Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/HBTEcCGVNr2cwt8I8-hj197lIS8.roa
File: HBTEcCGVNr2cwt8I8-hj197lIS8.roa (raw, json)
Hash identifier: Xqh6457AcLc0ON0hqHVMUKkiGhjWbtrB+71ptAUaapc=
Subject key identifier: 1C:14:C4:70:21:95:36:BD:9C:C2:DF:08:F3:E8:63:D7:DE:E5:21:2F
Certificate issuer: /CN=09dd92ad771501de28bc9cf37b9670b12f1e2208
Certificate serial: 01856B00CBE54496BA3D220AC3E35764BE11
Authority key identifier: 09:DD:92:AD:77:15:01:DE:28:BC:9C:F3:7B:96:70:B1:2F:1E:22:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/HBTEcCGVNr2cwt8I8-hj197lIS8.roa
Signing time: Sun 01 Jan 2023 01:44:52 +0000
ROA not before: Sun 01 Jan 2023 01:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213195
IP address blocks: 46.230.168.0/22 maxlen: 22
5.254.168.0/22 maxlen: 22
46.230.172.0/22 maxlen: 22
5.254.192.0/19 maxlen: 19
178.72.4.0/22 maxlen: 22
92.241.208.0/22 maxlen: 22
92.241.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:cb:e5:44:96:ba:3d:22:0a:c3:e3:57:64:be:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dd92ad771501de28bc9cf37b9670b12f1e2208
Validity
Not Before: Jan 1 01:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c14c470219536bd9cc2df08f3e863d7dee5212f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:89:af:3d:fc:e5:04:03:78:40:4b:a9:bc:
ba:79:71:99:63:d7:91:0e:a8:6f:d7:da:a6:e2:c7:
2f:4e:a2:00:7f:9d:a0:f0:f6:73:07:54:a8:f6:46:
18:d9:21:3f:8b:73:7c:c8:e3:c9:c0:6a:e7:47:48:
41:0d:ce:92:73:46:97:7e:b3:49:d5:63:9e:fc:bf:
92:3d:54:75:bb:f8:bf:64:26:9f:35:16:47:65:4b:
a5:56:a9:9f:30:84:b7:32:68:3c:a6:74:3d:49:29:
ef:af:6d:2f:58:db:d0:e8:29:bd:f2:ed:c3:7b:82:
da:02:34:b1:b1:09:4c:48:a1:0b:e6:4d:f8:18:71:
85:71:81:b5:8e:c6:c9:35:82:f1:b9:c0:c5:75:16:
64:69:33:01:77:ef:7e:d9:12:3b:14:77:57:eb:4b:
b2:dc:c9:a5:5e:25:2c:98:1d:e6:7d:a1:ee:80:ce:
64:69:ae:17:cf:c5:34:a5:70:6c:0c:55:d5:a5:93:
9b:68:61:21:19:0e:6c:d3:86:e0:1f:89:69:d9:04:
14:a6:a6:7b:10:1a:57:d1:61:6f:2b:88:55:38:db:
1a:68:9a:07:a1:a5:b0:73:07:d2:df:0b:11:ee:e9:
7a:44:be:a9:d1:f0:9e:76:43:cd:00:60:38:a8:ec:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:14:C4:70:21:95:36:BD:9C:C2:DF:08:F3:E8:63:D7:DE:E5:21:2F
X509v3 Authority Key Identifier:
keyid:09:DD:92:AD:77:15:01:DE:28:BC:9C:F3:7B:96:70:B1:2F:1E:22:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/HBTEcCGVNr2cwt8I8-hj197lIS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fe17fb-d175-42bd-8daa-a49ccf07bbf1/1/Cd2SrXcVAd4ovJzze5ZwsS8eIgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.168.0/22
5.254.192.0/19
46.230.168.0/21
92.241.208.0/21
