Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-Ct4PESXH6OEyp46EfrUJWV2sok.roa
File: 1-Ct4PESXH6OEyp46EfrUJWV2sok.roa (raw, json)
Hash identifier: MpwsrLTwJ5iVzqbxsKYb5K/u5l3UwChN1JpRjQSvR3E=
Subject key identifier: F8:2B:78:3C:44:97:1F:A3:84:CA:9E:3A:11:FA:D4:25:65:76:B2:89
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AADBC15
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-Ct4PESXH6OEyp46EfrUJWV2sok.roa
Signing time: Sat 07 May 2022 20:16:50 +0000
ROA not before: Sat 07 May 2022 20:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179158037 (0xaadbc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 7 20:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f82b783c44971fa384ca9e3a11fad4256576b289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:ef:02:6a:99:f9:f6:79:e1:ce:2d:36:d8:
88:3e:e4:64:2a:7d:6c:25:2a:fc:29:12:f8:04:d7:
8a:01:22:07:67:39:aa:8d:ac:86:42:a8:df:13:2f:
38:09:d4:65:ac:d6:32:a7:b9:e1:d7:93:0a:3a:81:
dd:c6:5f:85:d1:24:6f:c4:48:13:80:15:f3:e4:ff:
68:3f:98:11:51:d5:bc:fc:05:fa:46:42:47:d5:f8:
6e:5f:af:b2:bd:a0:8a:a6:ea:6d:eb:62:1b:35:ba:
71:b6:0c:8d:d4:1e:7c:8e:f9:f6:22:35:b8:a5:6a:
c3:32:70:57:28:d6:f5:32:74:71:50:07:48:81:da:
78:88:c3:8e:78:d8:ce:41:4a:88:81:d4:60:c8:f1:
d3:14:b7:9f:10:fa:07:96:70:85:94:96:e1:14:32:
10:ea:69:be:a1:b0:e8:fd:e8:90:0e:ea:ed:75:6f:
54:2f:e1:eb:ef:7c:d8:eb:1c:65:14:cf:fe:2f:79:
40:c7:e8:79:43:5d:32:93:b7:3a:83:61:b5:27:87:
c8:ad:cd:e0:50:16:cf:67:c9:32:c2:f0:ca:47:87:
66:60:1b:2c:00:25:eb:6e:59:d8:d6:fa:19:c0:d3:
c4:96:b7:0f:22:cf:13:b4:70:37:d7:1b:82:b3:0a:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2B:78:3C:44:97:1F:A3:84:CA:9E:3A:11:FA:D4:25:65:76:B2:89
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-Ct4PESXH6OEyp46EfrUJWV2sok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.210.0/23
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.32.0/23
89.117.36.0/23
89.117.64.0/22
89.117.70.0/23
89.117.94.0/23
89.117.102.0/23
89.117.116.0/23
89.117.139.0/24
89.117.158.0-89.117.163.255
89.117.188.0/24
89.117.190.0/24
89.117.218.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:cb:4b:0a:3c:7b:db:a3:ea:1b:32:4c:5e:54:9c:53:07:18:
59:71:2b:d2:a3:cb:b3:3c:7d:9c:e4:2b:f0:be:39:d5:ae:cb:
2a:d5:fa:93:42:45:da:cb:c1:2f:cc:de:83:37:fa:63:e0:a3:
c6:42:15:d9:88:52:ac:b5:cb:14:f0:3d:8e:2d:f6:56:8f:9f:
ba:86:0f:06:c9:49:6a:15:8b:52:54:6c:b1:ff:aa:82:c4:c4:
3c:c0:15:63:9e:9d:ce:0f:13:8f:7a:53:df:93:b8:5e:5d:dc:
b5:10:08:6f:39:74:b9:c5:c4:01:0e:a4:6e:bf:de:f7:8c:1c:
a4:a3:f6:73:2c:c0:2f:2f:1e:f4:58:f2:47:05:2d:1e:84:a3:
fa:56:08:eb:66:e0:28:47:8d:1e:c3:14:56:95:1a:0f:60:60:
42:20:1a:2e:91:4a:a3:4e:b0:8a:7c:d9:05:6e:65:ba:cd:cf:
90:44:eb:48:cb:a2:19:02:1c:1f:9d:9b:71:3d:8c:7d:a2:70:
9c:40:30:8a:0d:fa:f3:63:69:3e:f1:dc:c4:db:dd:e9:08:50:
25:c8:4e:6b:91:05:c2:40:e7:12:cd:ad:25:e7:60:e8:86:21:
ff:4d:4b:88:c5:2f:5a:8e:ad:cb:4f:5c:d9:61:33:79:f4:01:
ab:0c:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-ams.rpki-client.org