Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gUbDMUrw_uCv7fAZF2jSt8KxILM.roa
File: gUbDMUrw_uCv7fAZF2jSt8KxILM.roa (raw, json)
Hash identifier: JWyaqJpmJpF/sGI2NbktGI+LtnmpUL2rpNDda+Qlpwg=
Subject key identifier: 81:46:C3:31:4A:F0:FE:E0:AF:ED:F0:19:17:68:D2:B7:C2:B1:20:B3
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019039D7FDD13E8FEEB51E97AD50622566FA
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gUbDMUrw_uCv7fAZF2jSt8KxILM.roa
Signing time: Fri 21 Jun 2024 08:09:34 +0000
ROA not before: Fri 21 Jun 2024 08:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:d7:fd:d1:3e:8f:ee:b5:1e:97:ad:50:62:25:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 21 08:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8146c3314af0fee0afedf0191768d2b7c2b120b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:6d:42:24:65:3e:81:06:af:ce:46:47:11:
06:61:ee:61:4a:05:cc:0e:43:a0:1c:86:f9:2a:61:
cb:de:7f:06:b1:f1:82:8a:80:ad:35:e9:fa:76:46:
be:cd:a7:46:f7:30:b7:88:35:c5:59:1d:74:97:99:
bf:0d:37:ab:cf:aa:1a:6d:a2:34:89:ed:9d:27:f0:
98:e0:5b:e2:e3:0f:1c:86:a2:9b:05:bd:7f:42:6a:
ce:d2:06:e0:66:02:61:54:2d:a6:92:ee:f5:80:82:
6d:ea:8a:e3:0f:8d:a6:32:c3:a7:7b:16:ae:6a:94:
a3:38:f8:7b:8f:57:e9:00:c2:67:f0:aa:13:fb:2a:
52:85:6f:99:9f:77:09:3a:41:c2:ca:ab:d6:84:c8:
7c:30:22:dd:63:78:ae:93:82:6d:e5:e5:ec:c0:22:
d1:ca:85:ee:b1:ad:ae:fc:b1:f5:71:e9:88:05:80:
24:fa:d3:80:a5:e6:0a:be:d2:41:80:f9:4e:12:8c:
87:1f:7a:33:c3:96:63:1e:fc:ed:a2:55:98:b0:18:
fd:72:ad:1d:d9:31:8d:aa:c2:1a:0a:26:58:cf:b1:
68:8c:c4:6f:a9:3b:e3:4d:e0:69:9c:f7:37:3b:2d:
7c:b6:0b:2d:6a:71:45:87:6a:b7:6f:d0:1c:9a:c9:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:46:C3:31:4A:F0:FE:E0:AF:ED:F0:19:17:68:D2:B7:C2:B1:20:B3
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gUbDMUrw_uCv7fAZF2jSt8KxILM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.136.5.0/24
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
a9:f1:6f:49:f9:2c:86:51:c9:b0:6d:42:3d:61:22:97:c3:52:
49:75:95:bf:8a:91:fe:b6:ad:01:3e:5a:d0:55:71:04:d9:6f:
50:d5:88:ce:fb:84:77:96:e6:65:57:58:5d:57:85:46:e8:04:
df:d9:36:6e:16:94:f2:1d:6e:02:19:49:bd:85:0c:e4:75:c9:
f3:07:3f:b4:0a:12:dd:9d:9e:d4:46:0b:ce:e5:49:85:93:65:
ae:7b:62:f1:67:e1:71:96:68:e3:d1:a7:5f:f2:cd:09:7a:a5:
4a:ca:7f:cb:3a:b3:60:c3:81:f1:64:43:6e:75:83:a5:5c:60:
3c:26:50:2f:7e:18:e0:2c:5b:9f:8f:f7:d3:79:8b:68:6a:cf:
98:28:1a:58:d1:b7:38:65:ee:03:c1:cc:15:fe:64:86:8a:d8:
27:e4:bb:4b:a2:35:d7:17:f3:e2:c0:36:5b:70:c9:08:ff:d3:
80:ad:75:d9:9e:c6:b2:5b:94:2f:a0:6b:07:7b:11:90:80:45:
59:99:c5:ea:ad:6e:45:06:8c:c1:a0:3a:ef:90:2b:28:91:a9:
be:20:48:07:12:2c:f2:39:36:9f:77:05:f6:1f:45:dc:0c:35:
cc:cf:bb:6a:69:85:cb:8d:10:69:18:3b:1e:e8:c3:68:26:85:
1a:d0:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:05 2025 by rpki-client