Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/j5pH5G3SB0dFyQvcJraXnGu9XZc.roa
File: j5pH5G3SB0dFyQvcJraXnGu9XZc.roa (raw, json)
Hash identifier: tix6OegjXDCFrrBTG1FI+PcUqn3VerNemYHcgsfTvnE=
Subject key identifier: 8F:9A:47:E4:6D:D2:07:47:45:C9:0B:DC:26:B6:97:9C:6B:BD:5D:97
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018E6CDBC1D17185BD121B6943CFC23B9E10
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/j5pH5G3SB0dFyQvcJraXnGu9XZc.roa
Signing time: Sat 23 Mar 2024 19:48:45 +0000
ROA not before: Sat 23 Mar 2024 19:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213257
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6c:db:c1:d1:71:85:bd:12:1b:69:43:cf:c2:3b:9e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 23 19:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f9a47e46dd2074745c90bdc26b6979c6bbd5d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:71:ef:68:62:0f:16:75:cd:c0:25:41:8d:
99:51:6a:b7:45:5b:9c:e8:8e:77:4c:01:b1:66:52:
00:9e:3d:d8:88:ad:aa:64:57:51:59:90:2f:63:d7:
91:b6:c8:ec:4a:41:c3:e6:1f:08:1b:a6:43:b4:29:
ad:45:ed:7c:24:58:4e:d2:07:a5:01:d3:09:75:b8:
7e:36:8a:3b:ba:27:a3:c0:06:bf:f1:00:2b:4e:3c:
d1:98:2a:1e:5a:ef:e5:c3:bb:12:6c:00:68:f0:dd:
25:5d:43:f0:0d:67:04:a2:0e:ee:17:ee:2b:60:2c:
84:67:28:28:fc:93:d9:2d:c6:a8:8e:88:ea:df:80:
9d:de:9a:ef:e1:94:07:b0:53:a2:50:5f:1f:fc:c9:
b5:4c:77:ba:87:97:ea:79:66:5a:b1:05:47:54:16:
9f:f9:03:56:8c:66:0a:b1:2c:a4:d6:d4:67:c0:12:
a9:b9:ba:bd:45:d4:6f:6e:ed:69:89:40:76:b1:76:
bd:2a:5a:d6:d9:85:dc:fe:5f:ac:d2:3f:c7:5a:29:
09:eb:ee:16:d6:52:44:c9:a6:b6:17:f2:26:60:5e:
20:96:53:53:d9:68:28:8d:84:b6:0f:00:2d:dd:ae:
01:6c:58:63:67:92:1b:c9:f0:09:df:71:b4:dd:46:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:47:E4:6D:D2:07:47:45:C9:0B:DC:26:B6:97:9C:6B:BD:5D:97
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/j5pH5G3SB0dFyQvcJraXnGu9XZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.147.44.0/24
77.83.202.0/24
194.116.228.0/24
194.146.26.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c0:38:94:dc:54:7d:82:a6:5e:04:fc:f8:20:4e:1d:fb:5a:
32:37:fb:80:3e:69:79:7f:ac:84:bf:7b:23:2c:a7:0d:eb:2c:
ae:4d:05:da:95:b7:8a:1f:c6:b9:45:c9:68:59:b6:f0:be:d7:
ac:b5:67:ab:16:99:2f:54:44:92:1b:d2:dd:cb:b8:70:ac:63:
1f:23:73:ed:8f:ad:7d:82:23:82:21:7b:31:c7:04:b0:9e:3f:
a6:86:d5:15:6a:21:20:5c:f2:a3:d7:a8:8d:8d:f2:4c:c6:b6:
66:52:e3:ed:36:ab:b2:52:45:17:74:f1:d4:83:fc:66:24:f1:
4f:9a:ff:94:96:84:0a:6a:d3:4b:53:bf:ca:67:15:58:5b:88:
b3:a2:cd:4b:b1:cf:ac:27:85:d6:50:2f:13:d4:6c:3d:4d:3a:
ff:85:7d:7f:e0:46:64:8d:43:b6:03:72:4f:07:b8:ff:af:c1:
52:a4:d3:81:cf:db:30:5e:7b:8c:05:87:f7:5e:16:2b:3f:e0:
90:3d:89:c3:0e:3a:38:1d:d4:45:2a:1b:d0:46:61:1b:ae:a7:
a5:e8:e4:e0:4e:20:7c:8b:13:52:39:6f:67:80:bd:29:92:40:
e9:59:c5:76:ee:a7:7e:55:26:d6:63:6e:30:de:c7:49:57:21:
60:10:29:ba
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY5s28HRcYW9EhtpQ8/CO54QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwMzIzMTk0ODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjlhNDdlNDZkZDIwNzQ3NDVjOTBiZGMyNmI2OTc5YzZiYmQ1ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGxx72hiDxZ1zcAlQY2ZUWq3RVuc
6I53TAGxZlIAnj3YiK2qZFdRWZAvY9eRtsjsSkHD5h8IG6ZDtCmtRe18JFhO0gel
AdMJdbh+Noo7uiejwAa/8QArTjzRmCoeWu/lw7sSbABo8N0lXUPwDWcEog7uF+4r
YCyEZygo/JPZLcaojojq34Cd3prv4ZQHsFOiUF8f/Mm1THe6h5fqeWZasQVHVBaf
+QNWjGYKsSyk1tRnwBKpubq9RdRvbu1piUB2sXa9KlrW2YXc/l+s0j/HWikJ6+4W
1lJEyaa2F/ImYF4gllNT2WgojYS2DwAt3a4BbFhjZ5IbyfAJ33G03UZomQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFI+aR+Rt0gdHRckL3Ca2l5xrvV2XMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvajVwSDVHM1NCMGRGeVF2Y0pyYVhuR3U5WFpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABbRrAwQB
LYMAAwQALZMsAwQATVPKAwQAwnTkAwQAwpIaMA0GCSqGSIb3DQEBCwUAA4IBAQBf
wDiU3FR9gqZeBPz4IE4d+1oyN/uAPml5f6yEv3sjLKcN6yyuTQXalbeKH8a5Rclo
WbbwvtestWerFpkvVESSG9Ldy7hwrGMfI3Ptj619giOCIXsxxwSwnj+mhtUVaiEg
XPKj16iNjfJMxrZmUuPtNquyUkUXdPHUg/xmJPFPmv+UloQKatNLU7/KZxVYW4iz
os1Lsc+sJ4XWUC8T1Gw9TTr/hX1/4EZkjUO2A3JPB7j/r8FSpNOBz9swXnuMBYf3
XhYrP+CQPYnDDjo4HdRFKhvQRmEbrqel6OTgTiB8ixNSOW9ngL0pkkDpWcV27qd+
VSbWY24w3sdJVyFgECm6
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:48 2025 by rpki-client