Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HPOX23omR9R5C3JcoO3JpEJ2dpg.roa
File: HPOX23omR9R5C3JcoO3JpEJ2dpg.roa (raw, json)
Hash identifier: zpa/gpvwXqEOVEmNmCTx2pjuE0zV26vumLS/LpH1O/E=
Subject key identifier: 1C:F3:97:DB:7A:26:47:D4:79:0B:72:5C:A0:ED:C9:A4:42:76:76:98
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E708092241B50D6C909CF60F48744
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HPOX23omR9R5C3JcoO3JpEJ2dpg.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 80.243.128.0/20 maxlen: 24
46.3.48.0/20 maxlen: 20
46.3.84.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.16.0/23 maxlen: 23
46.232.18.0/23 maxlen: 23
46.3.0.0/16 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.3.152.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.158.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.232.112.0/23 maxlen: 23
46.232.116.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
46.232.118.0/23 maxlen: 23
46.232.124.0/23 maxlen: 23
46.232.126.0/23 maxlen: 23
46.3.136.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
46.3.144.0/22 maxlen: 22
46.3.205.0/24 maxlen: 24
149.126.192.0/18 maxlen: 24
46.3.212.0/22 maxlen: 22
46.3.208.0/22 maxlen: 22
149.126.213.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.239.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:70:80:92:24:1b:50:d6:c9:09:cf:60:f4:87:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cf397db7a2647d4790b725ca0edc9a442767698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:32:71:0a:b5:3a:9a:ab:68:72:70:30:2a:
12:67:03:5d:56:29:92:e2:c8:04:06:34:1c:2a:ad:
d0:3e:f8:72:91:6f:54:ba:fe:1d:f4:96:aa:e3:fc:
49:d4:a2:45:81:fc:c8:b1:82:ac:5d:0d:d9:6c:ba:
a3:67:8e:46:49:b6:7d:aa:a2:ad:e5:a8:7d:99:ba:
4f:bc:16:7a:04:7f:32:05:81:13:6b:53:2e:66:31:
ef:7e:0f:73:9a:b0:c0:81:b0:a8:91:2a:46:4b:22:
c0:d0:44:3e:d2:d4:60:9f:a7:58:51:78:67:d9:f2:
c9:e7:ca:7c:2f:b6:c2:9b:ad:dc:db:17:85:52:2c:
6a:78:19:e0:58:95:fa:60:e4:13:02:34:4f:07:f2:
96:4d:86:8a:1c:57:5e:eb:75:db:4f:73:fe:0b:43:
b3:07:4f:a6:a9:08:d6:28:56:f9:25:cd:7c:86:3e:
e6:86:9e:3c:3a:db:35:90:43:81:2f:2d:dc:36:86:
df:12:76:71:79:43:e8:dc:24:51:1d:2c:9e:cd:d3:
95:0e:20:11:14:06:06:36:3b:06:60:ec:2e:e8:a6:
fb:3e:cf:66:82:8b:5e:ab:6a:25:cd:24:60:e7:cf:
7a:d6:41:bd:05:c0:91:c4:be:da:39:cb:37:14:bb:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F3:97:DB:7A:26:47:D4:79:0B:72:5C:A0:ED:C9:A4:42:76:76:98
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HPOX23omR9R5C3JcoO3JpEJ2dpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
58:40:1b:7d:4e:8e:cb:79:40:fe:c7:90:bc:59:83:1a:07:79:
69:f7:38:de:d1:a5:08:eb:be:0a:17:9a:19:c8:73:c6:41:e0:
2f:ee:19:64:e7:c5:77:6d:98:80:cb:70:6f:fd:bf:cc:98:62:
b2:17:ca:1c:9e:cf:ca:d5:77:87:10:fb:58:55:85:35:5f:3d:
62:a3:c1:6f:4b:bc:21:1b:92:52:b8:c7:8c:d8:76:ad:46:3c:
0b:e8:da:e7:5f:96:86:62:74:08:0c:8a:96:a6:5f:a8:a1:a1:
4b:eb:2c:01:67:a6:1a:5c:e5:18:d6:2b:c3:6c:d8:52:b2:a3:
d8:94:18:ff:56:eb:90:76:6b:1a:9a:8c:14:55:5e:f8:7f:ce:
bf:cf:5f:17:ac:4c:1a:92:dc:ca:f2:14:db:59:d2:0f:34:1a:
73:65:47:53:2f:75:39:f2:6c:24:0e:ed:ed:93:1c:7c:eb:6f:
b0:4f:38:ad:61:55:63:91:9b:68:bb:03:a0:00:64:f2:3c:fe:
3f:76:f9:ea:a6:82:e9:ed:5d:1b:e1:61:d4:2d:e8:ba:bb:56:
1f:3c:c1:4a:9a:35:ec:4d:c0:0e:d5:c6:68:93:00:e6:28:aa:
7a:3b:25:b6:69:15:9f:63:3a:f4:a7:3b:9b:cf:4e:cc:ff:f3:
64:df:ef:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzJTnCAkiQbUNbJCc9g9IdEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQwMTAyMDgzMzMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2YzOTdkYjdhMjY0N2Q0NzkwYjcyNWNhMGVkYzlhNDQyNzY3Njk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu0ycQq1OpqraHJwMCoSZwNdVimS
4sgEBjQcKq3QPvhykW9Uuv4d9Jaq4/xJ1KJFgfzIsYKsXQ3ZbLqjZ45GSbZ9qqKt
5ah9mbpPvBZ6BH8yBYETa1MuZjHvfg9zmrDAgbCokSpGSyLA0EQ+0tRgn6dYUXhn
2fLJ58p8L7bCm63c2xeFUixqeBngWJX6YOQTAjRPB/KWTYaKHFde63XbT3P+C0Oz
B0+mqQjWKFb5Jc18hj7mhp48Ots1kEOBLy3cNobfEnZxeUPo3CRRHSyezdOVDiAR
FAYGNjsGYOwu6Kb7Ps9mgoteq2olzSRg58961kG9BcCRxL7aOcs3FLuEpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBzzl9t6JkfUeQtyXKDtyaRCdnaYMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvSFBPWDIzb21SOVI1QzNKY29PM0pwRUoyZHBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMALgMDBAcu
6AADBARQ84ADBAaVfsAwDQYJKoZIhvcNAQELBQADggEBAFhAG31Ojst5QP7HkLxZ
gxoHeWn3ON7RpQjrvgoXmhnIc8ZB4C/uGWTnxXdtmIDLcG/9v8yYYrIXyhyez8rV
d4cQ+1hVhTVfPWKjwW9LvCEbklK4x4zYdq1GPAvo2udfloZidAgMipamX6ihoUvr
LAFnphpc5RjWK8Ns2FKyo9iUGP9W65B2axqajBRVXvh/zr/PXxesTBqS3MryFNtZ
0g80GnNlR1MvdTnybCQO7e2THHzrb7BPOK1hVWORm2i7A6AAZPI8/j92+eqmgunt
XRvhYdQt6Lq7Vh88wUqaNexNwA7VxmiTAOYoqno7JbZpFZ9jOvSnO5vPTsz/82Tf
70M=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:18 2025 by rpki-client