Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4usoxSD21d1NzKfKdJd84v5UIAM.roa
File: 4usoxSD21d1NzKfKdJd84v5UIAM.roa (raw, json)
Hash identifier: 4xLITfmi+mBOtJdc7UXOiEzbGub86idg4UihcAfoYlM=
Subject key identifier: E2:EB:28:C5:20:F6:D5:DD:4D:CC:A7:CA:74:97:7C:E2:FE:54:20:03
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 08B69ABA
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4usoxSD21d1NzKfKdJd84v5UIAM.roa
Signing time: Fri 28 Jan 2022 16:23:05 +0000
ROA not before: Fri 28 Jan 2022 16:23:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57494
IP address blocks: 80.243.128.0/22 maxlen: 22
80.243.136.0/23 maxlen: 23
80.243.140.0/23 maxlen: 23
46.232.2.0/23 maxlen: 23
46.232.1.0/24 maxlen: 24
46.232.4.0/22 maxlen: 22
46.3.24.0/22 maxlen: 22
46.3.168.0/22 maxlen: 22
46.3.172.0/22 maxlen: 22
46.3.176.0/22 maxlen: 22
46.3.180.0/22 maxlen: 22
46.3.184.0/22 maxlen: 22
46.3.188.0/24 maxlen: 24
46.3.188.0/22 maxlen: 22
46.3.192.0/22 maxlen: 22
46.3.192.0/23 maxlen: 23
46.3.196.0/22 maxlen: 22
46.3.140.0/22 maxlen: 22
46.3.206.0/23 maxlen: 23
46.3.223.0/24 maxlen: 24
46.3.228.0/23 maxlen: 23
149.126.216.0/22 maxlen: 22
149.126.220.0/22 maxlen: 22
149.126.232.0/22 maxlen: 22
149.126.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146184890 (0x8b69aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 28 16:23:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2eb28c520f6d5dd4dcca7ca74977ce2fe542003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:b6:6a:9a:e2:b0:38:c2:4d:ae:a6:6d:d1:
78:4f:aa:dc:2f:7f:35:5d:88:f1:9e:bd:e2:b5:b9:
a6:ea:11:6f:1c:d3:cf:32:0d:08:8c:c8:a5:b4:79:
de:af:21:63:a5:11:d5:6b:c4:11:c3:4f:96:2a:b6:
a2:b7:00:99:dd:8b:c3:5d:b2:87:ee:70:83:4f:af:
8f:82:cb:80:9b:85:ba:76:0a:1e:64:a2:99:e3:86:
dd:2b:69:ab:4d:eb:a4:29:86:5e:bc:d7:36:74:2a:
51:d3:ae:b2:45:a3:42:c5:4f:75:45:f8:49:59:9f:
d0:24:2d:e6:0b:0b:62:9d:a7:04:e3:f5:63:7f:93:
31:54:15:94:90:b3:28:72:e1:d8:06:d2:35:2e:9e:
be:b4:80:2a:6c:68:10:33:50:46:41:7f:e0:8c:8f:
48:78:d6:82:a9:e1:ac:6d:53:ad:6a:b3:d5:61:d2:
f5:dc:a9:26:ed:a3:cb:60:c2:96:0f:4c:35:06:01:
b0:9e:b5:c7:4c:e5:1a:da:6e:a4:78:2b:b6:49:1c:
ff:b7:e8:4e:03:08:73:98:1d:02:c8:22:d5:83:32:
30:a0:63:19:a3:f5:22:9a:9d:a9:15:20:d7:79:a5:
27:66:b6:ed:95:fe:18:a0:57:2f:24:fe:42:e8:87:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EB:28:C5:20:F6:D5:DD:4D:CC:A7:CA:74:97:7C:E2:FE:54:20:03
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4usoxSD21d1NzKfKdJd84v5UIAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.24.0/22
46.3.140.0/22
46.3.168.0-46.3.199.255
46.3.206.0/23
46.3.223.0/24