178.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:99:96:be:bf:64:3d:df:15:a6:e2:81:ef:b5:8e:d2:aa:c5:
68:e5:94:25:c9:e3:20:36:2d:5f:2c:52:b0:15:f8:3a:47:7e:
d2:7b:33:1b:d3:81:b2:46:ef:42:ab:34:98:17:ad:63:1e:69:
91:61:26:99:77:7d:de:86:86:59:07:c8:d0:d0:62:4b:b4:62:
37:82:44:a7:ae:6f:d2:79:69:a8:81:e5:09:5c:e4:6f:30:d7:
85:f9:b0:23:45:92:2e:5b:77:e3:b1:b7:eb:92:89:b9:4f:57:
cd:0a:91:7b:35:71:24:dc:5d:9b:20:73:33:63:b4:d8:0b:01:
6d:89:63:0d:eb:fc:7f:b1:e7:06:dd:4f:49:cc:78:22:19:89:
68:b4:57:3d:9e:4f:14:0a:ca:a1:7e:a3:d3:f6:ab:06:4f:c7:
e6:68:c1:8d:51:fd:16:33:6e:82:44:18:91:72:90:a4:b9:3c:
f6:d3:4b:e1:3e:d8:45:5a:61:6c:39:95:32:c8:3c:8c:e3:85:
f7:62:65:cc:9e:83:09:03:5a:1c:e8:99:17:3d:50:2a:e1:56:
ad:35:13:eb:74:20:3f:e7:bc:b9:af:df:cc:f8:d7:a0:97:63:
5f:c3:aa:ef:59:94:ca:fd:a8:a0:5b:a5:f0:e9:3a:50:45:71:
d4:3d:69:99
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVrAMvlRJa6PSIKw+NXZL4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZGQ5MmFkNzcxNTAxZGUyOGJjOWNmMzdiOTY3MGIxMmYx
ZTIyMDgwHhcNMjMwMTAxMDE0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzE0YzQ3MDIxOTUzNmJkOWNjMmRmMDhmM2U4NjNkN2RlZTUyMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gmJrz385QQDeEBLqby6eXGZY9eR
Dqhv19qm4scvTqIAf52g8PZzB1So9kYY2SE/i3N8yOPJwGrnR0hBDc6Sc0aXfrNJ
1WOe/L+SPVR1u/i/ZCafNRZHZUulVqmfMIS3Mmg8pnQ9SSnvr20vWNvQ6Cm98u3D
e4LaAjSxsQlMSKEL5k34GHGFcYG1jsbJNYLxucDFdRZkaTMBd+9+2RI7FHdX60uy
3MmlXiUsmB3mfaHugM5kaa4Xz8U0pXBsDFXVpZObaGEhGQ5s04bgH4lp2QQUpqZ7
EBpX0WFvK4hVONsaaJoHoaWwcwfS3wsR7ul6RL6p0fCedkPNAGA4qOylEwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBwUxHAhlTa9nMLfCPPoY9fe5SEvMB8GA1UdIwQY
MBaAFAndkq13FQHeKLyc83uWcLEvHiIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2QyU3JYY1ZBZDRvdkp6emU1WndzUzhlSWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mZTE3ZmItZDE3NS00MmJkLThkYWEt
YTQ5Y2NmMDdiYmYxLzEvSEJURWNDR1ZOcjJjd3Q4STgtaGoxOTdsSVM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mZTE3ZmItZDE3NS00MmJkLThkYWEtYTQ5Y2NmMDdiYmYx
LzEvQ2QyU3JYY1ZBZDRvdkp6emU1WndzUzhlSWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBf6oAwQF
Bf7AAwQDLuaoAwQDXPHQAwQCskgEMA0GCSqGSIb3DQEBCwUAA4IBAQAqmZa+v2Q9
3xWm4oHvtY7SqsVo5ZQlyeMgNi1fLFKwFfg6R37SezMb04GyRu9CqzSYF61jHmmR
YSaZd33ehoZZB8jQ0GJLtGI3gkSnrm/SeWmogeUJXORvMNeF+bAjRZIuW3fjsbfr
kom5T1fNCpF7NXEk3F2bIHMzY7TYCwFtiWMN6/x/secG3U9JzHgiGYlotFc9nk8U
CsqhfqPT9qsGT8fmaMGNUf0WM26CRBiRcpCkuTz200vhPthFWmFsOZUyyDyM44X3
YmXMnoMJA1oc6JkXPVAq4VatNRPrdCA/57y5r9/M+Negl2Nfw6rvWZTK/aigW6Xw
6TpQRXHUPWmZ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:58 2023 by rpki-client on console-ams.rpki-client.org