Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/7e3figfmnNktlNLiHicoXkMFnRo.roa
File: 7e3figfmnNktlNLiHicoXkMFnRo.roa (raw, json)
Hash identifier: Ry5HiVUdq1LWBKt5XM/U0+R/op+LH2gyl/BCKrHjEAw=
Subject key identifier: ED:ED:DF:8A:07:E6:9C:D9:2D:94:D2:E2:1E:27:28:5E:43:05:9D:1A
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 018B95FE0A9311C5732644F70674D6B68E9F
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/7e3figfmnNktlNLiHicoXkMFnRo.roa
Signing time: Fri 03 Nov 2023 16:22:15 +0000
ROA not before: Fri 03 Nov 2023 16:22:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60822
IP address blocks: 46.23.205.0/24 maxlen: 24
46.23.204.0/24 maxlen: 24
46.23.206.0/24 maxlen: 24
46.23.200.0/22 maxlen: 22
195.137.129.0/24 maxlen: 24
46.23.207.0/24 maxlen: 24
195.137.128.0/24 maxlen: 24
195.137.144.0/22 maxlen: 22
195.137.140.0/22 maxlen: 22
195.137.150.0/24 maxlen: 24
195.137.152.0/24 maxlen: 24
195.137.151.0/24 maxlen: 24
195.137.149.0/24 maxlen: 24
195.137.148.0/24 maxlen: 24
195.137.154.0/24 maxlen: 24
195.137.153.0/24 maxlen: 24
195.137.155.0/24 maxlen: 24
46.23.192.0/21 maxlen: 21
185.85.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:fe:0a:93:11:c5:73:26:44:f7:06:74:d6:b6:8e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Nov 3 16:22:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ededdf8a07e69cd92d94d2e21e27285e43059d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:69:41:5e:60:50:3e:66:0f:2c:25:bf:dd:
35:2c:37:fa:b0:64:5d:9b:01:9a:6a:80:0a:06:4e:
af:5d:1b:e4:fd:41:2d:21:94:4f:23:19:86:94:34:
25:1e:d0:54:f5:03:41:f1:0d:f6:d7:e8:29:ec:43:
46:86:b4:b6:dd:fd:ac:34:29:f3:9e:05:f3:d8:0a:
e1:23:48:f2:60:7e:4e:22:e5:e3:2a:6f:cc:21:4c:
d1:b2:9a:ed:b0:7e:e0:9a:ee:7c:4d:c0:c0:f6:ca:
49:f6:f9:74:d0:ab:43:2a:17:8e:b3:2c:24:d9:a3:
44:cb:37:78:81:41:a7:d1:c3:20:be:56:22:93:b6:
a7:9d:85:ca:11:27:b4:bb:14:5e:a5:1a:04:49:2e:
b4:03:36:e8:f9:36:b2:d6:99:3e:5d:24:2c:69:7e:
a3:be:0d:c4:16:fb:57:82:ff:f7:9c:25:88:f6:81:
6f:13:a5:b6:ec:90:e1:bd:c5:5e:69:c2:2d:be:ef:
64:69:8f:2f:66:90:4a:8c:e6:2e:31:41:97:4b:07:
e1:b7:22:41:c3:01:01:d6:dd:6a:fc:38:db:3f:c8:
21:a8:46:85:86:40:41:6a:e8:64:ad:42:ee:89:cd:
d4:80:ae:8d:f8:75:92:1b:75:e7:7c:be:4e:5f:e2:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:ED:DF:8A:07:E6:9C:D9:2D:94:D2:E2:1E:27:28:5E:43:05:9D:1A
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/7e3figfmnNktlNLiHicoXkMFnRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.192.0/20
