Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-qV1gRF6suwboGqEJa4C6eHwJ1E.roa
File: 1-qV1gRF6suwboGqEJa4C6eHwJ1E.roa (raw, json)
Hash identifier: iIXCVY+/Os/utxeXf/Zgdbyqr7+rSWpJ8iJa5dhBUR4=
Subject key identifier: FA:A5:75:81:11:7A:B2:EC:1B:A0:6A:84:25:AE:02:E9:E1:F0:27:51
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B640E3C
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-qV1gRF6suwboGqEJa4C6eHwJ1E.roa
Signing time: Tue 14 Jun 2022 08:52:46 +0000
ROA not before: Tue 14 Jun 2022 08:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191106620 (0xb640e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 14 08:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faa57581117ab2ec1ba06a8425ae02e9e1f02751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:0c:25:ee:49:01:66:e5:79:e8:50:a2:dd:
55:47:b5:b7:6f:e9:be:55:58:02:bb:ad:8f:f8:2a:
6d:ac:02:f5:1d:5a:32:af:4b:da:4b:cb:ae:11:35:
b8:ba:c2:b0:b3:56:3b:74:f7:1e:07:9b:48:5e:90:
1b:c4:44:c7:c1:78:a9:9f:6a:a9:9d:74:64:87:41:
0f:cc:a1:ed:34:6d:3b:1c:a2:42:b8:2f:ab:97:b3:
91:18:6c:e6:fe:51:3e:42:2f:b5:36:ef:30:ce:29:
e8:d8:a8:14:c7:7a:7c:8a:1a:68:12:bd:dd:db:5b:
91:a3:68:2e:d7:64:97:17:e7:f1:b4:31:5b:87:a1:
f5:c2:31:25:84:62:3d:af:02:f6:7a:fb:bf:b1:e3:
c5:20:70:b7:c5:0f:8a:84:70:af:1c:80:e2:53:cf:
1a:19:8b:f6:c2:f5:75:72:38:a4:58:92:01:c4:f4:
93:b5:d8:0a:5b:66:7d:2e:ae:f7:6f:24:e1:58:1d:
aa:e0:c5:d9:5e:8c:ff:14:2b:8a:af:c2:24:40:44:
22:9b:93:ba:88:03:7a:09:66:b0:32:17:4f:ac:c4:
19:a2:89:29:74:5d:79:a9:b9:2f:c8:2e:98:90:da:
bd:53:30:1b:e9:a6:2f:b5:5a:99:e7:db:a4:fe:31:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:75:81:11:7A:B2:EC:1B:A0:6A:84:25:AE:02:E9:E1:F0:27:51
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-qV1gRF6suwboGqEJa4C6eHwJ1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.210.0/23
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.32.0/23
89.117.36.0/23
89.117.64.0/22
89.117.70.0/23
89.117.94.0/23
89.117.102.0/23
89.117.116.0/23
89.117.158.0-89.117.163.255
89.117.190.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2b:b2:2e:d9:35:a7:bc:16:4c:e5:a1:d6:e5:a1:e6:7c:66:
b7:04:00:c9:44:70:1c:84:b7:36:81:ab:99:0a:b2:27:fa:88:
fb:9b:92:db:39:12:a5:41:09:f2:c1:5c:73:63:f2:f3:44:f0:
bf:33:e7:b1:c0:da:af:f8:12:51:0d:1b:75:fa:41:3f:db:4d:
87:98:88:f7:80:69:75:2a:d4:13:5f:e0:aa:7e:60:97:82:40:
b8:ff:d5:2a:b7:bd:61:d6:92:c4:47:52:78:33:bd:46:48:16:
1c:0b:1c:85:cc:17:59:ec:5e:45:52:d6:c1:92:f2:28:9f:17:
22:7e:a1:b1:ee:0c:d2:61:0e:4c:cd:e8:3b:d9:df:ce:df:16:
d7:16:36:ea:4d:df:48:86:c6:00:93:fc:c5:e8:f3:f4:c6:67:
5f:97:95:e1:cd:ed:d8:1d:11:bc:85:bc:0e:3b:0f:b3:ae:d0:
23:d4:08:ed:f6:14:c1:7d:dd:36:81:1c:96:f0:9c:78:89:6a:
40:26:98:db:bf:54:69:b4:27:c3:c3:ae:79:4c:97:9b:8e:61:
af:68:aa:76:a6:cb:fe:3a:b6:06:e6:a2:64:71:fb:ef:6e:c3:
22:18:79:cb:fa:c5:b7:bd:44:76:ea:aa:72:e1:47:e5:47:a3:
c3:cf:ec:ba
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIEC2QOPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDYx
NDA4NTI0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFhNTc1ODExMTdh
YjJlYzFiYTA2YTg0MjVhZTAyZTllMWYwMjc1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKunDCXuSQFm5XnoUKLdVUe1t2/pvlVYArutj/gqbawC9R1a
Mq9L2kvLrhE1uLrCsLNWO3T3HgebSF6QG8REx8F4qZ9qqZ10ZIdBD8yh7TRtOxyi
Qrgvq5ezkRhs5v5RPkIvtTbvMM4p6NioFMd6fIoaaBK93dtbkaNoLtdklxfn8bQx
W4eh9cIxJYRiPa8C9nr7v7HjxSBwt8UPioRwrxyA4lPPGhmL9sL1dXI4pFiSAcT0
k7XYCltmfS6u928k4VgdquDF2V6M/xQriq/CJEBEIpuTuogDeglmsDIXT6zEGaKJ
KXRdeam5L8gumJDavVMwG+mmL7VamefbpP4xrisCAwEAAaOCAzAwggMsMB0GA1Ud
DgQWBBT6pXWBEXqy7BugaoQlrgLp4fAnUTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
LzEtcVYxZ1JGNnN1d2JvR3FFSmE0QzZlSHdKMUUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Ix
LzUzMTBkYS02ODIxLTQ2NzMtOWU5OC05ZDYwMDFmNzhhNzAvMS94R21GaGVYcjBS
eVduSDdVb3lEdHI4blJlQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
ggFDBggrBgEFBQcBBwEB/wSCATIwggEuMIIBKgQCAAEwggEiAwQBViayAwQCVia4
AwQBVibKAwQBVib2AwQBWXQ6AwQBWXREAwQBWXRYAwQAWXRcMAwDBAFZdGoDBABZ
dGwwDAMEAFl0fQMEB1l0ADAMAwQBWXSCAwQAWXSEAwQAWXSHAwQAWXSJAwQAWXSN
MAwDBAJZdJQDBABZdJYDBABZdKEDBABZdKMDBABZdKYDBABZdLMwDAMEA1l0uAME
AFl0ujAMAwQAWXS9AwQAWXS+AwQBWXTSAwQBWXT8AwQAWXT/AwQBWXUIAwQBWXUM
AwQBWXUgAwQBWXUkAwQCWXVAAwQBWXVGAwQBWXVeAwQBWXVmAwQBWXV0MAwDBAFZ
dZ4DBAJZdaADBABZdb4DBABZdd4DBAFZdeQDBABZdfUDBABZdfowDQYJKoZIhvcN
AQELBQADggEBADUrsi7ZNae8FkzlodbloeZ8ZrcEAMlEcByEtzaBq5kKsif6iPub
kts5EqVBCfLBXHNj8vNE8L8z57HA2q/4ElENG3X6QT/bTYeYiPeAaXUq1BNf4Kp+
YJeCQLj/1Sq3vWHWksRHUngzvUZIFhwLHIXMF1nsXkVS1sGS8iifFyJ+obHuDNJh
DkzN6DvZ387fFtcWNupN30iGxgCT/MXo8/TGZ1+XleHN7dgdEbyFvA47D7Ou0CPU
CO32FMF93TaBHJbwnHiJakAmmNu/VGm0J8PDrnlMl5uOYa9oqnamy/46tgbmomRx
++9uwyIYecv6xbe9RHbqqnLhR+VHo8PP7Lo=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-ams.rpki-client.org