Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/Z4iQHM42LyMII07A2mwKP334F_c.roa
File: Z4iQHM42LyMII07A2mwKP334F_c.roa (raw, json)
Hash identifier: gsoKiZN9pyE8N6Z1hIXn381l+UBgzuMWmBfB/VnZQBM=
Subject key identifier: 67:88:90:1C:CE:36:2F:23:08:23:4E:C0:DA:6C:0A:3F:7D:F8:17:F7
Certificate issuer: /CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Certificate serial: 01836236213C49B2A70B71ECE963794EDD9A
Authority key identifier: BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/Z4iQHM42LyMII07A2mwKP334F_c.roa
Signing time: Wed 21 Sep 2022 22:40:58 +0000
ROA not before: Wed 21 Sep 2022 22:40:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206974
IP address blocks: 5.149.240.0/24 maxlen: 24
5.149.241.0/24 maxlen: 24
5.149.245.0/24 maxlen: 24
5.149.240.0/21 maxlen: 21
5.149.244.0/24 maxlen: 24
5.149.246.0/24 maxlen: 24
5.149.243.0/24 maxlen: 24
5.149.242.0/24 maxlen: 24
5.149.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:62:36:21:3c:49:b2:a7:0b:71:ec:e9:63:79:4e:dd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Validity
Not Before: Sep 21 22:40:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6788901cce362f2308234ec0da6c0a3f7df817f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:cd:dc:4c:02:00:50:15:18:dc:ff:9c:e3:
80:19:1b:6b:ca:d9:e6:4d:77:ae:62:2b:a0:70:7b:
c3:d3:e9:58:d5:4c:4b:2f:dd:44:34:8a:4a:91:b6:
e6:88:5e:70:48:fa:23:70:93:a0:20:6c:f8:46:e6:
39:e5:4c:61:74:07:f3:5b:55:71:d4:1d:92:94:7c:
41:c9:d4:6f:5d:7b:f5:ba:99:72:7c:8a:7f:c3:47:
46:fb:d5:01:11:31:cc:f3:44:73:93:37:b9:a5:69:
54:bf:91:bd:a8:42:56:39:25:f1:74:bb:e2:89:b6:
ed:63:d6:47:74:18:32:c9:49:26:e5:e8:4b:d3:df:
ec:8a:80:0d:39:c5:57:ee:3d:b5:67:1d:37:cf:dd:
f7:70:eb:e5:f8:0b:26:ff:8b:d7:cd:4f:ae:71:8c:
16:7b:88:97:7a:56:f7:d4:7a:17:49:93:08:10:e0:
e7:53:9a:bd:73:c3:89:27:53:70:e8:3a:8b:23:af:
19:5a:b2:bf:12:5e:cb:6f:06:71:d3:34:b6:b6:47:
a7:95:95:a3:a2:9d:a4:11:80:1e:8f:b1:de:bf:ed:
c6:cf:ee:b3:38:09:66:33:09:a5:c5:88:3a:9a:1f:
ff:6a:b9:c0:ba:39:dd:22:a7:14:69:85:08:86:4e:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:88:90:1C:CE:36:2F:23:08:23:4E:C0:DA:6C:0A:3F:7D:F8:17:F7
X509v3 Authority Key Identifier:
keyid:BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/Z4iQHM42LyMII07A2mwKP334F_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.240.0/21
Signature Algorithm: sha256WithRSAEncryption
22:94:a6:75:12:75:09:ad:0e:c5:fd:af:8f:4a:82:7f:79:c6:
2d:d3:b0:c9:02:aa:ef:6b:e0:bb:45:ba:e6:0f:aa:57:ef:5e:
2a:07:d6:31:08:e6:09:19:35:92:9b:a4:0c:67:2b:10:7b:d8:
fc:c5:c9:58:b1:c5:6e:50:f3:91:a8:33:82:7e:ef:59:c5:4d:
1f:4a:89:51:f1:19:96:4f:be:44:75:19:a0:81:0a:db:6b:34:
a4:a8:60:a9:53:b8:16:e6:b5:11:a0:73:ed:89:1f:82:44:a4:
e7:2c:67:10:40:ef:1b:78:0c:de:cf:43:3f:85:9f:b9:da:c3:
25:da:3c:c8:1a:43:e1:89:e0:5b:59:f0:e5:3e:b1:89:a8:f5:
2d:29:ee:7b:ca:04:3f:0d:b7:c9:c3:54:4f:09:a7:76:b6:12:
1b:e4:73:83:c2:ef:9f:0e:a7:77:f1:51:8f:9d:77:87:9b:46:
b4:01:dc:d7:9f:a0:b3:34:66:0b:29:74:5f:de:e1:56:92:aa:
7b:35:9d:82:c7:8c:51:14:bc:6a:12:12:db:de:5f:be:4c:e7:
0f:c6:ec:ed:a3:9d:f6:2a:43:d4:ed:f9:45:a1:81:31:77:2e:
6f:72:bf:f6:84:1e:01:06:fe:7a:f2:3a:d8:fa:9f:77:be:63:
98:58:43:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNiNiE8SbKnC3Hs6WN5Tt2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTVjMmEzNDU0MmVhNzY3ZTYyZDRmYTVkYTU5MDcxNDY3
YmUxYWMwHhcNMjIwOTIxMjI0MDU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Nzg4OTAxY2NlMzYyZjIzMDgyMzRlYzBkYTZjMGEzZjdkZjgxN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhrN3EwCAFAVGNz/nOOAGRtrytnm
TXeuYiugcHvD0+lY1UxLL91ENIpKkbbmiF5wSPojcJOgIGz4RuY55UxhdAfzW1Vx
1B2SlHxBydRvXXv1uplyfIp/w0dG+9UBETHM80Rzkze5pWlUv5G9qEJWOSXxdLvi
ibbtY9ZHdBgyyUkm5ehL09/sioANOcVX7j21Zx03z933cOvl+Asm/4vXzU+ucYwW
e4iXelb31HoXSZMIEODnU5q9c8OJJ1Nw6DqLI68ZWrK/El7LbwZx0zS2tkenlZWj
op2kEYAej7Hev+3Gz+6zOAlmMwmlxYg6mh//arnAujndIqcUaYUIhk5jFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGeIkBzONi8jCCNOwNpsCj99+Bf3MB8GA1UdIwQY
MBaAFL6lwqNFQup2fmLU+l2lkHFGe+GsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFYQ28wVkM2blotWXRUNlhhV1FjVVo3NGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85YWU2ZDAtZDczMS00NTRkLWI4NzAt
NTI4NjM4NGFlMjM2LzEvWjRpUUhNNDJMeU1JSTA3QTJtd0tQMzM0Rl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85YWU2ZDAtZDczMS00NTRkLWI4NzAtNTI4NjM4NGFlMjM2
LzEvdnFYQ28wVkM2blotWXRUNlhhV1FjVVo3NGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBZXwMA0G
CSqGSIb3DQEBCwUAA4IBAQAilKZ1EnUJrQ7F/a+PSoJ/ecYt07DJAqrva+C7Rbrm
D6pX714qB9YxCOYJGTWSm6QMZysQe9j8xclYscVuUPORqDOCfu9ZxU0fSolR8RmW
T75EdRmggQrbazSkqGCpU7gW5rURoHPtiR+CRKTnLGcQQO8beAzez0M/hZ+52sMl
2jzIGkPhieBbWfDlPrGJqPUtKe57ygQ/DbfJw1RPCad2thIb5HODwu+fDqd38VGP
nXeHm0a0AdzXn6CzNGYLKXRf3uFWkqp7NZ2Cx4xRFLxqEhLb3l++TOcPxuzto532
KkPU7flFoYExdy5vcr/2hB4BBv568jrY+p93vmOYWEPu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:55 2024 by rpki-client on console-ams.rpki-client.org