw, json)
Hash identifier: N0mdV21A8a108/2VKpm0HKKon2yF3ELn7CbmqlB6Ir8=
Subject key identifier: 68:41:BF:8C:A4:7B:7D:ED:02:1A:09:42:80:B1:FF:7F:69:9E:43:8F
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01900D9480912E1997DBFC9A01FC650B8A1F
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/aEG_jKR7fe0CGglCgLH_f2meQ48.roa
Signing time: Wed 12 Jun 2024 17:52:34 +0000
ROA not before: Wed 12 Jun 2024 17:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:94:80:91:2e:19:97:db:fc:9a:01:fc:65:0b:8a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 12 17:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6841bf8ca47b7ded021a094280b1ff7f699e438f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:c2:58:9e:be:1c:40:d9:5b:a3:1e:c1:87:
f7:e2:ab:6e:c7:97:12:ec:58:64:88:e3:11:70:f8:
8a:cf:4d:a4:bc:73:88:0b:e3:2a:6c:6f:67:25:f2:
1a:d5:a4:dc:78:ac:55:66:de:14:5c:a9:1a:91:b2:
89:cc:b6:e8:92:28:84:80:97:22:f7:48:9b:aa:06:
e6:7c:fd:19:d4:ee:bd:1d:52:fb:98:ee:45:52:39:
7c:77:0b:cc:03:ec:3e:cb:8b:ef:5e:fa:32:fe:73:
d9:bc:f3:d3:c8:9b:79:69:d4:51:97:14:f7:00:82:
79:76:ec:f7:55:e3:16:2e:dd:4b:92:5c:29:96:af:
8c:8a:43:a1:b3:3c:65:e6:bd:cb:d2:e5:65:fa:1d:
ec:69:c9:90:52:13:b9:18:80:aa:64:f7:1a:a4:92:
ba:27:b3:72:2f:b1:14:fb:5b:c6:61:e2:a7:0d:57:
5f:a0:5c:98:28:09:f4:1b:b6:dd:2f:72:3c:51:93:
98:c8:15:5e:cb:64:c3:52:71:8e:10:31:84:79:b6:
85:8c:21:ab:ff:c8:f1:6f:bf:1d:ce:ab:d5:59:80:
4c:ec:5a:54:52:f0:70:90:77:8a:ad:65:e5:26:48:
bb:12:8a:a8:ff:23:b8:a2:70:26:c0:e6:02:5b:d1:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:BF:8C:A4:7B:7D:ED:02:1A:09:42:80:B1:FF:7F:69:9E:43:8F
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/aEG_jKR7fe0CGglCgLH_f2meQ48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
9c:2e:e9:8b:ef:20:a1:32:18:f2:9c:3d:42:27:49:cc:7a:89:
a8:a7:97:47:58:ec:5b:8f:2c:99:79:69:be:92:c7:a1:b6:23:
17:69:31:ea:2f:c4:70:cf:8c:4f:12:33:f2:83:d1:6b:e4:b8:
59:8a:fe:bf:24:5f:28:11:32:94:22:fe:3f:54:2d:e7:1b:20:
f9:bb:76:fd:11:bb:06:c2:37:c4:e3:f6:ce:05:a2:43:1e:97:
17:45:36:7e:8f:5b:80:64:73:af:07:14:de:36:36:c5:5e:da:
5c:a2:80:3e:5d:fc:a9:91:73:79:53:c9:3e:10:4d:65:e5:38:
fe:2a:61:e0:71:44:1f:65:ce:9a:11:ed:10:5d:15:65:34:fa:
da:00:d5:6c:68:50:7d:ec:ba:83:83:13:c5:79:36:15:4a:8a:
c6:94:11:e7:91:76:77:e0:c8:88:cf:1f:ce:40:6f:87:04:73:
78:16:d6:43:d5:9e:af:e1:eb:21:72:79:81:18:03:50:59:e3:
df:15:63:65:27:09:11:67:1e:70:d1:42:c7:86:a6:0a:85:c2:
d5:0d:cd:22:26:3a:8e:d3:55:68:ed:79:61:c2:c7:2b:cd:c8:
35:ea:a3:3f:18:76:36:47:4b:eb:cb:37:01:7f:0d:c2:f2:af:
93:2c:60:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:28 2025 by rpki-client