Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/4fhL2d5Hv0DW88a_EHgmfUXOflE.roa
File: 4fhL2d5Hv0DW88a_EHgmfUXOflE.roa (raw, json)
Hash identifier: Mih9Lc9j0AISFFQD3tR5T/Pc4Z9obZP+Ky2oSkhwzTg=
Subject key identifier: E1:F8:4B:D9:DE:47:BF:40:D6:F3:C6:BF:10:78:26:7D:45:CE:7E:51
Certificate issuer: /CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
Certificate serial: 01856EEFCD0C790905CF82EFEAABDABC95BE
Authority key identifier: B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/4fhL2d5Hv0DW88a_EHgmfUXOflE.roa
Signing time: Sun 01 Jan 2023 20:04:47 +0000
ROA not before: Sun 01 Jan 2023 20:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209288
IP address blocks: 185.112.73.0/24 maxlen: 24
151.248.17.0/24 maxlen: 24
151.248.16.0/24 maxlen: 24
151.248.16.0/22 maxlen: 22
151.248.19.0/24 maxlen: 24
151.248.18.0/24 maxlen: 24
2a05:ccc0::/29 maxlen: 29
2a10:c080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:cd:0c:79:09:05:cf:82:ef:ea:ab:da:bc:95:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
Validity
Not Before: Jan 1 20:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1f84bd9de47bf40d6f3c6bf1078267d45ce7e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:f7:72:79:f7:c0:12:5e:10:9b:59:fd:44:
fe:60:70:b8:f5:13:dc:d0:63:4f:5b:51:cf:b1:a3:
b5:91:b4:c7:ce:1b:84:95:6e:f5:b7:45:9f:0d:0f:
ad:97:6c:ec:6a:eb:d2:52:d4:23:9d:a3:ed:b2:75:
63:67:0a:51:c1:ed:db:97:a8:6f:f5:1a:34:81:91:
ba:1f:99:16:31:ed:eb:70:11:a6:fc:55:1f:b0:ce:
32:c7:20:92:dd:d9:61:a1:66:38:e7:29:ab:2e:e6:
1e:76:93:70:d7:63:79:35:0f:46:5c:4a:ee:b5:cb:
40:8f:e8:48:9b:86:35:92:31:31:c9:40:9a:79:01:
a3:9d:ba:88:be:44:59:f5:0d:42:7b:59:0b:2a:57:
60:b9:b0:47:42:a2:35:44:68:7b:e5:6d:a7:20:3b:
8a:10:fd:48:ac:3f:b1:54:2a:5a:d9:22:c5:76:5d:
63:eb:5c:9f:bd:ff:63:d6:ba:24:72:7a:38:40:f2:
2f:84:86:b7:95:82:6d:bb:0c:d5:0e:00:ff:85:ba:
34:a7:17:0d:32:4c:52:12:89:8a:2f:cb:b8:c9:1f:
90:09:f8:51:82:bb:02:46:0b:15:b2:68:13:c4:2e:
aa:69:c6:ac:88:a7:3f:6d:67:c2:0d:51:d5:44:10:
09:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F8:4B:D9:DE:47:BF:40:D6:F3:C6:BF:10:78:26:7D:45:CE:7E:51
X509v3 Authority Key Identifier:
keyid:B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/4fhL2d5Hv0DW88a_EHgmfUXOflE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/tGaMbNjEDd-Twwp2aeMPa1DBg8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.16.0/22
185.112.73.0/24
IPv6:
2a05:ccc0::/29
2a10:c080::/29
Signature Algorithm: sha256WithRSAEncryption
2a:b7:6d:c3:96:a4:70:c8:7e:8b:a6:2d:b6:3d:6a:41:3a:8d:
f4:b4:80:49:04:17:38:ee:41:48:2a:e6:bc:f3:e9:65:1d:57:
69:b0:26:a3:74:d1:9c:1f:a1:60:1e:c7:35:d0:68:22:c9:c9:
78:64:10:70:a7:69:d5:70:34:48:23:58:4c:ec:69:3a:3a:a9:
c1:50:65:c3:29:cd:46:3a:5d:eb:9c:25:42:6f:47:64:2b:91:
b8:fd:0e:fb:0a:b7:8b:76:9e:7a:61:98:b0:a2:5c:5e:4a:19:
02:6e:2a:27:25:04:db:0d:52:75:1e:91:72:75:30:05:7e:16:
1d:cc:60:74:38:ac:99:63:d2:a2:02:c3:b4:08:ca:a2:9c:27:
1e:6c:bf:7a:c5:79:61:ff:e3:49:13:fd:4f:06:ff:38:bf:a1:
2d:99:fe:d4:e2:5b:23:10:7c:87:8c:96:62:78:2f:ca:4e:91:
3a:4d:aa:d2:fc:2a:cf:2f:f7:e1:68:9c:61:e3:45:4c:f5:f6:
7c:27:3d:1b:8e:af:75:c2:a1:b4:36:6d:fe:b8:37:78:73:63:
3f:06:f6:ae:0d:89:8b:ad:5d:7c:e8:e0:bd:e5:bc:e2:a0:ca:
5d:5e:f5:9a:d6:8a:41:b9:3c:0f:e3:d1:4b:c7:42:7e:6d:ed:
c7:87:13:9b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYVu780MeQkFz4Lv6qvavJW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjY4YzZjZDhjNDBkZGY5M2MzMGE3NjY5ZTMwZjZiNTBj
MTgzYzMwHhcNMjMwMTAxMjAwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWY4NGJkOWRlNDdiZjQwZDZmM2M2YmYxMDc4MjY3ZDQ1Y2U3ZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpD3cnn3wBJeEJtZ/UT+YHC49RPc
0GNPW1HPsaO1kbTHzhuElW71t0WfDQ+tl2zsauvSUtQjnaPtsnVjZwpRwe3bl6hv
9Ro0gZG6H5kWMe3rcBGm/FUfsM4yxyCS3dlhoWY45ymrLuYedpNw12N5NQ9GXEru
tctAj+hIm4Y1kjExyUCaeQGjnbqIvkRZ9Q1Ce1kLKldgubBHQqI1RGh75W2nIDuK
EP1IrD+xVCpa2SLFdl1j61yfvf9j1rokcno4QPIvhIa3lYJtuwzVDgD/hbo0pxcN
MkxSEomKL8u4yR+QCfhRgrsCRgsVsmgTxC6qacasiKc/bWfCDVHVRBAJFQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOH4S9neR79A1vPGvxB4Jn1Fzn5RMB8GA1UdIwQY
MBaAFLRmjGzYxA3fk8MKdmnjD2tQwYPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdhTWJOakVEZC1Ud3dwMmFlTVBhMURCZzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85M2IwZjMtYzIxZi00NWY0LTgxZjgt
Yjk1YTlkMTczY2I3LzEvNGZoTDJkNUh2MERXODhhX0VIZ21mVVhPZmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85M2IwZjMtYzIxZi00NWY0LTgxZjgtYjk1YTlkMTczY2I3
LzEvdEdhTWJOakVEZC1Ud3dwMmFlTVBhMURCZzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCl/gQAwQA
uXBJMBQEAgACMA4DBQMqBczAAwUDKhDAgDANBgkqhkiG9w0BAQsFAAOCAQEAKrdt
w5akcMh+i6Yttj1qQTqN9LSASQQXOO5BSCrmvPPpZR1XabAmo3TRnB+hYB7HNdBo
IsnJeGQQcKdp1XA0SCNYTOxpOjqpwVBlwynNRjpd65wlQm9HZCuRuP0O+wq3i3ae
emGYsKJcXkoZAm4qJyUE2w1SdR6RcnUwBX4WHcxgdDismWPSogLDtAjKopwnHmy/
esV5Yf/jSRP9Twb/OL+hLZn+1OJbIxB8h4yWYngvyk6ROk2q0vwqzy/34WicYeNF
TPX2fCc9G46vdcKhtDZt/rg3eHNjPwb2rg2Ji61dfOjgveW84qDKXV71mtaKQbk8
D+PRS8dCfm3tx4cTmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:48 2024 by rpki-client on console-ams.rpki-client.org