Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9CcPzmEzwUFWeTmsOnkThKGBa6I.roa
File: 9CcPzmEzwUFWeTmsOnkThKGBa6I.roa (raw, json)
Hash identifier: K+iZDpjSiDLg9beNDKbTjm0zpvYQG10i/TJtqCaJcM0=
Subject key identifier: F4:27:0F:CE:61:33:C1:41:56:79:39:AC:3A:79:13:84:A1:81:6B:A2
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01837F803215F6F8591813171ACAF0042357
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9CcPzmEzwUFWeTmsOnkThKGBa6I.roa
Signing time: Tue 27 Sep 2022 15:10:51 +0000
ROA not before: Tue 27 Sep 2022 15:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.248.0/21 maxlen: 24
84.46.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:80:32:15:f6:f8:59:18:13:17:1a:ca:f0:04:23:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 27 15:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4270fce6133c141567939ac3a791384a1816ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:32:81:5f:61:41:48:5c:9b:81:d3:e2:94:
43:6a:fa:00:3e:be:ef:43:80:30:71:1f:18:79:a9:
d2:24:d6:7b:c4:fe:64:84:10:3a:c3:83:f3:a1:05:
f1:1c:e5:60:7e:46:b4:4f:49:9c:40:a5:ba:bb:77:
23:5c:2c:82:c5:fb:db:98:c2:2b:3c:bb:7f:93:5c:
af:41:ca:5c:7c:53:6c:42:47:23:18:0e:6a:d4:5b:
cb:50:43:9e:65:f6:3c:de:15:41:ab:7a:f5:70:05:
a9:48:cf:06:e8:e8:d6:92:26:64:84:2f:4e:04:80:
47:e1:2d:2f:dc:a3:1e:bb:84:84:c0:5c:9d:9d:f9:
39:4e:19:d3:9e:d0:ce:32:8b:9b:cc:1c:b3:38:46:
31:13:ad:1c:68:de:c7:25:e1:f8:b2:36:36:2b:12:
e4:70:7a:95:36:31:22:06:a4:ec:4e:f8:bc:9e:cc:
57:5c:8e:26:e6:b5:54:9c:a6:77:03:80:a9:c2:76:
02:27:bc:cd:ff:75:28:90:df:60:e4:f2:38:92:c9:
14:59:12:bd:34:b2:c1:c5:b3:47:29:c0:fe:c5:e3:
51:7a:20:3f:09:c7:72:7f:b3:68:a5:38:08:f9:d5:
89:8e:a7:90:ef:be:65:ab:5b:fc:41:d2:aa:7f:dc:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:27:0F:CE:61:33:C1:41:56:79:39:AC:3A:79:13:84:A1:81:6B:A2
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9CcPzmEzwUFWeTmsOnkThKGBa6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
84.46.240.0/20
86.38.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:d8:27:29:20:70:17:4b:ad:fb:a1:ea:ca:13:8d:34:fd:c4:
b8:d0:c0:11:c5:ab:ee:36:05:0c:30:55:32:69:98:22:4e:15:
1d:fd:57:d2:63:95:17:50:32:99:98:9f:2f:69:5a:24:3a:4a:
77:97:12:47:53:0a:9d:d1:47:27:88:2b:5c:68:8b:ec:6f:29:
e6:76:eb:9d:44:1f:50:d5:1d:68:e0:21:7e:ca:aa:e5:10:40:
00:f7:e2:09:4e:1a:a7:5d:6e:34:35:39:e1:bd:f1:b9:46:91:
0d:1c:5d:97:4b:80:f0:1e:ac:82:9d:e8:0d:e8:c2:8e:d9:17:
92:4a:d8:2d:aa:0d:43:a1:df:ae:96:ba:f4:5d:c3:44:5a:20:
77:35:94:ec:b6:57:33:1c:1d:dd:aa:34:63:d9:d2:f5:fa:20:
53:13:9c:05:df:47:14:77:ae:ec:21:c7:3f:c0:7d:bc:ca:47:
71:1f:52:69:5f:fd:12:ad:0b:3d:ec:9f:18:0f:e2:66:b7:51:
ff:8f:b8:7e:8d:72:f6:c8:f7:5e:ce:1c:4b:7f:21:0c:b7:3c:
44:e4:62:3e:a6:e4:1e:38:11:fb:31:d5:84:8f:fe:a6:0b:59:
09:58:78:be:d7:65:b6:31:6c:2a:d9:17:9f:75:55:78:a9:7e:
22:04:b1:b2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYN/gDIV9vhZGBMXGsrwBCNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwOTI3MTUxMDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDI3MGZjZTYxMzNjMTQxNTY3OTM5YWMzYTc5MTM4NGExODE2YmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1sygV9hQUhcm4HT4pRDavoAPr7v
Q4AwcR8YeanSJNZ7xP5khBA6w4PzoQXxHOVgfka0T0mcQKW6u3cjXCyCxfvbmMIr
PLt/k1yvQcpcfFNsQkcjGA5q1FvLUEOeZfY83hVBq3r1cAWpSM8G6OjWkiZkhC9O
BIBH4S0v3KMeu4SEwFydnfk5ThnTntDOMoubzByzOEYxE60caN7HJeH4sjY2KxLk
cHqVNjEiBqTsTvi8nsxXXI4m5rVUnKZ3A4CpwnYCJ7zN/3UokN9g5PI4kskUWRK9
NLLBxbNHKcD+xeNReiA/Ccdyf7NopTgI+dWJjqeQ775lq1v8QdKqf9zVwQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPQnD85hM8FBVnk5rDp5E4ShgWuiMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvOUNjUHptRXp3VUZXZVRtc09ua1RoS0dCYTZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVC7IAwQE
VC7wAwQDVib4MA0GCSqGSIb3DQEBCwUAA4IBAQCl2CcpIHAXS637oerKE400/cS4
0MARxavuNgUMMFUyaZgiThUd/VfSY5UXUDKZmJ8vaVokOkp3lxJHUwqd0UcniCtc
aIvsbynmduudRB9Q1R1o4CF+yqrlEEAA9+IJThqnXW40NTnhvfG5RpENHF2XS4Dw
HqyCnegN6MKO2ReSStgtqg1Dod+ulrr0XcNEWiB3NZTstlczHB3dqjRj2dL1+iBT
E5wF30cUd67sIcc/wH28ykdxH1JpX/0SrQs97J8YD+Jmt1H/j7h+jXL2yPdezhxL
fyEMtzxE5GI+puQeOBH7MdWEj/6mC1kJWHi+12W2MWwq2RefdVV4qX4iBLGy
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org