Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yIFHtJfSo7vEM1ehYhBpKmstpjE.roa
File: yIFHtJfSo7vEM1ehYhBpKmstpjE.roa (raw, json)
Hash identifier: /betrY91l6e569xkyZn8F3eT9i/oQCcfT2HQlXm6HKc=
Subject key identifier: C8:81:47:B4:97:D2:A3:BB:C4:33:57:A1:62:10:69:2A:6B:2D:A6:31
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018321A8A52D72451946E8C5B81211251495
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yIFHtJfSo7vEM1ehYhBpKmstpjE.roa
Signing time: Fri 09 Sep 2022 09:50:43 +0000
ROA not before: Fri 09 Sep 2022 09:50:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.106.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.147.45.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:a8:a5:2d:72:45:19:46:e8:c5:b8:12:11:25:14:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 9 09:50:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c88147b497d2a3bbc43357a16210692a6b2da631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:f5:51:58:16:92:99:ea:85:60:fe:41:de:
3a:a8:a4:99:8d:6d:23:37:91:48:ee:76:ca:c0:27:
41:2a:66:09:d5:64:7b:e0:dc:c5:24:c1:b8:30:a0:
26:b0:54:7c:91:6a:23:c1:b0:e3:f9:a4:16:bd:e4:
05:f5:a0:01:2f:f9:c7:ff:d5:90:b2:93:8e:d5:51:
d0:aa:9a:2b:37:73:9b:13:c1:20:ce:6b:dc:b8:e8:
db:ef:4a:76:63:14:0f:aa:b7:6b:26:ab:1b:a6:2c:
3d:61:8c:94:4d:23:9e:32:03:64:72:0e:51:f2:2a:
6a:d4:e3:dd:8d:dc:d6:8a:56:54:b1:1d:43:3b:0c:
07:a8:ca:68:cf:e8:78:7e:78:32:bf:53:c1:49:2d:
4a:09:8e:25:d9:dc:b7:61:f0:5c:72:8a:6d:29:fe:
ac:83:51:06:e1:66:57:0f:3e:63:62:25:b0:af:c6:
0a:5d:9b:60:8f:8c:19:30:c1:7f:04:f5:9f:6f:9a:
e9:5c:84:9f:9c:bd:1e:b0:40:21:4e:9e:de:97:d3:
65:f4:7b:6a:a3:a8:d5:88:ae:63:63:dc:52:c6:7e:
4a:49:ba:90:4c:1b:99:10:92:56:e2:b7:3e:97:1c:
6f:5e:6f:64:ef:30:8d:73:09:c0:5a:cf:c1:d1:0f:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:81:47:B4:97:D2:A3:BB:C4:33:57:A1:62:10:69:2A:6B:2D:A6:31
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yIFHtJfSo7vEM1ehYhBpKmstpjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.131.2.0/24
45.136.6.0/24
45.141.150.0/24
45.147.45.0-45.147.46.255
77.83.200.0/22
194.116.229.0/24
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
07:cd:c5:08:8f:1f:97:37:10:fa:75:ea:0d:04:fe:fb:c6:59:
7e:cb:a8:c9:6a:19:36:95:3b:28:46:c1:59:a6:36:18:dd:86:
16:fe:80:89:8e:ca:a5:8d:65:15:42:96:b0:b7:88:34:e8:04:
36:ae:e1:3e:14:9d:81:20:f0:d0:c0:fd:e1:41:e1:57:5b:99:
68:16:1a:86:59:19:63:bc:b2:ae:a1:ac:ad:fc:aa:43:53:67:
0b:13:d6:fc:7f:8a:6f:bd:f7:57:06:00:78:eb:32:e9:48:af:
65:98:40:e8:1d:2a:bc:26:6e:d0:76:f5:9e:86:66:f2:a5:14:
42:2d:bb:c8:06:93:0f:a0:71:c1:be:5b:ca:7d:6b:cb:24:27:
0a:0e:c8:9f:f9:5a:9d:56:bd:32:5a:92:eb:46:ba:af:30:8a:
96:b9:9d:4f:9d:b8:7a:d5:8e:c5:46:2c:8a:39:6d:25:f4:a6:
91:94:f6:98:a0:f6:0c:72:dc:a2:da:b4:d9:c6:bd:59:e2:c7:
80:3a:47:e6:d2:db:0d:96:04:81:53:9f:26:b4:4f:70:5a:2e:
5e:37:71:5a:91:e8:15:9d:c7:1c:50:f8:a7:64:08:20:31:8e:
71:2e:04:62:1c:87:a6:96:dc:c5:1d:4c:09:e1:1e:d4:f1:59:
d9:63:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:20 2025 by rpki-client