Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/r5RMWRUTvFFvFxxCrr7axAX4v_0.roa
File: r5RMWRUTvFFvFxxCrr7axAX4v_0.roa (raw, json)
Hash identifier: 13Nb3TZCCgA27/47PVfM1TDJCH2EMGoAHNAJKZLivLg=
Subject key identifier: AF:94:4C:59:15:13:BC:51:6F:17:1C:42:AE:BE:DA:C4:05:F8:BF:FD
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018FE98AA263E74F7066E63F310EC072CD5B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/r5RMWRUTvFFvFxxCrr7axAX4v_0.roa
Signing time: Wed 05 Jun 2024 17:55:27 +0000
ROA not before: Wed 05 Jun 2024 17:55:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:f900::/29 maxlen: 29
2a13:a440::/32 maxlen: 32
2a13:a441::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e9:8a:a2:63:e7:4f:70:66:e6:3f:31:0e:c0:72:cd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jun 5 17:55:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af944c591513bc516f171c42aebedac405f8bffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:98:8c:dc:39:71:67:c2:7d:b2:ae:ed:92:
83:5c:99:64:91:e4:a3:24:89:e1:48:20:06:29:f3:
ea:ea:7a:89:74:01:16:1c:f1:56:93:53:15:7a:a6:
c4:31:6b:05:b5:7c:b6:97:5f:0b:53:71:62:09:79:
27:71:06:3d:ed:a3:7b:8a:dd:61:ce:49:07:50:3a:
b3:f1:77:e0:c7:75:a7:ea:72:53:40:50:c2:ab:a1:
5c:af:d4:a2:1a:ef:1c:a8:ab:87:7f:a8:92:19:b9:
78:bf:2a:e9:a2:81:37:e3:a4:0b:1b:0f:86:28:a5:
4c:09:d0:ed:5a:a2:0a:b7:79:82:48:16:71:3e:fd:
60:10:45:c8:59:3a:01:88:71:f8:fc:37:ac:b3:a6:
ea:40:77:b1:9c:22:84:45:13:ef:e7:78:66:45:fe:
8b:02:d2:ad:bf:b7:d6:06:66:f9:7c:21:7e:05:76:
6e:e6:83:25:02:53:02:74:55:92:9a:56:de:57:e4:
cf:b8:be:b0:f9:cf:7f:17:f2:8b:37:98:a8:93:a5:
3f:af:1f:7e:f1:a0:78:f5:11:cd:b7:a4:7a:98:ff:
02:26:af:88:ac:84:1a:f7:8a:d3:d3:b1:6c:fd:fd:
d0:41:54:e5:83:3c:8d:6e:eb:96:5c:ee:a8:8a:ff:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:94:4C:59:15:13:BC:51:6F:17:1C:42:AE:BE:DA:C4:05:F8:BF:FD
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/r5RMWRUTvFFvFxxCrr7axAX4v_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.0.0/23
45.141.148.0/24
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/31
Signature Algorithm: sha256WithRSAEncryption
a3:80:a7:35:63:47:da:a9:3c:31:d7:26:86:a0:ea:c4:93:bb:
fb:b8:97:a8:ee:7e:5d:53:54:f4:80:16:25:65:96:f8:51:3b:
3d:1b:16:7a:03:d4:b0:4c:b7:8d:2b:8d:c1:0b:6a:60:02:08:
c2:59:54:f7:dd:65:4b:e6:8f:a3:6f:9d:cc:67:6c:44:6f:7d:
0d:a8:da:0c:1c:f5:4b:6a:e7:8c:af:e5:c5:3c:b9:9a:2f:be:
39:92:8e:19:ed:f8:44:91:a2:11:b8:ae:f4:bf:e7:61:85:5f:
7b:56:fd:92:ca:c0:8d:7a:e7:eb:30:35:ce:9d:8f:7a:e7:05:
4d:fd:21:d6:c5:81:ae:44:d8:83:dd:06:8c:bc:c0:d8:8a:2e:
56:c3:c6:f5:5d:d0:0d:98:7e:6b:a4:c7:fe:46:b7:a5:ba:41:
b4:d3:5f:b9:7f:19:7d:d7:05:08:a7:6a:8d:08:6f:4e:45:4b:
a4:ff:fb:13:27:ac:86:90:70:42:51:55:fc:a5:ff:4b:0a:c9:
14:e2:87:d9:9c:bb:b9:3d:62:c0:15:69:bd:5c:71:90:9f:25:
78:e4:d4:6a:38:09:5c:51:73:e8:32:40:e6:e3:6e:cd:36:a4:
40:2b:0b:f6:86:e1:12:0d:3b:fd:bd:28:97:89:99:a2:cf:90:
ce:5a:c7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:54 2025 by rpki-client