Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/02I1LoEilrDFODK8711arGvIeCw.roa
File: 02I1LoEilrDFODK8711arGvIeCw.roa (raw, json)
Hash identifier: dkCwyE6Q3SYKxTd3QMBALr5dQh/xf/lln6oskYW53tQ=
Subject key identifier: D3:62:35:2E:81:22:96:B0:C5:38:32:BC:EF:5D:5A:AC:6B:C8:78:2C
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B9A573C
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/02I1LoEilrDFODK8711arGvIeCw.roa
Signing time: Sun 26 Jun 2022 12:37:22 +0000
ROA not before: Sun 26 Jun 2022 12:37:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194664252 (0xb9a573c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 26 12:37:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d362352e812296b0c53832bcef5d5aac6bc8782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:72:6c:9c:dd:6f:ad:ec:01:d0:93:2e:fa:
34:52:6b:e5:eb:ef:b2:69:26:9e:3e:8d:43:1b:8a:
b0:e0:fd:90:f1:08:3d:fd:06:2a:e1:5d:77:93:63:
a2:e3:3c:8c:9d:b6:ba:01:b3:29:63:3f:d4:f9:bf:
9b:9e:c4:11:2d:cf:23:ec:a2:79:09:2c:7b:f4:f5:
46:1e:75:ef:af:be:bb:c6:10:3c:fe:88:71:d2:50:
99:bd:bc:74:46:34:39:d4:f5:07:e9:74:ee:e1:b3:
a5:20:ad:c4:58:13:2b:9f:e2:45:8c:b8:a9:79:5c:
74:90:e0:26:6d:b3:13:fe:88:78:da:cc:f4:e5:62:
24:cf:0b:8d:70:39:ca:29:75:f3:56:0c:99:c7:55:
f0:44:62:50:8f:7c:e1:a0:26:f4:41:7b:16:52:47:
4d:51:7d:e6:9e:f0:7d:7b:bc:83:c7:9b:46:a3:7a:
80:5a:fd:cb:a5:00:55:d2:82:fe:66:45:de:3c:74:
e1:eb:12:d7:cd:71:fa:e2:f2:06:39:24:4a:ae:5a:
35:5f:d1:5c:e7:a3:fe:6e:85:93:30:28:0f:5d:c8:
b0:1a:50:df:9c:33:fc:d4:8a:7e:aa:d0:53:18:49:
15:67:ae:36:0a:1c:bd:ba:40:74:19:16:99:4b:bc:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:62:35:2E:81:22:96:B0:C5:38:32:BC:EF:5D:5A:AC:6B:C8:78:2C
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/02I1LoEilrDFODK8711arGvIeCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:81:f0:5e:36:9e:84:bc:89:fc:f7:dc:b1:9f:c1:c2:14:e6:
c3:ce:0d:ef:68:c1:86:e2:9b:b9:2a:f9:48:43:87:60:9f:e8:
97:8b:82:1e:3c:e9:17:0d:de:03:02:94:07:87:49:f3:2c:83:
05:6c:56:9c:b4:24:8e:3d:7d:08:9d:4a:fd:4d:4a:0e:c7:2c:
28:6c:14:30:6a:29:40:95:4e:77:37:aa:6b:d7:d7:12:45:7d:
25:42:67:aa:6f:df:66:8e:71:7e:86:c9:a3:a2:ee:de:be:28:
d9:9e:91:ac:88:f0:13:84:47:94:a2:f4:57:ab:87:cb:5c:0d:
89:c5:29:1b:68:a3:c9:90:9b:5a:68:d4:25:57:66:5a:0a:c8:
bf:30:9e:ad:29:45:8a:6a:ee:40:4c:49:9a:c2:e3:8a:5f:71:
ea:79:b9:5b:7d:cf:27:3d:87:58:e8:f5:e1:d1:27:fb:a2:b7:
83:c2:69:05:b8:ea:db:48:fb:e2:7f:8f:de:11:d0:1e:eb:e4:
ce:e5:18:6b:65:66:84:42:68:9a:a4:31:1b:0f:b1:8f:2e:7a:
99:0b:44:c2:dc:64:5d:24:09:ee:21:1e:3e:4c:0d:2e:c3:11:
fb:03:71:5c:06:64:3c:4d:4c:ce:da:41:b9:70:3d:fd:22:5d:
1d:e5:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org