Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hqA_c-fHjlV9CtY32S1YfyqiWNY.roa
File: hqA_c-fHjlV9CtY32S1YfyqiWNY.roa (raw, json)
Hash identifier: Gu3mUTnClT8tQNQ9A+vlSVfdttcNji0XXUZxyC42lSQ=
Subject key identifier: 86:A0:3F:73:E7:C7:8E:55:7D:0A:D6:37:D9:2D:58:7F:2A:A2:58:D6
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01914D5B4E023825BB937FF427B68D4DE0D2
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hqA_c-fHjlV9CtY32S1YfyqiWNY.roa
Signing time: Tue 13 Aug 2024 20:08:35 +0000
ROA not before: Tue 13 Aug 2024 20:08:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.180.104.0/24 maxlen: 24
5.180.105.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:5b:4e:02:38:25:bb:93:7f:f4:27:b6:8d:4d:e0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 13 20:08:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86a03f73e7c78e557d0ad637d92d587f2aa258d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:46:b2:35:99:21:23:55:e4:40:cf:36:08:f7:
a2:f8:48:92:cf:11:0a:92:4a:cd:5e:9c:01:ce:03:
6a:71:a7:ca:23:61:fd:7e:c0:7f:6a:8a:ba:1f:dd:
69:7f:3b:6c:41:98:07:00:7c:b4:4e:7b:20:4c:6c:
be:12:4a:e4:54:ac:9e:a9:67:7d:a1:e7:5a:7c:af:
6d:d8:b7:b8:6b:7c:c8:f3:90:d0:3d:ee:f4:13:43:
af:09:f1:02:43:8e:e7:d1:76:55:69:b3:3f:f5:44:
b7:a3:be:78:6d:13:17:85:5d:53:d7:74:a8:3a:50:
25:b2:7b:d6:a5:ae:4f:b1:a0:96:7a:99:d0:25:44:
27:1c:cd:e8:a6:f9:e6:e9:65:90:8e:12:89:a1:91:
b9:aa:b4:a7:81:2a:1d:79:d7:5c:e2:37:a4:07:68:
27:60:66:9c:e9:da:bd:cb:47:c9:82:5e:60:d7:59:
c2:48:85:e9:d6:89:e8:1d:7e:ce:af:9a:b7:41:63:
27:37:96:3d:c4:a0:5e:04:f0:8e:f8:b0:40:8f:eb:
f7:46:6a:db:89:9a:84:e1:e9:d4:0c:40:85:df:fd:
c8:ac:a7:4f:13:ec:2f:78:6c:a3:53:d4:63:e0:60:
50:df:79:2e:e4:0d:d4:09:49:d6:39:6e:36:1d:18:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:3F:73:E7:C7:8E:55:7D:0A:D6:37:D9:2D:58:7F:2A:A2:58:D6
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/hqA_c-fHjlV9CtY32S1YfyqiWNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/23
5.180.107.0/24
45.131.0.0/23
45.131.3.0/24
45.141.148.0/24
45.141.150.0/24
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb07::/32
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
5e:eb:a7:84:9d:f0:1a:5f:53:15:57:e3:3e:e6:ac:1f:8b:c8:
ce:03:de:16:70:49:0c:80:40:f7:51:01:1a:18:8c:1e:8a:cc:
09:8a:1f:dc:0d:b5:a4:66:92:9f:a8:64:ca:dd:0c:15:08:cf:
64:83:21:6f:77:17:a7:67:2d:5a:1b:d7:54:76:ef:56:b1:86:
c9:cd:ff:2e:3f:da:e4:17:dd:7a:ab:06:9a:60:68:0e:18:ec:
6c:9d:f2:6e:62:4b:9e:43:a6:03:09:91:15:c3:7f:88:50:e6:
55:df:e9:84:6a:9f:37:43:c3:02:d8:76:eb:f0:02:6c:d7:c5:
d2:bf:16:69:6a:78:91:b6:3f:39:de:95:f5:db:3c:38:fc:35:
21:bc:15:83:38:77:83:aa:ed:43:e4:aa:55:54:05:15:2f:42:
bc:3c:fa:5f:06:01:94:24:5e:c6:98:58:a4:67:f2:29:41:a3:
f8:2a:ee:91:14:4e:e9:b5:fb:91:47:2e:3e:a3:c7:a6:00:7a:
00:2a:31:b9:94:99:b2:53:68:90:93:11:18:0c:f2:cb:e6:be:
6a:1b:fc:5a:0e:37:9f:eb:75:d5:64:17:c5:7f:37:e9:ec:65:
28:b2:43:35:e8:38:95:aa:a9:26:64:e1:96:5b:2d:f6:e6:39:
d3:ca:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:44 2025 by rpki-client