Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4yh0peqEred3X4Q_zkSWrDBIgWQ.roa
File: 4yh0peqEred3X4Q_zkSWrDBIgWQ.roa (raw, json)
Hash identifier: RmMkS3ViLngAMm7Im/a66UY3bOo8jgdX6Ml8jOlqsyU=
Subject key identifier: E3:28:74:A5:EA:84:AD:E7:77:5F:84:3F:CE:44:96:AC:30:48:81:64
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B47B0F5
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4yh0peqEred3X4Q_zkSWrDBIgWQ.roa
Signing time: Thu 09 Jun 2022 18:37:03 +0000
ROA not before: Thu 09 Jun 2022 18:37:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.117.87.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189247733 (0xb47b0f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 9 18:37:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e32874a5ea84ade7775f843fce4496ac30488164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:a6:dd:37:a7:29:4e:2b:ee:0a:74:da:71:
78:06:e2:37:ab:f3:e7:31:e3:13:c3:86:85:39:1f:
4b:15:24:3a:ed:49:79:c7:33:6e:6c:4c:21:7d:e5:
91:32:1a:93:da:eb:ec:55:fd:9c:b4:96:c6:0e:49:
ed:e5:2c:69:78:36:76:74:10:c1:b3:ad:63:54:99:
8c:06:83:52:f5:75:d1:8c:58:8d:27:12:78:cd:1d:
79:ba:5b:ff:43:c9:c4:da:96:1f:14:05:98:64:2e:
44:47:05:fa:f6:2a:e2:a6:64:2e:ee:6f:de:9d:d0:
36:eb:3c:89:b1:17:31:7e:49:af:25:ca:42:58:a5:
68:b2:43:78:8c:70:0f:0a:b5:df:6a:6f:cb:51:c6:
2d:c7:f7:ce:fa:7b:8d:87:81:9b:66:9a:d8:cd:e9:
7a:b1:ec:c7:33:e7:45:29:9e:20:79:4b:d6:ad:1b:
32:e1:dc:7e:11:0d:4b:0b:15:b9:c5:bd:e8:f3:8a:
6a:d7:80:d6:6a:b8:ce:3d:36:ba:9b:3a:97:eb:c3:
2e:13:d7:c4:53:6d:4c:65:ec:44:aa:e6:38:6f:2c:
be:e7:81:0e:63:65:ae:be:af:53:2d:e6:9d:c3:ad:
ec:98:2a:4b:c8:a4:56:75:20:de:97:d3:3d:2a:d4:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:74:A5:EA:84:AD:E7:77:5F:84:3F:CE:44:96:AC:30:48:81:64
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4yh0peqEred3X4Q_zkSWrDBIgWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.171.0/24
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
86.38.238.0/24
89.116.56.0/24
89.116.100.0/24
89.116.115.0/24
89.117.27.0/24
89.117.87.0/24
89.117.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b6:e2:6a:3a:65:76:e4:9a:11:95:ab:67:78:1e:9d:71:d6:
7a:32:32:2f:54:ff:b0:85:c5:c6:d8:0a:11:36:fa:cd:09:c1:
6a:9f:be:5b:b5:6b:fd:15:74:31:b2:8a:05:a5:9c:b9:80:e5:
de:61:46:8b:af:f1:01:e5:70:84:e4:56:aa:f1:55:c0:b6:5f:
ac:c2:68:4a:de:84:bf:25:50:94:bc:12:42:ec:68:33:f6:ed:
32:c6:6c:e9:95:5b:2a:ad:cf:37:2b:f0:bb:61:4f:43:e3:77:
bc:b7:75:af:a2:09:17:9a:6e:7a:a5:7e:1a:3e:15:aa:5b:7b:
de:ed:04:53:36:43:89:81:be:88:bb:36:05:ea:1c:6a:e0:12:
64:12:f5:62:42:9f:bd:1c:ec:9e:54:cf:a0:05:1f:85:d8:52:
0c:45:b2:72:09:57:35:b9:b8:19:3a:98:37:a9:7a:e2:b5:57:
fb:0b:bd:b6:66:19:89:15:49:2f:2c:cb:72:92:af:5b:1c:a5:
75:19:1e:d9:15:51:a9:eb:47:e3:d6:d4:b6:38:69:6c:e2:9d:
22:b4:c2:b5:98:5d:e9:66:b7:48:84:ba:a9:2e:ad:f9:f9:b4:
70:5d:c5:18:11:cd:b3:6f:03:86:a1:31:f7:93:99:ca:9b:81:
d2:47:7d:83
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIEC0ew9TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDYw
OTE4MzcwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTMyODc0YTVlYTg0
YWRlNzc3NWY4NDNmY2U0NDk2YWMzMDQ4ODE2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMf6pt03pylOK+4KdNpxeAbiN6vz5zHjE8OGhTkfSxUkOu1J
ecczbmxMIX3lkTIak9rr7FX9nLSWxg5J7eUsaXg2dnQQwbOtY1SZjAaDUvV10YxY
jScSeM0debpb/0PJxNqWHxQFmGQuREcF+vYq4qZkLu5v3p3QNus8ibEXMX5JryXK
QlilaLJDeIxwDwq132pvy1HGLcf3zvp7jYeBm2aa2M3perHsxzPnRSmeIHlL1q0b
MuHcfhENSwsVucW96POKateA1mq4zj02ups6l+vDLhPXxFNtTGXsRKrmOG8svueB
DmNlrr6vUy3mncOt7JgqS8ikVnUg3pfTPSrUALkCAwEAAaOCAlEwggJNMB0GA1Ud
DgQWBBTjKHSl6oSt53dfhD/ORJasMEiBZDAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
LzR5aDBwZXFFcmVkM1g0UV96a1NXckRCSWdXUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBn
BggrBgEFBQcBBwEB/wRYMFYwVAQCAAEwTgMEAFQuqwMEAFYmBwMEAFYmJQMEAFYm
sQMEAFYmyAMEAFYm6wMEAFYm7gMEAFl0OAMEAFl0ZAMEAFl0cwMEAFl1GwMEAFl1
VwMEAFl1bTANBgkqhkiG9w0BAQsFAAOCAQEAsLbiajplduSaEZWrZ3genXHWejIy
L1T/sIXFxtgKETb6zQnBap++W7Vr/RV0MbKKBaWcuYDl3mFGi6/xAeVwhORWqvFV
wLZfrMJoSt6EvyVQlLwSQuxoM/btMsZs6ZVbKq3PNyvwu2FPQ+N3vLd1r6IJF5pu
eqV+Gj4Vqlt73u0EUzZDiYG+iLs2BeocauASZBL1YkKfvRzsnlTPoAUfhdhSDEWy
cglXNbm4GTqYN6l64rVX+wu9tmYZiRVJLyzLcpKvWxyldRke2RVRqetH49bUtjhp
bOKdIrTCtZhd6Wa3SIS6qS6t+fm0cF3FGBHNs28DhqEx95OZypuB0kd9gw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org