Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LhEZRtRZtehd5V3_FqYrwt5E27E.roa
File: LhEZRtRZtehd5V3_FqYrwt5E27E.roa (raw, json)
Hash identifier: VbY39cA1ULwHQej0UJH/Wm/oI7rdwwmJnc569bphUCo=
Subject key identifier: 2E:11:19:46:D4:59:B5:E8:5D:E5:5D:FF:16:A6:2B:C2:DE:44:DB:B1
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0991A2C3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LhEZRtRZtehd5V3_FqYrwt5E27E.roa
Signing time: Wed 16 Feb 2022 10:52:31 +0000
ROA not before: Wed 16 Feb 2022 10:52:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 84.46.234.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
86.38.220.0/23 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.216.0/23 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
89.117.167.0/24 maxlen: 24
89.117.168.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.72.0/22 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.246.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.212.0/22 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160539331 (0x991a2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 16 10:52:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e111946d459b5e85de55dff16a62bc2de44dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:3c:00:c8:28:0e:6a:94:92:e2:03:90:f4:
22:a6:4f:b8:13:1f:77:ef:4f:40:4a:74:12:49:57:
26:53:cb:cc:dc:c0:dd:cc:2e:3b:75:99:85:3a:5e:
6b:1c:ce:f4:b8:f3:b2:65:fc:da:21:e6:62:31:a2:
ee:d7:45:19:39:38:98:9f:e2:1f:6c:ed:00:bc:59:
6f:41:52:45:e8:17:38:a7:fe:e9:ea:b1:d9:40:f9:
86:73:65:09:d6:52:4b:c6:f4:26:27:16:22:54:af:
18:e7:bf:7b:a2:24:85:c3:c8:56:cf:66:94:5c:fb:
c7:42:2f:20:9c:16:82:7c:8d:62:20:d8:98:24:8e:
83:8c:3b:fc:2b:f3:ab:62:7b:ac:ee:d3:a8:82:09:
dc:dd:be:58:de:16:83:3c:31:f6:f2:f2:c6:cd:14:
4f:62:79:91:1d:9b:c1:1a:5b:69:65:eb:f9:2d:92:
b2:fa:55:fe:da:78:28:9d:f3:c5:7c:21:8d:be:27:
cd:99:a9:b9:6e:61:bd:fa:7b:57:40:2c:1b:6f:73:
ed:a1:5a:bc:a9:74:9f:05:8e:96:b3:13:3f:c7:cc:
6e:48:6b:0f:7e:a3:64:65:77:fc:17:b9:87:a2:2d:
64:87:d8:7c:42:15:d2:34:22:ce:16:aa:45:6f:40:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:19:46:D4:59:B5:E8:5D:E5:5D:FF:16:A6:2B:C2:DE:44:DB:B1
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LhEZRtRZtehd5V3_FqYrwt5E27E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.4.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.220.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.72.0-89.116.76.255
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.202.0/24
89.116.210.0-89.116.215.255
89.116.218.0/24
89.116.239.0/24
89.116.242.0/23
89.116.246.0/23
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.167.0-89.117.169.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
98:32:4f:0f:a5:77:f8:fc:f6:b6:c1:f5:de:16:54:99:f4:28:
29:df:74:83:64:f4:44:84:9d:8f:13:9b:61:c4:de:d4:86:f8:
fa:c5:35:50:29:98:fa:66:37:eb:e6:af:8d:35:00:09:b9:35:
c2:7a:2b:48:f5:f9:67:db:ce:c2:f3:17:40:43:e2:27:b0:21:
16:3f:42:89:fa:be:b5:df:76:77:0e:3b:ea:36:55:30:37:22:
37:3e:0d:7e:b4:88:97:bb:67:bc:cc:dd:c3:ea:fd:45:5e:15:
7f:96:7b:c6:6a:cd:d8:17:b0:b8:45:4b:69:ce:b4:1d:8c:60:
a2:bd:95:83:c1:a7:6b:91:99:9e:83:5d:25:dc:ab:e2:7a:71:
75:60:17:d1:78:6f:1d:d0:1b:a5:47:fa:7e:df:5e:7a:d7:a4:
18:77:10:5b:1b:ba:5e:96:80:df:d6:33:48:01:0a:ce:cb:d2:
b1:ee:45:3d:d7:51:0f:53:60:ec:88:1d:7e:dd:c1:78:20:e3:
4c:eb:e8:17:39:13:34:e6:81:a3:97:b4:6f:cd:06:63:1f:30:
92:22:f3:96:c2:90:5d:a0:9e:6a:ff:5f:1a:f6:a4:3c:61:2c:
89:77:23:82:04:8d:c8:c3:d3:b6:1f:2c:1e:c1:eb:bd:00:5f:
4b:87:18:bd
-----BEGIN CERTIFICATE-----
MIIHMTCCBhmgAwIBAgIECZGiwzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIx
NjEwNTIzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmUxMTE5NDZkNDU5
YjVlODVkZTU1ZGZmMTZhNjJiYzJkZTQ0ZGJiMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANvoPADIKA5qlJLiA5D0IqZPuBMfd+9PQEp0EklXJlPLzNzA
3cwuO3WZhTpeaxzO9LjzsmX82iHmYjGi7tdFGTk4mJ/iH2ztALxZb0FSRegXOKf+
6eqx2UD5hnNlCdZSS8b0JicWIlSvGOe/e6IkhcPIVs9mlFz7x0IvIJwWgnyNYiDY
mCSOg4w7/Cvzq2J7rO7TqIIJ3N2+WN4Wgzwx9vLyxs0UT2J5kR2bwRpbaWXr+S2S
svpV/tp4KJ3zxXwhjb4nzZmpuW5hvfp7V0AsG29z7aFavKl0nwWOlrMTP8fMbkhr
D36jZGV3/Be5h6ItZIfYfEIV0jQizhaqRW9AXJ0CAwEAAaOCBEswggRHMB0GA1Ud
DgQWBBQuERlG1Fm16F3lXf8WpivC3kTbsTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L0xoRVpSdFJadGVoZDVWM19GcVlyd3Q1RTI3RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
Al8GCCsGAQUFBwEHAQH/BIICTjCCAkowggJGBAIAATCCAj4DBAFULuoDBAFWJgQD
BAFWJrIwDAMEAVYmtgMEAlYmuAMEAVYmygMEAVYm3AMEAVYm9gMEAVl0NAMEAVl0
OjAMAwQCWXREAwQAWXRGMAwDBANZdEgDBABZdEwDBAFZdFgwDAMEAFl0WwMEAFl0
XDAMAwQBWXRqAwQAWXRsMAwDBABZdH0DBABZdIAwDAMEAVl0ggMEAFl0hAMEAFl0
hwMEAFl0iQMEAFl0jTAMAwQBWXSSAwQAWXSWMAwDBABZdJkDBABZdJoDBABZdJ4D
BABZdKEwDAMEAFl0owMEAFl0pgMEAVl0rAMEAFl0rwMEAFl0sTAMAwQAWXSzAwQA
WXS6MAwDBABZdL0DBABZdL4DBABZdMEDBABZdMowDAMEAVl00gMEA1l00AMEAFl0
2gMEAFl07wMEAVl08gMEAVl09gMEAFl0+gMEAVl0/AMEAFl0/zAMAwQBWXUGAwQB
WXUIAwQBWXUMAwQBWXUYMAwDBAJZdRwDBAFZdSADBAFZdSQwDAMEBll1QAMEAFl1
RDAMAwQBWXVGAwQBWXVUAwQCWXVYMAwDBAFZdV4DBAJZdWADBAFZdWYDBABZdW0w
DAMEBFl1cAMEAVl1dAMEAFl1gQMEAll1hAMEAFl1iwMEAVl1jjAMAwQBWXWeAwQC
WXWgMAwDBABZdacDBAFZdagDBABZdbwDBABZdb4wDAMEAFl11wMEAFl12gMEAFl1
3jAMAwQBWXXiAwQBWXXkAwQAWXX1AwQAWXX6AwQAWXX+MA0GCSqGSIb3DQEBCwUA
A4IBAQCYMk8PpXf4/Pa2wfXeFlSZ9Cgp33SDZPREhJ2PE5thxN7Uhvj6xTVQKZj6
Zjfr5q+NNQAJuTXCeitI9fln287C8xdAQ+InsCEWP0KJ+r6133Z3DjvqNlUwNyI3
Pg1+tIiXu2e8zN3D6v1FXhV/lnvGas3YF7C4RUtpzrQdjGCivZWDwadrkZmeg10l
3KvienF1YBfReG8d0BulR/p+315616QYdxBbG7peloDf1jNIAQrOy9Kx7kU911EP
U2DsiB1+3cF4IONM6+gXORM05oGjl7RvzQZjHzCSIvOWwpBdoJ5q/18a9qQ8YSyJ
dyOCBI3Iw9O2Hyweweu9AF9Lhxi9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org