Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Lcu6ir7Tj9YBKclNd5yCQDyZYdA.roa
File: Lcu6ir7Tj9YBKclNd5yCQDyZYdA.roa (raw, json)
Hash identifier: Auoo76FRPPWoH0S0B9YJ3Yza2c1mTAhQ5423VpfHxOE=
Subject key identifier: 2D:CB:BA:8A:BE:D3:8F:D6:01:29:C9:4D:77:9C:82:40:3C:99:61:D0
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0195FD69E3C3FCC68DFA390E0B29267D9552
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Lcu6ir7Tj9YBKclNd5yCQDyZYdA.roa
Signing time: Thu 03 Apr 2025 20:48:49 +0000
ROA not before: Thu 03 Apr 2025 20:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fd:69:e3:c3:fc:c6:8d:fa:39:0e:0b:29:26:7d:95:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 3 20:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dcbba8abed38fd60129c94d779c82403c9961d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:b3:e7:df:b6:9c:85:b8:2f:86:db:e9:a4:
ed:53:c1:ea:97:d1:b3:40:02:ee:72:22:f0:3e:8c:
dd:30:44:ee:ea:2b:ee:3e:67:c8:78:6a:ef:52:26:
91:45:89:77:b3:ee:a2:72:50:f6:e7:22:b2:27:02:
1c:c3:cf:ba:30:5c:cb:04:fd:fa:21:a2:33:37:9a:
27:19:87:12:4c:62:7f:de:a0:8c:ad:12:0a:b4:7e:
cf:cc:c1:0c:f8:32:1e:28:b8:98:95:b7:93:a3:2d:
d7:13:d2:a4:b9:cb:07:82:35:b3:93:01:1c:18:88:
17:62:4a:d7:73:0f:2e:95:6c:eb:eb:42:83:cf:0d:
08:72:2a:00:5b:f2:cd:c1:92:77:3b:f4:9b:9c:cb:
1e:66:2d:8d:e6:ca:20:fd:16:8f:af:21:5f:cd:b5:
4f:ef:7e:ee:b0:96:b0:29:78:d7:fe:3e:31:86:96:
59:32:c3:e2:5d:f4:5c:a3:00:8d:aa:6c:2b:7b:cf:
42:c2:b5:7d:71:76:82:00:58:01:32:10:e0:4c:a5:
f6:e8:67:93:f5:62:0a:7f:db:20:5d:2d:77:89:bf:
80:43:6e:bc:24:8b:35:80:99:b5:af:43:bc:aa:d8:
64:ac:63:df:d2:2e:69:9e:25:b2:66:b9:5f:e8:c5:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CB:BA:8A:BE:D3:8F:D6:01:29:C9:4D:77:9C:82:40:3C:99:61:D0
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Lcu6ir7Tj9YBKclNd5yCQDyZYdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/23
45.136.4.0/24
45.141.148.0/23
45.147.44.0/24
77.83.200.0/22
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
91:01:85:34:6c:02:10:29:0e:e7:65:29:37:50:b4:c5:32:9a:
7d:aa:3b:86:4e:04:63:ae:e7:fa:06:71:07:07:0d:92:f2:b2:
22:08:11:25:70:56:52:45:5a:54:d3:15:f0:8b:f0:29:ea:55:
a1:e5:58:01:70:07:b1:3d:b1:45:fc:19:0a:70:54:ba:9e:77:
0e:77:be:7f:d1:09:79:88:2b:40:be:49:79:7c:0e:4a:cd:04:
24:a4:57:1e:e5:04:14:05:2b:84:21:8b:d9:75:43:bb:fe:fc:
0c:26:2c:c7:7b:48:14:cb:ab:62:58:7d:41:ee:04:79:95:71:
c5:c3:fb:45:7a:3e:8f:ac:49:1e:a2:6c:65:21:b4:10:32:88:
59:4c:69:61:0d:98:d6:d7:d4:3d:a3:3f:6d:7d:ba:e4:d0:ee:
e9:ce:e1:71:56:9e:ad:f4:fb:da:53:b6:fb:e7:44:0a:68:b7:
d7:1f:88:cd:06:37:20:59:f6:9e:7d:a6:aa:a3:ea:76:2f:e2:
b4:bf:ee:8b:c4:38:5e:93:16:cc:a6:d8:56:72:c5:ea:97:cd:
36:8f:ad:7d:a4:be:9d:84:ce:c5:67:f0:b0:32:6e:53:65:2d:
9d:5f:11:27:6d:47:30:ad:d8:8b:97:c8:eb:b5:de:d3:73:90:
60:f7:18:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net