Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lM2_2ajYHyJN-ia-Zw_g2EwfBLI.roa
File: lM2_2ajYHyJN-ia-Zw_g2EwfBLI.roa (raw, json)
Hash identifier: CxhxjZkuZERUWOHZQsPc/Dm9TpBPMJrSXTkXw+W/2a8=
Subject key identifier: 94:CD:BF:D9:A8:D8:1F:22:4D:FA:26:BE:67:0F:E0:D8:4C:1F:04:B2
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 096834E2
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lM2_2ajYHyJN-ia-Zw_g2EwfBLI.roa
Signing time: Wed 09 Feb 2022 07:14:27 +0000
ROA not before: Wed 09 Feb 2022 07:14:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.248.0/21 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
89.117.172.0/22 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157824226 (0x96834e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 9 07:14:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94cdbfd9a8d81f224dfa26be670fe0d84c1f04b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:94:40:10:68:7c:51:16:40:0b:e9:b8:d2:
b5:0d:f1:89:b0:98:42:1e:b7:fa:ca:27:33:20:2b:
8c:f4:b3:d1:47:b5:bc:c6:95:a4:60:ee:ab:47:59:
5e:1d:b8:af:42:78:4b:55:56:0e:69:c3:35:71:34:
6c:ad:c7:dd:11:be:13:64:14:9d:41:fd:9c:c1:5b:
f2:56:c8:84:c2:08:15:e8:58:10:55:80:19:ab:73:
75:d0:0d:9d:88:5f:ea:6c:bd:68:44:2b:a0:01:ce:
3e:b4:d9:47:5d:0e:e7:5f:d5:19:10:ed:55:9e:dd:
b2:a2:e0:33:74:d3:7e:8c:7e:78:1b:0b:f6:77:0c:
ee:23:95:3b:9e:52:f3:22:f1:a6:5e:46:4b:03:9a:
d5:11:03:0d:f2:73:11:b5:4d:11:68:9a:76:68:06:
4c:95:12:b3:19:69:33:22:be:23:6f:31:53:91:a4:
c7:82:ef:da:32:3a:46:a8:e5:5f:41:94:51:15:55:
39:99:27:9d:0f:1f:33:29:75:d3:df:d1:72:b0:98:
46:7d:11:e2:e9:48:28:26:f1:93:86:cb:57:4c:3d:
4c:81:5f:e6:5a:3a:2a:2b:d6:02:e4:7f:46:53:8b:
21:28:7b:4a:f6:26:8d:f7:3d:88:42:fa:3b:ea:2b:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CD:BF:D9:A8:D8:1F:22:4D:FA:26:BE:67:0F:E0:D8:4C:1F:04:B2
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lM2_2ajYHyJN-ia-Zw_g2EwfBLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
84.46.240.0/20
86.38.37.0/24
86.38.156.0/24
86.38.177.0/24
86.38.235.0/24
86.38.238.0/24
86.38.248.0/21
89.116.64.0/22
89.117.172.0/22
Signature Algorithm: sha256WithRSAEncryption
00:05:ae:4a:9f:f8:33:2d:c8:ce:38:c1:36:e6:99:41:83:e2:
f6:8d:20:08:91:a8:1f:7f:74:db:0c:ff:3c:4a:1e:1b:1b:aa:
23:7e:02:69:9b:59:df:c3:3f:14:35:65:87:2b:a8:c2:76:b2:
e8:2f:43:c9:4a:05:32:77:65:35:77:89:73:03:84:01:fe:02:
5d:43:2a:76:37:ed:aa:ac:a6:b6:c1:15:9e:6a:12:6a:9d:dc:
d3:81:21:33:47:45:33:af:35:cc:ee:ea:be:fc:05:30:73:b2:
f5:6c:57:e5:b9:ad:33:5e:b8:33:52:d6:b2:a0:4c:78:f0:fe:
85:96:cb:60:b3:c4:e4:78:79:8c:cf:36:d0:32:9e:63:34:76:
43:5f:4b:2c:60:fd:ed:6e:ee:30:cf:fc:f1:62:9b:11:ec:c9:
5f:84:f5:44:6d:27:b6:ae:68:20:e9:5f:17:9c:2d:63:be:49:
b8:5d:14:86:fb:97:d1:2b:ea:d8:b5:cd:b8:8e:b1:b0:91:71:
70:b1:1a:6d:19:80:46:e2:6a:74:e4:40:27:7a:1d:b4:3a:75:
5a:37:63:23:02:75:d6:26:91:0d:00:62:f5:06:df:6c:e8:1c:
7a:e6:7e:11:29:ce:5f:05:30:fb:ba:54:2b:ad:a0:3b:2a:a8:
2b:98:27:65
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIECWg04jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIw
OTA3MTQyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTRjZGJmZDlhOGQ4
MWYyMjRkZmEyNmJlNjcwZmUwZDg0YzFmMDRiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANqrlEAQaHxRFkAL6bjStQ3xibCYQh63+sonMyArjPSz0Ue1
vMaVpGDuq0dZXh24r0J4S1VWDmnDNXE0bK3H3RG+E2QUnUH9nMFb8lbIhMIIFehY
EFWAGatzddANnYhf6my9aEQroAHOPrTZR10O51/VGRDtVZ7dsqLgM3TTfox+eBsL
9ncM7iOVO55S8yLxpl5GSwOa1REDDfJzEbVNEWiadmgGTJUSsxlpMyK+I28xU5Gk
x4Lv2jI6RqjlX0GUURVVOZknnQ8fMyl109/RcrCYRn0R4ulIKCbxk4bLV0w9TIFf
5lo6KivWAuR/RlOLISh7SvYmjfc9iEL6O+orooMCAwEAAaOCAj8wggI7MB0GA1Ud
DgQWBBSUzb/ZqNgfIk36Jr5nD+DYTB8EsjAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L2xNMl8yYWpZSHlKTi1pYS1ad19nMkV3ZkJMSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBV
BggrBgEFBQcBBwEB/wRGMEQwQgQCAAEwPAMEAFQuyAMEBFQu8AMEAFYmJQMEAFYm
nAMEAFYmsQMEAFYm6wMEAFYm7gMEA1Ym+AMEAll0QAMEAll1rDANBgkqhkiG9w0B
AQsFAAOCAQEAAAWuSp/4My3IzjjBNuaZQYPi9o0gCJGoH3902wz/PEoeGxuqI34C
aZtZ38M/FDVlhyuownay6C9DyUoFMndlNXeJcwOEAf4CXUMqdjftqqymtsEVnmoS
ap3c04EhM0dFM681zO7qvvwFMHOy9WxX5bmtM164M1LWsqBMePD+hZbLYLPE5Hh5
jM820DKeYzR2Q19LLGD97W7uMM/88WKbEezJX4T1RG0ntq5oIOlfF5wtY75JuF0U
hvuX0Svq2LXNuI6xsJFxcLEabRmARuJqdORAJ3odtDp1WjdjIwJ11iaRDQBi9Qbf
bOgceuZ+ESnOXwUw+7pUK62gOyqoK5gnZQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org