46.3.228.0/23
46.232.1.0-46.232.7.255
80.243.128.0/22
80.243.136.0/23
80.243.140.0/23
149.126.216.0/21
149.126.232.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:40:93:71:6d:0d:0e:68:9c:bf:44:3a:31:b0:ef:5b:ec:36:
79:f9:c2:33:de:04:c4:09:bd:dd:ce:94:b5:63:69:d8:78:27:
9f:bb:e4:a0:f9:37:5b:3c:03:fb:75:28:79:79:60:e5:0f:91:
40:64:c5:13:c5:59:31:6e:77:d5:be:00:b7:36:3e:52:f2:a4:
a8:36:ca:07:bc:74:20:96:f4:93:6b:69:33:66:15:77:c8:95:
b3:3c:af:a1:14:97:28:00:71:5b:72:6a:10:2c:69:cd:8d:b6:
c1:76:ef:c6:a0:77:3f:b4:10:f4:2f:92:b9:cb:1f:37:01:77:
a8:8f:96:c1:5b:c6:c4:0a:9a:12:22:c3:17:64:f9:b7:47:72:
6f:16:92:54:50:b7:f8:a4:30:35:7c:9a:23:1c:09:ea:b2:4b:
c6:ba:01:07:25:7f:43:32:87:c4:60:21:bc:8a:e6:e2:02:de:
e7:eb:5c:cd:5e:7d:a8:75:e0:7d:55:ea:aa:59:fc:7f:e6:8d:
aa:a9:2f:b5:a5:47:5a:86:b9:d2:26:64:df:f1:03:e0:97:b0:
63:fe:56:75:5c:45:85:cd:f8:25:6f:c1:00:17:42:91:9b:d1:
d1:20:e6:91:05:42:0a:2d:59:1f:15:a8:bf:40:62:10:30:c8:
7f:c4:b8:3e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIECLaaujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTg4ZjE5N2Y5N2U4OTAwNzU1NTQ0ZTgxMGNkZGVmOWQ5MGZiYzQxMB4XDTIyMDEy
ODE2MjMwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTJlYjI4YzUyMGY2
ZDVkZDRkY2NhN2NhNzQ5NzdjZTJmZTU0MjAwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKhqtmqa4rA4wk2upm3ReE+q3C9/NV2I8Z694rW5puoRbxzT
zzINCIzIpbR53q8hY6UR1WvEEcNPliq2orcAmd2Lw12yh+5wg0+vj4LLgJuFunYK
HmSimeOG3Stpq03rpCmGXrzXNnQqUdOuskWjQsVPdUX4SVmf0CQt5gsLYp2nBOP1
Y3+TMVQVlJCzKHLh2AbSNS6evrSAKmxoEDNQRkF/4IyPSHjWgqnhrG1TrWqz1WHS
9dypJu2jy2DClg9MNQYBsJ61x0zlGtpupHgrtkkc/7foTgMIc5gdAsgi1YMyMKBj
GaP1IpqdqRUg13mlJ2a27ZX+GKBXLyT+QuiH9bsCAwEAAaOCAlswggJXMB0GA1Ud
DgQWBBTi6yjFIPbV3U3Mp8p0l3zi/lQgAzAfBgNVHSMEGDAWgBRViPGX+X6JAHVV
ROgQzd752Q+8QTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8x
LzR1c294U0QyMWQxTnpLZktkSmQ4NHY1VUlBTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEwZi8xL1ZZanhsX2wtaVFC
MVZVVG9FTTNlLWRrUHZFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBx
BggrBgEFBQcBBwEB/wRiMGAwXgQCAAEwWAMEAi4DGAMEAi4DjDAMAwQDLgOoAwQD
LgPAAwQBLgPOAwQALgPfAwQBLgPkMAwDBAAu6AEDBAMu6AADBAJQ84ADBAFQ84gD
BAFQ84wDBAOVftgDBAOVfugwDQYJKoZIhvcNAQELBQADggEBAG5Ak3FtDQ5onL9E
OjGw71vsNnn5wjPeBMQJvd3OlLVjadh4J5+75KD5N1s8A/t1KHl5YOUPkUBkxRPF
WTFud9W+ALc2PlLypKg2yge8dCCW9JNraTNmFXfIlbM8r6EUlygAcVtyahAsac2N
tsF278agdz+0EPQvkrnLHzcBd6iPlsFbxsQKmhIiwxdk+bdHcm8WklRQt/ikMDV8
miMcCeqyS8a6AQclf0Myh8RgIbyK5uIC3ufrXM1efah14H1V6qpZ/H/mjaqpL7Wl
R1qGudImZN/xA+CXsGP+VnVcRYXN+CVvwQAXQpGb0dEg5pEFQgotWR8VqL9AYhAw
yH/EuD4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:22 2025 by rpki-client