Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/jHQWNU9OQrAE9I-I54MmgxOjh58.roa
File: jHQWNU9OQrAE9I-I54MmgxOjh58.roa (raw, json)
Hash identifier: s0yztP4U3jLZ0oBvcoBdUGpARVwT0yvVlehkvJ26UiM=
Subject key identifier: 8C:74:16:35:4F:4E:42:B0:04:F4:8F:88:E7:83:26:83:13:A3:87:9F
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 018CC56EB49914240158C46930F208C01727
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/jHQWNU9OQrAE9I-I54MmgxOjh58.roa
Signing time: Mon 01 Jan 2024 14:30:15 +0000
ROA not before: Mon 01 Jan 2024 14:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60822
IP address blocks: 46.23.205.0/24 maxlen: 24
46.23.204.0/24 maxlen: 24
46.23.206.0/24 maxlen: 24
46.23.200.0/22 maxlen: 22
195.137.129.0/24 maxlen: 24
46.23.207.0/24 maxlen: 24
195.137.128.0/24 maxlen: 24
195.137.144.0/22 maxlen: 22
195.137.140.0/22 maxlen: 22
195.137.150.0/24 maxlen: 24
195.137.152.0/24 maxlen: 24
195.137.151.0/24 maxlen: 24
195.137.149.0/24 maxlen: 24
195.137.148.0/24 maxlen: 24
195.137.154.0/24 maxlen: 24
195.137.153.0/24 maxlen: 24
195.137.155.0/24 maxlen: 24
46.23.192.0/21 maxlen: 21
185.85.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b4:99:14:24:01:58:c4:69:30:f2:08:c0:17:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Jan 1 14:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c7416354f4e42b004f48f88e783268313a3879f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:63:5f:62:fa:ac:df:2a:a4:28:c9:04:2f:
03:ea:ff:77:39:77:ae:f4:4f:54:e5:61:f1:af:e6:
1d:1d:b4:10:61:ef:07:fe:58:60:2d:9b:8e:18:c7:
5f:cb:a6:06:21:b4:78:90:af:7a:79:58:c9:bf:bc:
27:27:b8:a8:59:e3:be:2a:d0:0e:47:e0:3b:c0:da:
f1:50:a9:ca:b4:82:02:ac:b4:74:3c:2a:0c:5e:9b:
8b:ed:8d:65:d8:37:e6:ea:4b:9e:53:c7:f8:fb:d5:
af:49:32:e3:3f:a4:26:97:84:02:07:48:92:9e:d7:
f0:8a:d0:ca:7a:68:12:d6:8d:2d:ae:9f:bf:a4:e1:
4d:01:38:9c:6e:8a:fa:6c:e0:66:8f:d8:8f:60:2f:
6a:61:17:40:90:83:c0:89:14:ff:1d:a5:f6:4e:36:
07:a8:58:77:ee:2d:6d:d8:ab:b7:da:bc:a3:e8:b9:
9b:08:cd:e4:0d:bf:35:6c:78:a7:38:50:5f:97:e4:
2d:11:a0:23:1a:7c:cf:ed:43:cf:12:5c:ba:66:82:
7d:fd:13:b3:9e:5f:3f:cf:dc:7c:21:a5:ee:a1:0e:
aa:5a:f0:f4:17:2b:bb:f0:18:1c:ab:a3:de:af:df:
73:93:7e:aa:c8:52:10:62:94:46:c6:36:bc:87:a7:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:74:16:35:4F:4E:42:B0:04:F4:8F:88:E7:83:26:83:13:A3:87:9F
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/jHQWNU9OQrAE9I-I54MmgxOjh58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.192.0/20
