Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/hGQ8aVgIHD4xmUXL3hxSOWa54qU.roa
File: hGQ8aVgIHD4xmUXL3hxSOWa54qU.roa (raw, json)
Hash identifier: TYTC8OuXGiYwXWE1CxSv7tmN3LUJr08YXr9P8IFSFZo=
Subject key identifier: 84:64:3C:69:58:08:1C:3E:31:99:45:CB:DE:1C:52:39:66:B9:E2:A5
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B7E91F8
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/hGQ8aVgIHD4xmUXL3hxSOWa54qU.roa
Signing time: Wed 22 Jun 2022 14:42:32 +0000
ROA not before: Wed 22 Jun 2022 14:42:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 89.117.16.0/21 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.80.0/21 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.220.0/23 maxlen: 24
89.116.224.0/21 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
84.46.236.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192844280 (0xb7e91f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 22 14:42:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84643c6958081c3e319945cbde1c523966b9e2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:a2:ef:3d:ba:5a:31:2f:0f:12:54:43:c0:
96:16:e6:75:92:3c:0f:68:1d:25:73:f7:78:e6:87:
5e:b8:34:40:71:f4:00:77:5f:48:96:03:07:be:84:
1b:87:10:83:f9:3c:0e:d1:b8:fa:3d:a3:29:d2:eb:
2e:20:b7:86:15:f1:7b:73:62:05:47:7b:56:d8:d4:
89:3e:a5:ba:a5:9b:72:f3:3a:52:2b:4f:fe:1a:b9:
7f:05:5f:d5:f6:97:1b:65:fd:d8:83:99:b5:be:c0:
ce:91:f2:d1:b7:7f:41:20:9a:c2:12:4e:38:b0:17:
32:e8:e5:fe:d3:c5:2a:2d:1d:da:d0:25:7c:64:28:
c5:e8:38:f2:1a:4a:fe:35:c7:4e:5d:45:47:ce:cd:
bf:8d:70:8b:0b:11:f7:e5:c4:1b:fb:e2:c7:8b:e7:
6a:04:30:34:15:7a:f2:fd:71:71:d5:25:ec:14:2f:
a7:f0:e4:93:ee:d3:6e:0e:38:53:68:cd:b6:9c:d1:
00:b1:86:dd:64:53:3d:3e:40:2f:fc:4a:ae:c8:ed:
83:2d:9c:b1:57:0e:47:38:48:fd:48:4a:bc:57:58:
76:dc:fd:bb:22:51:ec:72:d1:38:a6:c7:dc:9d:bd:
a4:a5:a6:dd:f5:1c:7b:f4:f4:dc:66:6c:fc:23:20:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:3C:69:58:08:1C:3E:31:99:45:CB:DE:1C:52:39:66:B9:E2:A5
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/hGQ8aVgIHD4xmUXL3hxSOWa54qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0-84.46.239.255
86.38.4.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.220.0/23
89.116.80.0/21
89.116.224.0/21
89.116.242.0/23
89.116.246.0/23
89.117.16.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:68:d5:f4:4d:53:46:1d:ab:b2:7e:30:2a:45:b2:f1:93:a0:
cf:eb:85:66:f5:29:e5:bd:9f:42:21:90:ac:c9:a2:a8:54:28:
a8:c1:70:5a:21:3c:a3:8a:b9:92:76:6e:0f:92:d0:f5:ad:4d:
34:7a:89:e9:84:bb:f1:0f:68:e3:c3:c7:83:ec:27:f2:7f:2c:
ee:1e:37:56:27:dc:9c:0b:f9:19:b2:37:a6:cf:36:06:a5:2c:
e9:8f:2d:16:13:f5:9e:a9:7d:d7:68:3c:da:f7:d7:df:2c:2b:
37:37:73:ac:7d:c8:9a:c9:79:1e:50:1d:d8:5d:b7:03:eb:37:
8e:c5:d1:3c:52:b0:43:67:01:70:c3:f9:8b:a0:c7:f7:22:38:
12:a2:2e:61:d1:7a:88:d8:a8:05:cb:aa:b1:3f:5a:6f:6e:16:
f5:97:3e:42:8c:e8:90:02:77:66:ec:7c:51:e9:7f:9d:47:18:
3d:1d:10:3b:33:8a:89:29:a0:91:a3:97:64:de:55:c9:80:5e:
68:e1:9f:fc:2c:48:ef:15:77:20:26:29:6b:0a:12:52:7c:df:
9a:18:7e:0f:8e:46:fa:e4:2e:ab:f8:70:4a:8c:28:91:00:90:
40:3c:85:99:d1:95:ae:01:1d:7d:14:50:62:12:4d:0a:1f:96:
05:98:28:79
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIEC36R+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDYy
MjE0NDIzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQ2NDNjNjk1ODA4
MWMzZTMxOTk0NWNiZGUxYzUyMzk2NmI5ZTJhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrpou89uloxLw8SVEPAlhbmdZI8D2gdJXP3eOaHXrg0QHH0
AHdfSJYDB76EG4cQg/k8DtG4+j2jKdLrLiC3hhXxe3NiBUd7VtjUiT6luqWbcvM6
UitP/hq5fwVf1faXG2X92IOZtb7AzpHy0bd/QSCawhJOOLAXMujl/tPFKi0d2tAl
fGQoxeg48hpK/jXHTl1FR87Nv41wiwsR9+XEG/vix4vnagQwNBV68v1xcdUl7BQv
p/Dkk+7Tbg44U2jNtpzRALGG3WRTPT5AL/xKrsjtgy2csVcORzhI/UhKvFdYdtz9
uyJR7HLROKbH3J29pKWm3fUce/T03GZs/CMgGMcCAwEAAaOCAk0wggJJMB0GA1Ud
DgQWBBSEZDxpWAgcPjGZRcveHFI5ZrnipTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L2hHUThhVmdJSEQ0eG1VWEwzaHhTT1dhNTRxVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBj
BggrBgEFBQcBBwEB/wRUMFIwUAQCAAEwSjAMAwQBVC7qAwQEVC7gAwQBViYEAwQB
ViayAwQCVia4AwQBVibKAwQBVibcAwQDWXRQAwQDWXTgAwQBWXTyAwQBWXT2AwQD
WXUQMA0GCSqGSIb3DQEBCwUAA4IBAQB7aNX0TVNGHauyfjAqRbLxk6DP64Vm9Snl
vZ9CIZCsyaKoVCiowXBaITyjirmSdm4PktD1rU00eonphLvxD2jjw8eD7Cfyfyzu
HjdWJ9ycC/kZsjemzzYGpSzpjy0WE/WeqX3XaDza99ffLCs3N3OsfciayXkeUB3Y
XbcD6zeOxdE8UrBDZwFww/mLoMf3IjgSoi5h0XqI2KgFy6qxP1pvbhb1lz5CjOiQ
Andm7HxR6X+dRxg9HRA7M4qJKaCRo5dk3lXJgF5o4Z/8LEjvFXcgJilrChJSfN+a
GH4Pjkb65C6r+HBKjCiRAJBAPIWZ0ZWuAR19FFBiEk0KH5YFmCh5
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org