Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/lkhVg1WlNFWFAPOzicbOIUsQFwE.roa
File: lkhVg1WlNFWFAPOzicbOIUsQFwE.roa (raw, json)
Hash identifier: 5DHhp7VnoOCbvqB/xZGUyY3WTArnsS85laAyWxTI+QY=
Subject key identifier: 96:48:55:83:55:A5:34:55:85:00:F3:B3:89:C6:CE:21:4B:10:17:01
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0762AF55
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/lkhVg1WlNFWFAPOzicbOIUsQFwE.roa
Signing time: Mon 17 Jan 2022 15:03:15 +0000
ROA not before: Mon 17 Jan 2022 15:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123907925 (0x762af55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 17 15:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9648558355a534558500f3b389c6ce214b101701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:da:db:0b:17:f7:af:35:47:d3:34:8a:1e:
85:32:47:45:d0:5b:1a:c2:94:d0:ab:55:9b:e6:84:
5f:a3:23:53:c1:70:5f:2c:f9:63:8f:0b:21:f3:98:
96:4e:73:db:61:2c:92:7f:59:48:b9:3f:81:65:81:
53:c5:85:63:43:11:98:e4:95:27:60:28:13:12:77:
0a:24:20:f2:f4:c2:f5:bf:83:13:76:9f:9c:1a:35:
41:2e:5c:f1:8e:01:61:08:38:69:05:25:d4:01:fc:
06:d2:03:51:e2:81:11:fd:d1:a7:b7:6f:b2:0a:d9:
1a:a5:2c:21:b2:d4:a5:72:b6:14:da:e9:d9:86:1b:
af:05:a3:fd:89:3e:65:e9:41:14:c5:9f:8a:7c:ec:
47:0a:56:c9:b3:15:60:ca:12:a1:68:98:94:ef:00:
0b:8f:06:3c:b2:0d:2f:ad:aa:3e:97:c7:7b:19:04:
19:cd:64:d4:68:c2:7c:ae:7b:b0:49:ea:cb:8f:4e:
37:46:a0:d6:b6:a7:fc:86:c0:fd:49:fb:e1:c0:49:
32:87:e1:88:05:e2:57:10:c7:c2:b1:82:2f:82:cb:
e4:3b:2a:f9:33:a8:fc:1d:77:5a:3f:e4:bf:e9:12:
76:e3:34:4b:f3:2d:7e:f8:3a:0d:c2:d1:52:56:19:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:48:55:83:55:A5:34:55:85:00:F3:B3:89:C6:CE:21:4B:10:17:01
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/lkhVg1WlNFWFAPOzicbOIUsQFwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.131.0.0/24
45.136.6.0/23
45.141.150.0/24
45.147.44.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
1f:04:21:08:3a:2c:51:07:fb:e4:5f:1a:cd:58:56:0c:f6:19:
6f:df:e5:04:da:78:98:8c:45:25:55:62:e3:36:de:dc:b0:3f:
38:34:75:d3:9e:55:34:b5:10:1b:5f:0a:4c:c8:0e:99:e1:f0:
82:b3:cb:90:df:de:73:0d:94:82:d6:ff:38:d5:c6:55:f9:d0:
b5:d0:ac:c0:93:27:c7:45:8d:92:de:72:1c:81:bd:56:d3:3d:
6f:30:76:09:3b:34:d5:95:cf:db:52:7c:05:c6:f6:e6:7d:ba:
12:72:69:b0:23:70:21:5b:d4:22:fd:f0:30:81:3e:2a:ce:c3:
2d:10:be:fd:12:07:2b:2c:5d:2e:2c:2a:92:35:9b:56:98:fe:
b2:f6:bf:fd:fb:36:3d:b8:97:de:d8:c4:eb:2c:d6:0c:34:a8:
14:4b:4a:78:31:e5:06:b0:32:e0:28:4e:ba:8f:b3:0d:e6:e6:
e2:ef:e2:66:a5:af:44:f4:d6:3b:82:f4:89:8a:72:99:9b:8f:
06:c6:fb:f0:28:a5:03:86:56:53:86:e1:9b:c7:f2:12:43:b8:
2b:a7:7b:69:9b:99:35:62:76:eb:9c:8b:ed:8d:d7:d5:30:2d:
3e:d0:2d:ff:fd:fd:27:3b:f5:a4:e1:ab:70:24:ce:c1:0e:a6:
69:f6:8a:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:56 2025 by rpki-client