185.85.212.0/22
195.137.128.0/23
195.137.140.0-195.137.155.255
Signature Algorithm: sha256WithRSAEncryption
5b:74:10:ff:2c:f6:05:c3:18:d9:71:67:7c:1a:e5:ec:7b:bd:
21:35:59:e8:43:53:bf:b5:2a:ff:3f:63:c3:3e:16:1a:64:ff:
36:1c:31:6f:ab:e5:49:c9:4e:dc:d2:04:9b:c7:09:ee:92:e3:
d3:1b:b5:68:04:f0:16:65:f2:10:ff:3f:43:20:e9:31:9b:0a:
ea:8a:9e:8f:f7:83:c0:50:9b:6e:38:5b:83:86:99:03:fc:72:
75:a3:e6:67:ee:25:2c:c6:33:d4:e3:cb:36:35:9a:23:8a:13:
1b:59:04:7e:4f:c6:56:c0:c5:63:d8:0e:62:eb:f9:da:91:ed:
59:a2:bd:d1:e1:44:7e:7b:25:12:9c:6c:fb:29:a5:9e:1b:b4:
c2:30:88:b3:0d:bd:f8:47:6d:56:42:55:9c:ac:ed:49:6f:b0:
ab:78:11:1c:3e:58:9a:0f:25:b4:9b:05:b2:4f:8f:98:44:77:
9c:ba:57:af:a9:cf:ef:c6:c2:8e:41:62:e6:e8:3b:5d:e8:dc:
ab:81:10:1f:ac:8c:7c:08:1a:d7:42:68:94:15:0a:2c:5f:9e:
92:4d:b4:e2:b6:9c:99:df:d7:0f:61:b8:ac:82:4f:58:42:81:
a4:60:31:39:96:20:48:45:e1:65:f9:0d:15:d1:a5:b3:c5:de:
dd:33:0d:88
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzFbrSZFCQBWMRpMPIIwBcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODgzNGM1MmFiZTMwNDI3ZjBhMjJhYTQ2ZmQzZDA4MDll
ZDQ1ODUwHhcNMjQwMTAxMTQzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzc0MTYzNTRmNGU0MmIwMDRmNDhmODhlNzgzMjY4MzEzYTM4NzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhljX2L6rN8qpCjJBC8D6v93OXeu
9E9U5WHxr+YdHbQQYe8H/lhgLZuOGMdfy6YGIbR4kK96eVjJv7wnJ7ioWeO+KtAO
R+A7wNrxUKnKtIICrLR0PCoMXpuL7Y1l2Dfm6kueU8f4+9WvSTLjP6Qml4QCB0iS
ntfwitDKemgS1o0trp+/pOFNATicbor6bOBmj9iPYC9qYRdAkIPAiRT/HaX2TjYH
qFh37i1t2Ku32ryj6LmbCM3kDb81bHinOFBfl+QtEaAjGnzP7UPPEly6ZoJ9/ROz
nl8/z9x8IaXuoQ6qWvD0Fyu78Bgcq6Per99zk36qyFIQYpRGxja8h6eApQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFIx0FjVPTkKwBPSPiOeDJoMTo4efMB8GA1UdIwQY
MBaAFEWINMUqvjBCfwoiqkb9PQgJ7UWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGIt
YTMxMTQzNDYzYmU5LzEvakhRV05VOU9RckFFOUktSTU0TW1neE9qaDU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGItYTMxMTQzNDYzYmU5
LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQELhfAAwQC
uVXUAwQBw4mAMAwDBALDiYwDBALDiZgwDQYJKoZIhvcNAQELBQADggEBAFt0EP8s
9gXDGNlxZ3wa5ex7vSE1WehDU7+1Kv8/Y8M+Fhpk/zYcMW+r5UnJTtzSBJvHCe6S
49MbtWgE8BZl8hD/P0Mg6TGbCuqKno/3g8BQm244W4OGmQP8cnWj5mfuJSzGM9Tj
yzY1miOKExtZBH5PxlbAxWPYDmLr+dqR7VmivdHhRH57JRKcbPsppZ4btMIwiLMN
vfhHbVZCVZys7UlvsKt4ERw+WJoPJbSbBbJPj5hEd5y6V6+pz+/Gwo5BYuboO13o
3KuBEB+sjHwIGtdCaJQVCixfnpJNtOK2nJnf1w9huKyCT1hCgaRgMTmWIEhF4WX5
DRXRpbPF3t0zDYg=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:38 2025 by rpki-client