Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-fUXMXADDE7MJ5VFR22wfaQoJG0.roa
File: 1-fUXMXADDE7MJ5VFR22wfaQoJG0.roa (raw, json)
Hash identifier: 5uCinEiYdX8/7oz1S1n0QLNTMPPSML6HH2v91bumnk0=
Subject key identifier: F9:F5:17:31:70:03:0C:4E:CC:27:95:45:47:6D:B0:7D:A4:28:24:6D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AE9A6DA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-fUXMXADDE7MJ5VFR22wfaQoJG0.roa
Signing time: Wed 18 May 2022 08:20:18 +0000
ROA not before: Wed 18 May 2022 08:20:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.117.6.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183084762 (0xae9a6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 18 08:20:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9f5173170030c4ecc279545476db07da428246d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:af:4f:ac:f1:16:e1:62:b5:89:4e:7d:04:
08:fc:84:38:bc:93:a4:1b:bb:96:b3:68:bc:aa:e8:
d4:5d:ea:da:a3:2c:1e:79:87:a0:15:9a:5e:bb:9b:
67:86:29:57:22:ce:97:3f:5d:d0:e3:a6:7a:26:b0:
1d:af:24:24:e3:a0:8f:c9:f6:90:e7:9a:57:57:d4:
05:cd:76:ea:db:ed:e8:05:5b:88:f0:08:4c:a7:c0:
a8:b1:77:ba:c2:1c:85:1f:8e:fb:90:90:fa:b2:98:
5f:c0:39:bc:da:7a:c8:9f:91:48:7e:68:dd:f5:6d:
59:9a:40:d4:e7:d2:05:e5:6f:8f:fe:ce:ac:e2:5d:
b1:97:24:aa:55:34:27:db:a0:f3:a6:c9:14:29:3c:
41:bb:d9:4f:db:35:00:ae:3e:b1:6c:10:be:15:a3:
e8:35:34:c1:40:eb:f9:4c:7f:ab:c7:8c:51:6a:8f:
1d:ba:32:0c:9a:72:1e:71:f9:92:8b:f4:06:44:9c:
0a:ed:6f:bf:e0:82:a2:3a:9c:cb:e5:67:d0:72:64:
c9:fd:61:6c:62:fd:77:17:2d:dd:29:44:90:92:24:
8f:c4:49:6e:cb:3b:48:c6:01:8a:b0:84:a0:aa:36:
c4:d2:d5:5b:61:4f:fe:04:7d:fa:1a:87:13:56:f6:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:17:31:70:03:0C:4E:CC:27:95:45:47:6D:B0:7D:A4:28:24:6D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-fUXMXADDE7MJ5VFR22wfaQoJG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0/22
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:63:c3:c8:5e:54:b0:38:ca:81:05:81:b3:f5:b3:ea:5c:85:
0f:3b:6f:e4:d7:9f:70:c6:d3:8f:83:75:56:1a:93:ce:dc:75:
34:78:71:a4:e5:4e:68:e7:b0:71:82:e4:21:f3:4d:74:dc:7e:
e3:fe:23:6a:a4:3e:6a:fb:c0:b6:36:9e:ce:31:15:3f:1e:e6:
d8:70:bb:05:19:1c:5b:a9:0e:cd:13:84:2f:71:b5:69:61:08:
45:b1:05:4a:6c:ca:0f:80:05:2a:d5:19:14:d7:ef:57:30:24:
07:e9:a9:e7:1e:f2:39:47:13:6a:2e:14:93:b1:7d:f1:f2:26:
92:2a:a1:3c:68:81:d5:c0:4f:fc:b5:06:02:09:c0:1d:19:0b:
dc:31:08:34:58:19:65:d3:8d:8d:95:4c:e6:37:3d:31:0a:46:
8e:62:95:54:45:1a:43:30:f9:52:a6:c3:5f:8c:e1:11:24:20:
17:e1:44:b1:b9:6e:44:cd:6d:0c:4f:f8:ad:e8:f3:0f:66:b6:
d3:eb:87:57:cb:08:45:8a:a0:ef:e3:a8:27:ee:90:30:e2:cc:
97:2e:0b:29:be:08:b8:30:11:0f:1a:56:b5:14:b7:7f:fc:ef:
95:b4:3f:42:2c:fe:64:ed:1b:48:f6:a2:77:b6:6d:c4:d2:15:
56:8f:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org