Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eeZ_L8xLhNZ3-3IdaR4qEVQUuXw.roa
File: eeZ_L8xLhNZ3-3IdaR4qEVQUuXw.roa (raw, json)
Hash identifier: OGCoODYtQb1K/hUmBMFrPc6xgceYJl/TLZAt+1KKlwc=
Subject key identifier: 79:E6:7F:2F:CC:4B:84:D6:77:FB:72:1D:69:1E:2A:11:54:14:B9:7C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01939BD8E285154DDC280B18CEFC81E1A7AF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eeZ_L8xLhNZ3-3IdaR4qEVQUuXw.roa
Signing time: Fri 06 Dec 2024 12:01:42 +0000
ROA not before: Fri 06 Dec 2024 12:01:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:d8:e2:85:15:4d:dc:28:0b:18:ce:fc:81:e1:a7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 6 12:01:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79e67f2fcc4b84d677fb721d691e2a115414b97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:24:fc:8f:5d:c5:c8:d4:42:15:27:cd:7d:
57:1a:af:07:f7:d7:f0:00:ce:73:1f:a4:46:e8:40:
92:9f:3b:7d:e0:5b:62:e1:3e:0e:e9:a7:11:8a:7c:
71:3e:a6:75:95:c6:85:06:ec:38:c2:45:d3:be:ad:
b0:15:cd:b7:5c:ac:ce:f4:84:17:d0:14:27:39:d0:
aa:75:d3:ae:b0:2c:45:d9:a3:db:28:19:a0:c2:99:
5e:c4:b7:0f:30:ec:20:7c:07:7c:4e:73:06:16:47:
9f:5b:0e:33:13:74:4f:59:16:60:e8:88:ae:93:d8:
35:9b:58:5a:6a:d0:7c:69:ef:eb:db:09:5b:aa:a5:
db:ad:aa:be:27:3d:31:9b:cb:72:9e:ea:cb:45:da:
3c:ef:66:98:f6:7e:a0:e3:55:00:a7:22:7d:b5:d1:
f0:a4:cf:55:8d:06:7a:c4:5d:bd:9e:36:e9:39:fd:
35:cf:ec:6a:e2:3f:c1:72:46:c5:77:42:56:ac:c9:
e8:5e:16:97:62:d4:ec:94:34:5a:8d:bb:78:3e:f4:
f2:1e:72:eb:a0:6b:13:53:1f:bc:e7:d8:70:97:01:
87:4a:cb:e5:d9:82:08:af:38:c3:80:ed:57:dd:d8:
81:18:5e:0d:9a:a5:d7:ab:46:5a:b4:07:3a:38:9c:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E6:7F:2F:CC:4B:84:D6:77:FB:72:1D:69:1E:2A:11:54:14:B9:7C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eeZ_L8xLhNZ3-3IdaR4qEVQUuXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.131.3.0/24
45.136.4.0/24
45.141.148.0/24
45.147.44.0/23
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:8::/48
2a13:a441::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
9b:64:58:23:ee:55:0f:a8:1c:03:d1:95:6c:13:86:52:58:63:
2b:ca:69:b9:87:29:18:41:50:26:95:83:67:ec:bb:e1:9b:02:
ec:30:39:94:70:82:8c:50:5f:a1:41:cd:33:65:4c:c4:ce:84:
f7:c0:6c:b7:67:49:ab:ac:2e:57:88:95:01:22:e0:97:a5:e7:
0d:10:71:03:aa:a6:85:67:c1:c3:01:b6:ae:d3:11:21:ed:fb:
fe:92:28:80:aa:5c:ef:76:4a:ff:d7:2e:8d:9b:44:21:94:c0:
65:93:3e:9e:4d:fb:38:6f:6c:46:71:7e:f9:0e:0e:92:6f:8c:
79:ba:1a:e5:0b:53:51:83:22:45:f5:c8:29:96:78:14:e1:6f:
b6:d3:c1:a3:03:ab:da:54:9b:f0:65:71:47:21:c4:1a:cf:4c:
4b:8a:c0:75:ac:3d:1c:de:70:4d:13:1e:21:f6:ed:92:ff:cc:
6a:e8:3d:99:ad:9d:4a:24:38:1c:e0:97:f1:0a:1b:98:15:be:
44:89:69:25:c9:28:d5:d1:71:4a:9b:b2:8d:93:20:f5:e4:da:
df:1b:25:f9:86:ce:a6:a9:1c:b8:a2:e3:7f:0f:6e:eb:3d:bc:
b6:58:f2:c8:23:e1:bb:a6:b5:f7:30:1b:74:47:c0:a1:18:c2:
27:48:6e:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:19 2025 by rpki-client