Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/vugaUKQBxb_l9uuGsU1Zed82Lfk.roa
File: vugaUKQBxb_l9uuGsU1Zed82Lfk.roa (raw, json)
Hash identifier: rI3tL0+hnmFYkeMZ8bM5DQ7KQhB8r5b+tp0cCL7jeDI=
Subject key identifier: BE:E8:1A:50:A4:01:C5:BF:E5:F6:EB:86:B1:4D:59:79:DF:36:2D:F9
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 07863FB2
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/vugaUKQBxb_l9uuGsU1Zed82Lfk.roa
Signing time: Tue 01 Feb 2022 09:33:36 +0000
ROA not before: Tue 01 Feb 2022 09:33:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211376
IP address blocks: 45.147.44.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
2a0f:b700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126238642 (0x7863fb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 1 09:33:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bee81a50a401c5bfe5f6eb86b14d5979df362df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:dd:0b:97:ce:e8:20:57:bc:f7:de:e0:c1:
48:d3:ff:21:80:4b:aa:3b:a2:f5:57:83:8a:4f:07:
73:cd:ae:b0:e8:bb:17:85:31:20:e4:6a:ef:8b:74:
20:05:27:cb:d8:9e:dc:4b:60:0e:d6:ae:19:fa:27:
fb:11:3f:10:8e:b1:1a:57:da:6e:34:24:9d:8b:66:
1d:be:56:56:34:c0:77:00:e8:1c:cc:f9:ca:0b:cc:
87:67:70:67:0d:3c:47:1b:9c:26:9e:45:d4:ec:c6:
f8:8c:1e:18:48:d1:73:24:8b:dd:48:98:6c:fd:3b:
68:0a:25:b7:81:20:be:44:c8:3d:e5:36:ca:f8:69:
dc:a3:90:15:cf:f8:3b:ce:8a:1f:fc:5d:62:fb:cd:
09:c8:ec:ec:8b:25:4a:4c:f9:68:e6:ff:3f:98:e7:
b8:7e:8a:05:5c:11:b1:41:ce:e0:3a:a7:b8:0e:4e:
97:d0:e6:06:a5:ab:f2:8e:f2:52:70:65:3f:f6:12:
23:db:a1:be:c1:e8:dc:17:1f:77:bc:ea:b3:a0:01:
7d:5f:34:ab:7a:2a:8d:bd:66:58:ad:6f:77:ec:eb:
6d:37:60:60:30:2c:d1:96:02:bc:35:38:ad:bf:af:
45:0c:48:24:9f:96:5f:57:2a:f5:ac:f3:f9:b7:0c:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E8:1A:50:A4:01:C5:BF:E5:F6:EB:86:B1:4D:59:79:DF:36:2D:F9
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/vugaUKQBxb_l9uuGsU1Zed82Lfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.1.0/24
45.136.5.0/24
45.147.44.0/24
194.116.228.0/24
IPv6:
2a0f:b700::/29
Signature Algorithm: sha256WithRSAEncryption
76:7c:02:a3:61:8b:3a:36:0e:a9:6b:ee:f9:b4:72:7b:d2:ab:
5f:be:d7:ba:50:54:58:3d:9f:73:8b:0a:d6:b9:80:69:10:a4:
78:bf:d8:dc:87:62:4d:a2:b4:61:80:63:c0:5d:fb:05:9b:c1:
d6:cd:d1:85:1e:a8:9c:19:03:7a:8e:1b:0b:1a:6f:7a:d0:6f:
90:e2:40:fc:23:e9:35:df:5c:b7:f9:4c:0e:1f:e9:2c:80:20:
89:5d:83:9e:07:ea:34:07:9a:88:ed:9b:23:74:9f:a5:77:47:
ee:b4:94:8a:c6:de:91:b3:fa:e7:86:38:f0:85:8c:e2:5d:31:
b9:f6:a6:00:2c:28:1f:c1:4b:b8:25:e3:4c:5d:5c:a0:13:16:
50:4b:58:c5:03:42:03:0a:6c:3e:4e:2b:0b:dd:f1:d0:ff:52:
13:8a:a2:4c:3b:d4:db:f8:db:d1:ba:29:43:6b:4c:53:0e:d8:
32:f9:00:e3:bc:f6:54:b5:ce:e3:36:00:c2:a9:bd:46:e0:6f:
db:2a:30:1e:09:83:8a:f2:9b:03:a2:41:89:49:d4:55:29:cf:
99:26:1c:31:f4:dc:ae:e3:e6:15:8e:d0:58:0b:09:ce:19:bd:
5a:91:25:c3:bc:39:b1:4f:36:94:d6:b1:20:d7:34:34:f5:0e:
62:ca:7d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:52 2025 by rpki-client