Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/h7y_Q3cvYjv6MjjfP-rNzJ7oGx0.roa
File: h7y_Q3cvYjv6MjjfP-rNzJ7oGx0.roa (raw, json)
Hash identifier: PG22h9EfMOY6wAJWneXtzcuNnt9Zj5Q6FA9PHR9hsNU=
Subject key identifier: 87:BC:BF:43:77:2F:62:3B:FA:32:38:DF:3F:EA:CD:CC:9E:E8:1B:1D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01939BD8E36B99133DE93C42A86BED1B99DA
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/h7y_Q3cvYjv6MjjfP-rNzJ7oGx0.roa
Signing time: Fri 06 Dec 2024 12:01:42 +0000
ROA not before: Fri 06 Dec 2024 12:01:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:8::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:d8:e3:6b:99:13:3d:e9:3c:42:a8:6b:ed:1b:99:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 6 12:01:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87bcbf43772f623bfa3238df3feacdcc9ee81b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:d1:03:23:10:75:10:d7:94:d2:27:ba:64:
d2:4d:77:6f:a6:90:11:8a:fa:3e:e8:27:e6:15:a5:
c2:0e:76:0f:5d:4b:ee:38:75:46:a8:30:ff:de:3e:
c6:08:28:07:d9:ff:d2:f9:f2:3c:b2:4e:c3:75:8d:
aa:d1:fa:8e:0a:7a:1a:f9:96:89:ce:a5:ec:2e:ff:
e9:77:90:0f:97:25:47:6b:a3:bc:33:dd:2f:03:c9:
43:3d:ad:cd:01:39:dd:c7:aa:a8:2c:fa:ec:90:6b:
e0:86:7c:9e:01:b9:ff:53:1e:d4:51:dd:7e:67:fc:
22:f6:c1:fa:c6:0a:cb:29:31:a3:ca:ba:bf:18:2b:
aa:85:ff:65:1d:34:5f:4c:e2:8b:5a:86:45:9b:00:
7a:58:d5:aa:77:a1:4d:44:20:40:c4:d7:c4:ca:d4:
33:82:0f:24:aa:1e:d8:fd:8a:34:e3:48:ac:26:5d:
02:e6:25:d6:a9:b6:a0:86:04:b6:2b:0d:e5:da:65:
c3:92:e3:bf:f6:c1:3a:79:04:15:4f:53:4d:6d:b4:
32:0b:5a:5c:4b:78:2d:6e:0a:26:57:61:61:f2:fa:
bf:16:82:97:a1:40:13:06:31:b2:ad:45:37:e8:a2:
20:62:df:f0:27:cf:1a:be:c6:77:83:2f:00:4a:d0:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:BF:43:77:2F:62:3B:FA:32:38:DF:3F:EA:CD:CC:9E:E8:1B:1D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/h7y_Q3cvYjv6MjjfP-rNzJ7oGx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.136.4.0/24
45.141.148.0/24
45.147.44.0/23
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:8::/48
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
5e:16:ca:d8:ac:96:ff:a9:96:44:06:45:71:35:4a:f8:79:17:
b0:c3:bb:54:3c:ea:09:48:d0:fa:f7:0f:b9:0a:db:d3:4c:49:
2e:68:8a:a0:80:0b:c9:e8:9a:45:6a:d6:52:8f:0e:fe:d5:b3:
78:e1:92:66:e6:f1:7e:60:62:3c:3a:b1:91:c0:ff:a6:cb:55:
b8:7c:3e:72:33:be:28:3e:7e:3a:3d:20:e9:8e:61:ef:8a:a4:
7f:6a:91:7c:4f:ec:f3:d9:bd:1d:17:4e:af:8d:6f:ed:c4:55:
a1:92:2f:38:e4:48:ad:52:e7:dd:36:2d:1a:17:3c:f3:39:01:
3c:e6:bd:89:48:0c:65:32:04:8f:f4:af:50:ea:ad:c6:d6:cd:
71:0e:fc:64:8e:c4:c1:46:42:da:ef:98:b3:70:34:8d:3f:71:
39:c5:bc:b0:44:7c:81:ae:2a:2e:ae:a6:dd:1e:ef:59:2b:1d:
35:14:52:4e:49:4e:12:ba:dd:c9:53:7d:3a:3f:65:ff:39:64:
44:4b:82:0c:f2:5c:13:94:fb:be:4a:60:64:8f:6b:bc:ff:c6:
a2:f2:f0:e7:e2:e7:92:0b:6b:59:6a:37:44:e0:45:bc:2b:29:
ae:d6:98:ad:79:07:ad:32:81:8f:2d:51:30:26:9d:6c:db:ce:
2e:a2:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:48 2025 by rpki-client