185.85.212.0/22
195.137.128.0/23
195.137.140.0-195.137.155.255
Signature Algorithm: sha256WithRSAEncryption
55:c6:b2:a6:0c:e5:1b:98:0e:37:4e:31:0f:da:52:15:3c:02:
60:0b:08:2d:91:f5:01:b3:1c:93:0a:a8:da:3d:9a:86:36:24:
0f:b7:fa:9a:e2:f9:f1:ad:7f:b6:83:50:f1:cf:0f:76:82:e6:
9a:c8:b1:df:b4:ee:2b:e1:f4:e8:65:bb:74:f8:08:34:26:6c:
7f:5e:ab:75:fa:8b:78:ac:84:65:69:d0:46:c6:11:1f:7c:cb:
2d:15:d0:c8:35:52:99:81:92:cb:85:01:c0:a9:0a:91:7e:77:
92:74:c4:b0:d8:55:79:f6:11:b1:81:94:3a:15:71:e6:25:fa:
6a:22:77:dc:29:7f:4f:18:aa:5d:0b:fe:85:35:4c:08:85:73:
de:d2:88:53:a6:43:06:ca:7c:f4:62:a1:05:d4:0b:db:7a:92:
c1:af:7c:c4:fa:42:5c:39:7c:4c:d3:dd:df:9a:37:dd:f5:a0:
44:87:07:dd:22:7f:73:7f:8b:b5:69:0a:1d:b1:d9:88:4d:6f:
d8:a5:fd:5a:3c:f4:10:d4:3e:4d:27:87:2e:52:6f:dc:9d:c6:
25:1d:86:6d:20:35:c0:55:0a:1c:66:40:80:98:a5:72:e5:67:
c8:f0:5a:88:ba:94:d6:7a:03:4e:e2:ff:02:ca:fa:51:c8:83:
c5:90:98:27
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYuV/gqTEcVzJkT3BnTWto6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODgzNGM1MmFiZTMwNDI3ZjBhMjJhYTQ2ZmQzZDA4MDll
ZDQ1ODUwHhcNMjMxMTAzMTYyMjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGVkZGY4YTA3ZTY5Y2Q5MmQ5NGQyZTIxZTI3Mjg1ZTQzMDU5ZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL9pQV5gUD5mDywlv901LDf6sGRd
mwGaaoAKBk6vXRvk/UEtIZRPIxmGlDQlHtBU9QNB8Q321+gp7ENGhrS23f2sNCnz
ngXz2ArhI0jyYH5OIuXjKm/MIUzRsprtsH7gmu58TcDA9spJ9vl00KtDKheOsywk
2aNEyzd4gUGn0cMgvlYik7annYXKESe0uxRepRoESS60Azbo+Tay1pk+XSQsaX6j
vg3EFvtXgv/3nCWI9oFvE6W27JDhvcVeacItvu9kaY8vZpBKjOYuMUGXSwfhtyJB
wwEB1t1q/DjbP8ghqEaFhkBBauhkrULuic3UgK6N+HWSG3XnfL5OX+I1DwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFO3t34oH5pzZLZTS4h4nKF5DBZ0aMB8GA1UdIwQY
MBaAFEWINMUqvjBCfwoiqkb9PQgJ7UWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGIt
YTMxMTQzNDYzYmU5LzEvN2UzZmlnZm1uTmt0bE5MaUhpY29Ya01GblJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGItYTMxMTQzNDYzYmU5
LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQELhfAAwQC
uVXUAwQBw4mAMAwDBALDiYwDBALDiZgwDQYJKoZIhvcNAQELBQADggEBAFXGsqYM
5RuYDjdOMQ/aUhU8AmALCC2R9QGzHJMKqNo9moY2JA+3+pri+fGtf7aDUPHPD3aC
5prIsd+07ivh9Ohlu3T4CDQmbH9eq3X6i3ishGVp0EbGER98yy0V0Mg1UpmBksuF
AcCpCpF+d5J0xLDYVXn2EbGBlDoVceYl+moid9wpf08Yql0L/oU1TAiFc97SiFOm
QwbKfPRioQXUC9t6ksGvfMT6Qlw5fEzT3d+aN931oESHB90if3N/i7VpCh2x2YhN
b9il/Vo89BDUPk0nhy5Sb9ydxiUdhm0gNcBVChxmQICYpXLlZ8jwWoi6lNZ6A07i
/wLK+lHIg8WQmCc=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:22 2025 by rpki-client