Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mlfhJEUHcvTlgJKsnylhU3_2Tn4.roa
File: mlfhJEUHcvTlgJKsnylhU3_2Tn4.roa (raw, json)
Hash identifier: nJBr2Grb01wkBOFEQLN7PXPVSQIIHg60kVtJ64JMyAU=
Subject key identifier: 9A:57:E1:24:45:07:72:F4:E5:80:92:AC:9F:29:61:53:7F:F6:4E:7E
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01841103CC42718A748DC77DFF2FA2E032B0
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mlfhJEUHcvTlgJKsnylhU3_2Tn4.roa
Signing time: Tue 25 Oct 2022 21:19:32 +0000
ROA not before: Tue 25 Oct 2022 21:19:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.117.80.0/22 maxlen: 24
89.117.104.0/22 maxlen: 24
89.116.32.0/21 maxlen: 24
89.117.16.0/21 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.80.0/21 maxlen: 24
89.117.40.0/21 maxlen: 24
89.117.164.0/24 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:11:03:cc:42:71:8a:74:8d:c7:7d:ff:2f:a2:e0:32:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 25 21:19:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a57e124450772f4e58092ac9f2961537ff64e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:61:15:4e:fd:85:42:98:40:08:05:55:8c:
4a:29:8a:4f:d5:a1:e0:3a:5d:0c:a7:3d:a9:f7:5a:
55:8f:b6:48:27:4b:77:6d:21:fa:64:ef:cb:85:f9:
3f:b8:db:02:66:d4:2b:90:00:51:a3:01:7e:52:d2:
6c:28:05:a0:72:b5:83:ca:60:dd:54:2c:86:74:72:
5b:50:aa:a2:95:2b:f6:8f:6e:a4:25:9a:fc:58:2e:
43:36:06:1d:75:b3:ef:d7:0b:6e:7c:5e:f1:c3:64:
c2:93:26:06:73:f6:98:ad:0f:b1:94:6d:a7:e4:ce:
d1:3b:ea:61:94:58:c4:22:66:7e:fa:32:1d:09:f0:
17:d3:36:87:9a:20:e3:2e:ea:74:20:da:de:db:1c:
14:48:54:79:6a:cd:2b:a3:9e:46:5d:fb:42:eb:2b:
c4:74:09:a3:c8:c3:3c:2b:6a:bf:26:cd:54:a8:96:
74:ef:96:9b:c9:60:15:e7:f1:d5:92:ea:3c:6f:4e:
13:83:03:2c:3b:a0:e0:d1:d6:9a:ca:b1:8b:bf:45:
c6:6e:03:4a:37:16:74:fd:5a:03:e7:52:0f:5b:68:
2d:3f:14:5e:b3:88:de:69:0b:02:49:c9:a6:1e:c8:
ff:e9:70:0d:a5:80:ce:19:cf:0b:49:6d:5a:4f:73:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:57:E1:24:45:07:72:F4:E5:80:92:AC:9F:29:61:53:7F:F6:4E:7E
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mlfhJEUHcvTlgJKsnylhU3_2Tn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
89.116.32.0/21
89.116.80.0/21
89.116.180.0/22
89.117.16.0/21
89.117.40.0/21
89.117.80.0/22
89.117.104.0/22
89.117.164.0/24
Signature Algorithm: sha256WithRSAEncryption
84:aa:d8:69:32:82:00:e4:f4:e5:01:0f:80:97:b0:5f:50:d7:
74:9a:06:a6:a9:81:5f:a1:cc:db:87:e6:4d:cd:30:d2:82:f7:
ce:f8:75:b3:50:e6:cd:04:19:27:e1:4f:2e:b1:da:95:ce:44:
3e:04:d1:a2:db:59:a5:72:a9:e1:83:2e:3d:e6:14:2d:f1:d3:
73:6d:76:6c:d2:43:b2:29:7c:20:49:92:77:5e:78:de:7d:2a:
44:41:c3:df:4b:2b:b7:66:27:f7:7b:64:d8:f3:6a:12:bf:75:
7a:c8:a0:72:a2:a5:0b:e0:90:9e:bb:cc:da:3f:2c:27:e4:bd:
f7:0a:8a:0e:c8:19:06:af:35:4a:29:20:63:67:89:ea:10:ee:
0b:02:1b:3e:5b:03:5b:32:c2:95:37:c8:7c:37:dc:d5:19:08:
13:01:db:17:13:81:dc:c8:b2:f8:94:07:fe:25:6a:90:28:31:
d0:37:e7:83:5c:9c:4d:7f:a1:33:f5:ad:c9:d8:2d:80:03:ee:
af:0b:1b:6b:a4:3e:af:b6:a1:cb:28:3c:dc:d3:6b:57:b1:7e:
26:81:6a:87:63:02:df:9e:14:4f:37:e1:da:39:13:c9:8b:ed:
43:05:c6:ea:8b:64:aa:0b:1b:9c:1b:6b:15:f6:95:fa:29:db:
4b:fc:79:c4
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYQRA8xCcYp0jcd9/y+i4DKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDI1MjExOTMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTU3ZTEyNDQ1MDc3MmY0ZTU4MDkyYWM5ZjI5NjE1MzdmZjY0ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFhhFU79hUKYQAgFVYxKKYpP1aHg
Ol0Mpz2p91pVj7ZIJ0t3bSH6ZO/Lhfk/uNsCZtQrkABRowF+UtJsKAWgcrWDymDd
VCyGdHJbUKqilSv2j26kJZr8WC5DNgYddbPv1wtufF7xw2TCkyYGc/aYrQ+xlG2n
5M7RO+phlFjEImZ++jIdCfAX0zaHmiDjLup0INre2xwUSFR5as0ro55GXftC6yvE
dAmjyMM8K2q/Js1UqJZ075abyWAV5/HVkuo8b04TgwMsO6Dg0daayrGLv0XGbgNK
NxZ0/VoD51IPW2gtPxRes4jeaQsCScmmHsj/6XANpYDOGc8LSW1aT3P4BQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFJpX4SRFB3L05YCSrJ8pYVN/9k5+MB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvbWxmaEpFVUhjdlRsZ0pLc255bGhVM18yVG40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCVC7sAwQD
WXQgAwQDWXRQAwQCWXS0AwQDWXUQAwQDWXUoAwQCWXVQAwQCWXVoAwQAWXWkMA0G
CSqGSIb3DQEBCwUAA4IBAQCEqthpMoIA5PTlAQ+Al7BfUNd0mgamqYFfoczbh+ZN
zTDSgvfO+HWzUObNBBkn4U8usdqVzkQ+BNGi21mlcqnhgy495hQt8dNzbXZs0kOy
KXwgSZJ3XnjefSpEQcPfSyu3Zif3e2TY82oSv3V6yKByoqUL4JCeu8zaPywn5L33
CooOyBkGrzVKKSBjZ4nqEO4LAhs+WwNbMsKVN8h8N9zVGQgTAdsXE4HcyLL4lAf+
JWqQKDHQN+eDXJxNf6Ez9a3J2C2AA+6vCxtrpD6vtqHLKDzc02tXsX4mgWqHYwLf
nhRPN+HaORPJi+1DBcbqi2SqCxucG2sV9pX6KdtL/HnE
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org