Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9pFU8N9QyoehO1Igslz2rpJ6XEo.roa
File: 9pFU8N9QyoehO1Igslz2rpJ6XEo.roa (raw, json)
Hash identifier: xPTvr2Mg57I8p4EWNY4JFyZyYfXa0DQ3mfTQduKUJ6Q=
Subject key identifier: F6:91:54:F0:DF:50:CA:87:A1:3B:52:20:B2:5C:F6:AE:92:7A:5C:4A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 099E8092
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9pFU8N9QyoehO1Igslz2rpJ6XEo.roa
Signing time: Fri 18 Feb 2022 05:45:28 +0000
ROA not before: Fri 18 Feb 2022 05:45:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.248.0/21 maxlen: 24
86.38.156.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
89.117.172.0/22 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161382546 (0x99e8092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 18 05:45:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f69154f0df50ca87a13b5220b25cf6ae927a5c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:ba:dc:91:12:8e:f6:a4:4c:bf:df:04:e6:
7b:38:58:58:5e:bb:28:d0:73:2e:02:37:6f:cd:cb:
bc:0c:c7:bc:b7:f1:c9:b2:3a:f5:c4:30:fc:34:9f:
cb:da:00:19:27:a8:b7:13:9d:69:11:13:21:81:5f:
38:66:83:09:da:aa:09:dc:b6:d6:24:31:85:24:c3:
22:be:58:6c:e1:c8:34:f4:e5:66:d0:dc:b2:a9:97:
06:d7:8b:1b:4b:48:ed:f6:8d:87:8c:d1:22:8f:d2:
83:ab:7b:7f:9a:ad:3e:31:af:6a:7a:a7:02:bd:e5:
f0:f2:7f:d3:c7:9c:da:93:17:85:a5:db:60:9e:43:
4d:b0:1d:fd:72:a7:b7:2d:2b:3e:05:5b:a6:7b:66:
50:1a:b8:3e:41:ac:64:89:8c:cb:67:91:4b:0d:63:
03:82:9e:bc:84:07:05:93:9e:f2:76:58:c0:fe:2b:
fc:91:1b:69:2c:02:b4:4a:62:d0:2f:44:df:b4:51:
04:e8:ef:7b:3e:e9:47:0b:05:f6:1d:96:45:69:93:
82:41:9e:44:b4:e5:ed:22:1b:db:eb:4a:d8:c1:78:
4a:1b:ff:38:a3:63:2d:c4:52:68:7c:99:23:ce:df:
59:f5:d7:7b:bd:30:f8:75:89:27:b3:5b:ab:a7:b1:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:91:54:F0:DF:50:CA:87:A1:3B:52:20:B2:5C:F6:AE:92:7A:5C:4A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9pFU8N9QyoehO1Igslz2rpJ6XEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
84.46.240.0/20
86.38.37.0/24
86.38.156.0/24
86.38.177.0/24
86.38.235.0/24
86.38.238.0/24
86.38.248.0/21
89.116.64.0/22
89.116.248.0/24
89.117.172.0/22
Signature Algorithm: sha256WithRSAEncryption
79:90:e3:73:71:8a:a0:72:2d:4a:12:bb:4f:36:d7:39:63:3f:
ee:52:f5:25:26:29:54:df:24:f4:db:cf:12:7b:0e:ae:82:94:
de:c4:45:ef:c2:c6:b9:89:5c:6c:f4:16:3a:54:ed:00:ba:85:
f6:be:7a:1e:07:35:4c:06:cf:7c:60:2d:a5:db:42:a0:8a:04:
26:d5:a0:b0:17:ea:70:1f:15:d9:78:37:e4:45:99:97:b1:a1:
1d:72:7a:89:d2:f5:89:39:03:3c:d3:43:31:97:7c:71:b1:30:
6c:15:42:8e:ec:9a:d5:7a:d2:a9:79:1a:ab:9a:83:02:c7:1e:
41:d0:85:56:a0:39:f0:40:25:0f:5e:a0:c7:34:6b:02:4b:84:
0c:c3:5c:ea:a2:c5:7f:0c:57:8a:22:0e:df:be:56:bc:42:73:
b5:24:5c:92:24:9d:8b:97:f8:71:90:8d:3c:13:ee:ff:ae:20:
71:c5:5d:fe:23:fc:0b:1b:f4:ed:48:68:0b:bf:d5:9b:1b:81:
0b:56:02:db:9f:6e:62:02:a5:e3:42:83:59:e9:63:b6:5f:30:
7c:a4:09:c4:22:89:d6:3c:d7:69:22:d0:c6:ad:5f:ef:b6:b3:
15:d8:70:6e:95:34:66:80:fd:84:ee:4e:50:d0:a1:75:33:c4:
44:84:7b:9a
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIECZ6AkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIx
ODA1NDUyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjY5MTU0ZjBkZjUw
Y2E4N2ExM2I1MjIwYjI1Y2Y2YWU5MjdhNWM0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ7tutyREo72pEy/3wTmezhYWF67KNBzLgI3b83LvAzHvLfx
ybI69cQw/DSfy9oAGSeotxOdaRETIYFfOGaDCdqqCdy21iQxhSTDIr5YbOHINPTl
ZtDcsqmXBteLG0tI7faNh4zRIo/Sg6t7f5qtPjGvanqnAr3l8PJ/08ec2pMXhaXb
YJ5DTbAd/XKnty0rPgVbpntmUBq4PkGsZImMy2eRSw1jA4KevIQHBZOe8nZYwP4r
/JEbaSwCtEpi0C9E37RRBOjvez7pRwsF9h2WRWmTgkGeRLTl7SIb2+tK2MF4Shv/
OKNjLcRSaHyZI87fWfXXe70w+HWJJ7Nbq6extvMCAwEAAaOCAkUwggJBMB0GA1Ud
DgQWBBT2kVTw31DKh6E7UiCyXPauknpcSjAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
LzlwRlU4TjlReW9laE8xSWdzbHoycnBKNlhFby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBb
BggrBgEFBQcBBwEB/wRMMEowSAQCAAEwQgMEAFQuyAMEBFQu8AMEAFYmJQMEAFYm
nAMEAFYmsQMEAFYm6wMEAFYm7gMEA1Ym+AMEAll0QAMEAFl0+AMEAll1rDANBgkq
hkiG9w0BAQsFAAOCAQEAeZDjc3GKoHItShK7TzbXOWM/7lL1JSYpVN8k9NvPEnsO
roKU3sRF78LGuYlcbPQWOlTtALqF9r56Hgc1TAbPfGAtpdtCoIoEJtWgsBfqcB8V
2Xg35EWZl7GhHXJ6idL1iTkDPNNDMZd8cbEwbBVCjuya1XrSqXkaq5qDAsceQdCF
VqA58EAlD16gxzRrAkuEDMNc6qLFfwxXiiIO375WvEJztSRckiSdi5f4cZCNPBPu
/64gccVd/iP8Cxv07UhoC7/VmxuBC1YC259uYgKl40KDWeljtl8wfKQJxCKJ1jzX
aSLQxq1f77azFdhwbpU0ZoD9hO5OUNChdTPERIR7mg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org