Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/COdZTKZKgRr0icZ3ni35fgCqFzI.roa
File: COdZTKZKgRr0icZ3ni35fgCqFzI.roa (raw, json)
Hash identifier: IQKAcqJDdVo9r6fBgY18CRpMN52rZ5UjC3HZWqCnPmU=
Subject key identifier: 08:E7:59:4C:A6:4A:81:1A:F4:89:C6:77:9E:2D:F9:7E:00:AA:17:32
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09B60940
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/COdZTKZKgRr0icZ3ni35fgCqFzI.roa
Signing time: Tue 22 Feb 2022 05:55:24 +0000
ROA not before: Tue 22 Feb 2022 05:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.248.0/21 maxlen: 24
89.116.234.0/24 maxlen: 24
89.116.236.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
89.116.241.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.44.0/22 maxlen: 24
89.116.48.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162924864 (0x9b60940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 22 05:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08e7594ca64a811af489c6779e2df97e00aa1732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:5f:84:2a:c8:33:9b:21:90:3f:44:2f:cb:
65:80:64:75:28:ed:69:00:c4:28:d0:f0:79:53:b4:
85:f2:06:27:7a:94:4c:56:1f:2b:31:73:4e:d6:e1:
ec:c9:4a:55:29:0d:aa:17:08:b0:ce:56:d9:25:da:
a8:b8:d9:04:e4:7e:47:85:22:00:54:66:99:a8:70:
5d:f1:5f:fd:aa:64:a0:e0:24:69:0b:7a:bf:8a:72:
0e:2a:62:9f:15:37:f1:b5:80:44:4c:06:14:a1:0e:
ec:a8:7c:05:97:46:ac:a1:cd:60:95:64:58:e1:1a:
cd:29:02:98:67:26:9a:2c:0d:d3:97:52:d2:62:d2:
95:e2:ea:71:22:69:bc:27:97:81:cc:e4:57:1e:8c:
36:73:c8:46:14:7a:8e:14:9f:5e:5e:78:2f:ba:92:
b9:55:12:3f:52:aa:30:3f:f2:1e:82:a6:13:b3:fb:
e7:fa:9f:74:2a:34:81:ce:2a:8e:6d:6b:61:df:67:
13:f1:ad:04:59:39:96:a2:4b:3e:62:66:c2:ff:b7:
c1:d3:24:09:42:7e:c0:28:1a:63:cc:1a:c2:86:7f:
c3:ea:28:3e:6d:28:a7:73:e3:c5:e7:d5:a4:47:b3:
1c:1b:ee:c1:44:5e:ec:01:22:b9:d8:ec:75:4a:57:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:59:4C:A6:4A:81:1A:F4:89:C6:77:9E:2D:F9:7E:00:AA:17:32
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/COdZTKZKgRr0icZ3ni35fgCqFzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
84.46.240.0/20
86.38.235.0/24
86.38.238.0/24
86.38.248.0/21
89.116.44.0-89.116.51.255
89.116.140.0/24
89.116.234.0/24
89.116.236.0/24
89.116.241.0/24
89.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
92:65:51:25:e1:c3:67:d6:00:37:94:6e:f3:b2:05:d7:5f:61:
f8:80:c3:84:dc:9d:da:37:46:9c:c5:5d:64:5f:69:05:0a:59:
1d:fd:49:00:b6:10:66:57:23:23:b1:92:f9:7d:d7:fd:26:4e:
71:a1:f3:b7:de:d1:4e:fc:c3:45:31:06:7f:08:ea:a2:0f:98:
c3:5f:58:34:21:cf:34:d4:c6:d6:22:53:74:78:28:f0:ea:60:
76:2b:ae:ea:1d:51:8e:3b:2e:02:48:5b:fd:1c:70:f8:f9:77:
af:b7:3e:f4:54:0b:4f:62:34:6c:aa:3f:23:2c:52:44:87:5f:
2f:fd:4c:37:c8:18:53:71:3e:7b:96:05:7b:17:3c:fc:0e:1e:
e0:bd:79:4a:35:5b:d9:0d:c8:b3:b9:6f:4a:cf:74:28:40:b7:
b5:5f:d9:e8:7e:49:36:13:0f:32:d6:3f:84:12:94:db:f3:f2:
6d:d0:1c:c9:93:2c:44:03:4d:83:26:2b:05:a7:f1:6b:c4:1d:
6e:66:21:a0:c0:a7:86:0a:95:49:66:34:55:b2:2a:f0:50:b7:
3f:b5:0c:63:a7:08:da:b6:fb:46:58:4d:53:18:1f:5a:8d:bc:
5d:e5:52:72:ef:bf:7f:47:32:e8:41:9e:6c:c8:bb:a5:6f:29:
1b:27:36:d0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIECbYJQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIy
MjA1NTUyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhlNzU5NGNhNjRh
ODExYWY0ODljNjc3OWUyZGY5N2UwMGFhMTczMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvrX4QqyDObIZA/RC/LZYBkdSjtaQDEKNDweVO0hfIGJ3qU
TFYfKzFzTtbh7MlKVSkNqhcIsM5W2SXaqLjZBOR+R4UiAFRmmahwXfFf/apkoOAk
aQt6v4pyDipinxU38bWAREwGFKEO7Kh8BZdGrKHNYJVkWOEazSkCmGcmmiwN05dS
0mLSleLqcSJpvCeXgczkVx6MNnPIRhR6jhSfXl54L7qSuVUSP1KqMD/yHoKmE7P7
5/qfdCo0gc4qjm1rYd9nE/GtBFk5lqJLPmJmwv+3wdMkCUJ+wCgaY8wawoZ/w+oo
Pm0op3PjxefVpEezHBvuwURe7AEiudjsdUpXu38CAwEAAaOCAk0wggJJMB0GA1Ud
DgQWBBQI51lMpkqBGvSJxneeLfl+AKoXMjAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L0NPZFpUS1pLZ1JyMGljWjNuaTM1ZmdDcUZ6SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBj
BggrBgEFBQcBBwEB/wRUMFIwUAQCAAEwSgMEAFQuyAMEBFQu8AMEAFYm6wMEAFYm
7gMEA1Ym+DAMAwQCWXQsAwQCWXQwAwQAWXSMAwQAWXTqAwQAWXTsAwQAWXTxAwQA
WXT0MA0GCSqGSIb3DQEBCwUAA4IBAQCSZVEl4cNn1gA3lG7zsgXXX2H4gMOE3J3a
N0acxV1kX2kFClkd/UkAthBmVyMjsZL5fdf9Jk5xofO33tFO/MNFMQZ/COqiD5jD
X1g0Ic801MbWIlN0eCjw6mB2K67qHVGOOy4CSFv9HHD4+Xevtz70VAtPYjRsqj8j
LFJEh18v/Uw3yBhTcT57lgV7Fzz8Dh7gvXlKNVvZDcizuW9Kz3QoQLe1X9nofkk2
Ew8y1j+EEpTb8/Jt0BzJkyxEA02DJisFp/FrxB1uZiGgwKeGCpVJZjRVsirwULc/
tQxjpwjatvtGWE1TGB9ajbxd5VJy779/RzLoQZ5syLulbykbJzbQ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org