Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/mqh751gUHnVt2_SSpK2d9Ds67oQ.roa
File: mqh751gUHnVt2_SSpK2d9Ds67oQ.roa (raw, json)
Hash identifier: iMmX5XIcNVRh9/3PUs54wKaFEF4rkV0f8mLmoHPdhwU=
Subject key identifier: 9A:A8:7B:E7:58:14:1E:75:6D:DB:F4:92:A4:AD:9D:F4:3B:3A:EE:84
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 086AFFD2
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/mqh751gUHnVt2_SSpK2d9Ds67oQ.roa
Signing time: Mon 02 May 2022 07:18:14 +0000
ROA not before: Mon 02 May 2022 07:18:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.136.7.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141230034 (0x86affd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 2 07:18:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aa87be758141e756ddbf492a4ad9df43b3aee84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:75:e9:a3:e4:5d:b4:df:2b:6d:55:7a:4c:
f9:92:5b:21:b6:9e:4d:12:da:0f:a8:fb:e0:36:94:
6b:a4:e4:13:89:91:82:2c:e4:22:20:1b:88:bc:28:
e9:99:d3:ee:e1:ae:e0:db:35:74:c5:a3:52:c1:18:
da:03:94:26:82:50:a5:ab:a7:97:bf:ed:05:8c:36:
6e:e8:4f:d5:3a:4a:4f:ac:84:e1:6e:0b:08:32:4d:
3d:60:fd:12:57:8e:30:25:bf:55:fe:bf:92:af:e4:
b0:0a:13:d3:60:38:41:6f:f7:e6:4c:95:36:b9:83:
0b:91:c0:9c:7f:dd:86:0b:d4:87:85:bc:54:ba:c6:
aa:db:2e:1f:11:e2:e3:2b:e1:8a:29:44:89:d6:f9:
9f:8f:b0:2b:0b:8d:4d:c9:f2:03:b8:80:c1:1b:75:
ec:70:95:15:dc:43:03:72:5f:6e:9e:9d:b5:70:ce:
c9:19:a2:df:e9:16:74:41:79:11:d9:c7:df:3d:61:
22:ff:cf:04:a9:94:8c:c3:75:00:7e:05:df:44:84:
dd:ec:69:e5:34:df:87:b1:11:b8:d3:7f:34:86:2f:
ae:a7:74:3e:f7:c1:2d:67:ee:71:62:42:52:ec:a1:
b6:41:4f:d3:63:12:b6:92:9d:e4:13:9f:9f:9f:7c:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A8:7B:E7:58:14:1E:75:6D:DB:F4:92:A4:AD:9D:F4:3B:3A:EE:84
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/mqh751gUHnVt2_SSpK2d9Ds67oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.131.2.0/24
45.136.6.0/23
45.141.150.0/24
45.147.46.0/24
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
93:da:0a:3b:07:39:60:78:23:c9:af:e9:5e:fb:72:fb:ae:b0:
24:9e:9f:e3:8e:e6:1a:91:ed:49:74:28:5f:d2:51:a8:66:54:
19:44:1d:16:1f:15:2c:fc:fd:45:76:28:ec:af:97:09:9b:39:
35:64:cc:8e:c4:14:01:bc:8b:e3:9e:0b:25:ad:2c:6f:b2:59:
02:e3:b9:ca:84:2e:71:70:a5:b0:10:ef:83:4d:ad:de:f6:a5:
da:e4:90:9d:68:63:09:e7:ce:64:4c:98:d5:85:82:31:5b:28:
2f:e7:dd:a3:1b:3b:f7:91:46:40:e1:ce:51:c8:05:59:18:a8:
c6:bc:cf:42:a9:2b:d8:32:50:7c:8a:c7:54:ff:20:e4:4d:93:
24:6f:27:fd:68:1d:f3:f0:cc:35:40:ef:3a:86:b0:6b:29:e3:
52:34:cd:3c:38:8b:a2:15:0a:09:2c:a6:a5:b6:a8:7a:05:de:
d4:75:83:c9:d0:f9:0d:f8:62:da:19:e6:5a:37:9f:63:27:2f:
09:10:a9:a0:41:da:bc:1f:51:2c:c7:f3:6e:1f:90:82:ca:87:
fa:28:70:0a:79:84:49:e6:ec:f1:2a:e8:d1:98:e4:43:7e:29:
0e:1e:a9:30:4a:9f:1b:18:48:b3:76:c8:c4:06:d9:e6:4a:bd:
1b:94:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:53 2025 by rpki-client