Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4HLXGLbfh08_62AZWMPlfIN8QQI.roa
File: 4HLXGLbfh08_62AZWMPlfIN8QQI.roa (raw, json)
Hash identifier: gpgmjZKTxcf3P7ig4K63yG5Mg/4R0WqDcautxmxk7AI=
Subject key identifier: E0:72:D7:18:B6:DF:87:4F:3F:EB:60:19:58:C3:E5:7C:83:7C:41:02
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01841AB09B491890861F85A1AC0E34AEC1E8
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4HLXGLbfh08_62AZWMPlfIN8QQI.roa
Signing time: Thu 27 Oct 2022 18:24:52 +0000
ROA not before: Thu 27 Oct 2022 18:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:b0:9b:49:18:90:86:1f:85:a1:ac:0e:34:ae:c1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 27 18:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e072d718b6df874f3feb601958c3e57c837c4102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:a8:5a:a1:79:19:6f:fd:79:33:ce:63:ae:
86:0a:23:2a:4e:72:9e:06:98:10:37:f1:3a:97:d8:
fd:cc:53:85:80:00:f5:71:01:2c:00:27:93:f6:13:
21:a2:9e:6c:0b:ac:ec:02:5a:52:14:a5:99:06:a7:
1f:3a:36:f7:81:84:8c:de:02:3f:39:1b:fc:07:68:
e8:0c:a4:9c:f4:ef:f3:89:25:5f:5f:77:10:c6:cb:
7d:58:b0:d7:34:4e:1e:23:16:f9:a7:65:6d:c3:6d:
27:14:b7:33:77:a1:06:80:d2:fc:e0:03:95:72:5f:
8d:7b:aa:a7:ae:f2:af:b4:47:9c:9c:6d:dc:14:96:
8e:a3:6b:dc:b0:cb:ce:85:6e:8e:c1:03:45:11:47:
2d:7d:27:88:8d:e9:11:52:a9:b5:84:29:78:e7:a3:
39:be:3a:81:81:0d:65:7e:aa:83:2a:20:31:53:fa:
30:22:dc:81:75:bf:fc:1e:7a:24:5c:22:6e:60:c0:
db:20:f6:31:cb:a3:15:30:c9:cc:cc:80:97:44:3e:
fe:c5:5f:56:ff:3d:49:2c:37:1f:5c:0b:ae:a3:ab:
3b:be:ff:dc:79:38:7e:37:7a:b6:f7:2a:df:e3:a0:
5d:37:c4:3a:77:96:8a:90:ea:ee:3c:2b:b8:00:6a:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:72:D7:18:B6:DF:87:4F:3F:EB:60:19:58:C3:E5:7C:83:7C:41:02
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4HLXGLbfh08_62AZWMPlfIN8QQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.240.0/20
86.38.248.0/21
Signature Algorithm: sha256WithRSAEncryption
92:32:a9:a6:f0:75:c9:c9:d3:d2:a6:61:3c:cf:f4:9e:86:9e:
fe:e5:25:5e:10:e9:d2:9f:e4:e6:bb:5a:82:c1:17:8e:6b:6c:
4e:5b:c1:59:20:b9:dc:c1:b2:48:1a:3a:60:cd:c2:24:d3:53:
78:78:fa:ce:cc:3e:3a:bd:79:f3:81:59:8f:4f:9a:87:02:26:
13:18:91:f0:57:19:a7:b0:28:28:14:91:2f:19:68:09:3a:2f:
d2:ab:42:82:41:af:12:19:f9:09:60:6a:68:4a:2a:58:62:75:
6a:e0:e7:0a:d5:4a:da:43:4e:02:68:4d:e5:6e:41:98:41:d6:
36:80:f4:3a:68:12:ae:a0:97:7d:b9:a7:58:e2:f6:8c:10:2f:
c3:94:e5:b9:79:da:61:58:cb:2d:5a:bb:61:a4:2d:84:98:a5:
68:a3:1b:5c:5e:2a:06:e1:bb:7a:97:51:52:fb:e2:dc:34:be:
67:75:6a:f4:91:82:44:ac:a8:db:de:94:a2:b4:9e:4e:3a:9a:
6d:27:57:2b:fd:7e:62:b8:0d:7e:22:5a:f9:f8:e8:63:29:fb:
b6:e2:b9:86:d5:66:85:1a:d8:48:6c:99:1b:a5:f5:07:f5:1e:
12:c2:26:a9:0c:11:86:47:32:ef:f4:42:d1:b9:8d:f5:de:57:
3a:49:d6:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQasJtJGJCGH4WhrA40rsHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDI3MTgyNDUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDcyZDcxOGI2ZGY4NzRmM2ZlYjYwMTk1OGMzZTU3YzgzN2M0MTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv6oWqF5GW/9eTPOY66GCiMqTnKe
BpgQN/E6l9j9zFOFgAD1cQEsACeT9hMhop5sC6zsAlpSFKWZBqcfOjb3gYSM3gI/
ORv8B2joDKSc9O/ziSVfX3cQxst9WLDXNE4eIxb5p2Vtw20nFLczd6EGgNL84AOV
cl+Ne6qnrvKvtEecnG3cFJaOo2vcsMvOhW6OwQNFEUctfSeIjekRUqm1hCl456M5
vjqBgQ1lfqqDKiAxU/owItyBdb/8HnokXCJuYMDbIPYxy6MVMMnMzICXRD7+xV9W
/z1JLDcfXAuuo6s7vv/ceTh+N3q29yrf46BdN8Q6d5aKkOruPCu4AGq9iQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOBy1xi234dPP+tgGVjD5XyDfEECMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvNEhMWEdMYmZoMDhfNjJBWldNUGxmSU44UVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEVC7wAwQD
Vib4MA0GCSqGSIb3DQEBCwUAA4IBAQCSMqmm8HXJydPSpmE8z/Sehp7+5SVeEOnS
n+Tmu1qCwReOa2xOW8FZILncwbJIGjpgzcIk01N4ePrOzD46vXnzgVmPT5qHAiYT
GJHwVxmnsCgoFJEvGWgJOi/Sq0KCQa8SGfkJYGpoSipYYnVq4OcK1UraQ04CaE3l
bkGYQdY2gPQ6aBKuoJd9uadY4vaMEC/DlOW5edphWMstWrthpC2EmKVooxtcXioG
4bt6l1FS++LcNL5ndWr0kYJErKjb3pSitJ5OOpptJ1cr/X5iuA1+Ilr5+OhjKfu2
4rmG1WaFGthIbJkbpfUH9R4SwiapDBGGRzLv9ELRuY313lc6SdYj
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org