Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/uE-MAOWTUCukGoNcLzuTs89TfmY.roa
File: uE-MAOWTUCukGoNcLzuTs89TfmY.roa (raw, json)
Hash identifier: 5oQ6J+cp/0nCOawfzZTroV3NEKp3zCDdLElli4jaMBw=
Subject key identifier: B8:4F:8C:00:E5:93:50:2B:A4:1A:83:5C:2F:3B:93:B3:CF:53:7E:66
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01829113B3062D11957D340CD93B6BEA49BD
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/uE-MAOWTUCukGoNcLzuTs89TfmY.roa
Signing time: Fri 12 Aug 2022 08:02:43 +0000
ROA not before: Fri 12 Aug 2022 08:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:13:b3:06:2d:11:95:7d:34:0c:d9:3b:6b:ea:49:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 12 08:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b84f8c00e593502ba41a835c2f3b93b3cf537e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:bd:ee:d8:6b:d1:d0:da:0d:a9:b0:70:b5:
d2:88:8b:6e:3a:a3:f5:cd:72:13:0e:5d:78:47:22:
a9:9c:f5:5c:3d:7e:37:b6:b3:be:89:3d:7f:b9:f4:
95:56:9f:59:ec:89:f2:bf:35:94:2e:2e:05:02:35:
fe:3f:5f:34:7a:f9:57:eb:f6:3f:44:68:d6:cf:73:
eb:bc:3b:cf:52:ea:71:c9:59:de:cd:7e:ce:d6:68:
e1:40:d5:57:68:7a:e5:58:02:41:96:d9:6b:e2:d6:
61:80:f3:e6:61:a2:cb:d1:bc:5e:e2:45:7f:e5:8d:
58:37:2d:1a:6c:1c:50:86:68:48:7a:ee:ad:d9:ac:
9e:0c:de:de:31:bf:ad:da:70:3f:2f:93:6e:a3:36:
35:bf:ef:54:2d:25:83:45:ab:f0:24:0a:4d:6e:4f:
bd:1f:ac:b8:51:68:4b:e0:30:0e:d5:b7:4d:71:c0:
67:ce:df:8f:23:23:f0:71:66:41:16:8d:72:62:c0:
6a:92:4d:4c:4d:a4:2b:80:b5:6d:a1:34:01:98:f1:
3d:77:fa:99:be:b9:4d:bb:03:a7:41:f1:98:ee:f5:
81:17:e9:18:be:bf:68:a4:21:6b:d1:63:0d:68:9f:
d3:11:e9:16:28:5b:37:d0:ef:57:6f:87:da:13:51:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:8C:00:E5:93:50:2B:A4:1A:83:5C:2F:3B:93:B3:CF:53:7E:66
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/uE-MAOWTUCukGoNcLzuTs89TfmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
5.180.106.0/24
45.136.6.0/24
45.141.150.0/24
45.147.45.0-45.147.46.255
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
39:e6:b3:23:8f:9a:e0:05:6e:2c:ee:4e:1b:f0:a4:59:c7:43:
78:bd:50:72:31:57:fb:9c:d6:e2:d7:2b:4a:e4:76:1b:74:d5:
09:8f:9e:9b:fd:b1:ae:76:b6:ba:cb:62:1b:29:11:94:45:25:
8c:af:53:c5:49:32:c5:40:03:83:43:44:a0:b3:ab:18:dc:26:
49:c3:44:8d:70:c4:ac:bc:38:be:c0:76:37:ff:f6:fa:78:c2:
e3:e8:e4:63:1e:d5:76:27:aa:ee:a3:a4:9b:2f:d6:54:5a:cd:
05:3f:6a:0a:33:95:a9:b5:a3:56:2b:10:5a:25:b3:58:65:f8:
69:1a:37:6a:97:53:50:92:58:dc:11:b6:02:86:32:0d:dc:23:
37:5b:3b:04:c5:e6:7d:26:32:90:19:fc:ca:e8:3c:dd:71:78:
05:b7:e8:d3:b7:a1:24:4f:37:15:f7:08:7b:95:e0:ed:3d:47:
b5:02:2b:fc:ac:58:ea:56:65:f5:fb:1a:ce:0c:bb:5c:ea:a7:
44:c4:af:7b:fc:d4:9a:5d:b7:58:9a:6a:ce:16:a4:98:62:a9:
1b:20:32:5d:97:81:78:67:80:91:fe:33:0d:71:b8:2c:8e:37:
02:5d:3a:22:91:c3:d1:d1:9c:c1:5a:64:1b:3f:4a:8b:f2:0f:
72:84:ad:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:50 2025 by rpki-client