Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-p7QqPTckHl0A6oddjbrcyHuj5Q.roa
File: 1-p7QqPTckHl0A6oddjbrcyHuj5Q.roa (raw, json)
Hash identifier: As2ff3oFsB59lDeGqZnEqZDZ06chpQTY3M/fPrT0DtE=
Subject key identifier: FA:9E:D0:A8:F4:DC:90:79:74:03:AA:1D:76:36:EB:73:21:EE:8F:94
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A1528B8
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-p7QqPTckHl0A6oddjbrcyHuj5Q.roa
Signing time: Wed 30 Mar 2022 10:57:47 +0000
ROA not before: Wed 30 Mar 2022 10:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.216.0/23 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.117.168.0/23 maxlen: 24
89.117.167.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
86.38.220.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.246.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.117.6.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169158840 (0xa1528b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Mar 30 10:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa9ed0a8f4dc90797403aa1d7636eb7321ee8f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:3d:5b:31:e0:34:72:47:9d:f1:93:69:2b:
6e:dc:1e:27:5e:aa:d4:4f:8f:d6:0b:c3:3b:23:3c:
f6:2d:52:e9:79:63:c7:c9:28:f3:f2:e0:16:eb:8a:
8e:c5:65:b9:51:66:58:3a:a6:07:e5:84:39:a2:83:
c0:f8:c1:0a:cb:0e:01:00:f3:d2:12:14:40:89:3f:
68:2f:8b:98:03:18:56:ca:1c:6f:5b:56:0f:52:b2:
43:0a:ea:bb:da:ab:24:03:f3:4b:33:a1:57:a6:75:
c7:65:d6:4c:fe:32:6e:9e:44:a7:70:92:d5:24:e5:
7c:8e:c2:3a:17:2a:b8:63:1c:d1:30:e6:55:38:36:
2a:dd:23:2e:10:d1:c2:55:94:c2:51:5c:e1:3d:c9:
da:61:40:39:98:ac:0a:11:02:20:94:22:68:e1:b1:
8d:57:f4:aa:13:a3:eb:a7:84:1f:c2:11:37:8a:5b:
63:d0:7a:a5:f5:2e:31:31:af:62:cd:8e:da:af:34:
4f:ff:cf:c8:2a:1f:ec:71:b6:29:4d:d4:3e:bc:3c:
2f:01:f5:9d:6c:9d:f0:b4:e5:b8:21:79:90:80:11:
c3:4c:e1:90:f9:24:29:65:3f:33:31:ec:d7:f3:1b:
ec:8f:9e:a3:b5:0f:a8:9d:b8:2d:6d:7f:d0:59:b7:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:D0:A8:F4:DC:90:79:74:03:AA:1D:76:36:EB:73:21:EE:8F:94
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-p7QqPTckHl0A6oddjbrcyHuj5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.4.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.220.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.202.0/24
89.116.210.0/23
89.116.218.0/24
89.116.239.0/24
89.116.242.0/23
89.116.246.0/23
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.167.0-89.117.169.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:67:e2:1f:8c:50:9a:62:d3:e1:91:88:74:06:62:a7:a8:4d:
18:71:28:84:19:2b:df:e8:97:24:97:0d:5a:4b:a2:1b:6c:b0:
bc:29:1a:24:c0:03:a6:94:b1:73:9b:88:b6:f6:b9:fa:d5:ec:
eb:db:ed:f0:65:7a:5a:28:4a:9a:46:72:f3:a7:af:f0:0b:92:
2c:29:63:54:5a:fe:99:e5:59:06:b9:29:6b:55:10:77:78:57:
e8:2e:a3:5b:0e:b3:22:97:91:fe:bb:9a:42:6e:49:3e:23:00:
2f:3c:4e:ae:a0:3f:cd:5c:45:50:9f:37:c2:99:5d:9a:06:73:
6f:19:f9:b2:05:3b:59:2d:cb:8d:02:4c:db:70:ca:f2:ed:a5:
5f:f4:69:7a:7a:cf:0d:b4:a6:00:c7:b5:5e:d0:65:b8:38:f1:
c3:f4:51:d8:85:2b:13:1e:06:6f:43:78:0a:70:bd:27:4b:db:
8f:90:2c:7d:c4:e1:4b:35:9f:2a:13:e7:0b:fe:0f:bf:35:9a:
71:05:e8:fb:55:98:a2:46:f0:44:c6:ca:1d:73:e3:d4:15:8f:
ee:dd:0d:50:54:15:90:cc:85:09:30:e5:af:80:5c:ba:aa:17:
65:7a:80:9b:3a:45:1c:09:63:76:a2:62:d4:12:ff:46:2a:2e:
8a:ec:0d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org