Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1LLvRtoDfoPkiZ5i0Itu52GKCsw.roa
File: 1LLvRtoDfoPkiZ5i0Itu52GKCsw.roa (raw, json)
Hash identifier: 5VJ1/MRx6ftiTm1iMDxVAJGHfZL93flqMMWXB+6L+GQ=
Subject key identifier: D4:B2:EF:46:DA:03:7E:83:E4:89:9E:62:D0:8B:6E:E7:61:8A:0A:CC
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B634445
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1LLvRtoDfoPkiZ5i0Itu52GKCsw.roa
Signing time: Tue 14 Jun 2022 08:52:46 +0000
ROA not before: Tue 14 Jun 2022 08:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191054917 (0xb634445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 14 08:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4b2ef46da037e83e4899e62d08b6ee7618a0acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:88:16:37:b5:f2:c7:06:51:02:5b:8e:12:
aa:b2:9d:cb:b2:ab:2d:35:b5:c9:a9:21:28:cd:cb:
ad:cc:ad:5e:43:6e:09:a0:2d:0c:58:c9:c5:a1:d5:
fa:eb:29:6d:3c:14:05:38:f1:d5:39:b7:eb:dc:62:
27:1f:3e:1b:2e:b6:c4:e8:ef:eb:a8:a7:91:22:eb:
a2:f2:89:0a:79:19:6f:4e:6a:e8:b4:26:8e:be:c9:
1c:9e:44:cb:4d:c9:3d:0d:12:44:14:50:a6:6a:c1:
b3:e5:77:4b:76:bd:07:98:c0:6c:c5:74:72:a8:2d:
4c:53:72:4c:d4:c0:6f:66:29:c6:aa:34:c4:1b:7a:
4a:16:83:d8:db:88:9a:bb:f3:f2:52:b5:04:5e:b1:
81:41:27:c9:fd:91:f0:0c:4a:56:6f:78:ca:5e:0d:
cd:bb:7b:d5:5d:85:38:e2:a9:07:0f:dd:d8:4f:36:
ff:db:fe:17:ab:ba:bf:82:4c:15:51:db:65:70:78:
fd:42:c8:50:2a:23:15:c1:42:8f:59:33:36:fe:b2:
21:59:53:41:b6:c0:19:b7:ed:f6:9b:9d:64:df:cc:
18:d3:36:63:f6:32:fc:a7:fb:f2:10:b6:59:df:62:
0f:b8:bd:e6:a1:a6:b8:0b:37:c3:29:62:fc:b5:e7:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B2:EF:46:DA:03:7E:83:E4:89:9E:62:D0:8B:6E:E7:61:8A:0A:CC
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1LLvRtoDfoPkiZ5i0Itu52GKCsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0/22
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:00:76:67:91:38:4d:58:9a:70:15:10:93:98:d0:b1:63:61:
40:4e:a8:1f:20:66:0d:60:51:11:29:c6:fd:81:f4:0a:d0:e6:
ac:70:9b:64:b8:fc:d4:0b:f2:13:ef:f2:32:0a:52:3f:91:2d:
34:07:e0:70:bf:c3:70:28:90:38:44:bc:68:8b:4d:dc:57:ef:
78:aa:d2:cf:8c:b4:3c:d8:f5:c9:40:ae:48:2b:ad:a4:4a:85:
3d:96:c4:66:45:8e:aa:f4:8b:65:53:2b:0f:39:e6:75:53:7f:
c0:d9:d5:e7:05:c5:6f:c3:35:bd:12:44:af:09:a9:7d:2d:40:
a5:4a:4f:ba:5c:7e:0e:b7:a1:be:64:45:dd:0a:f6:83:12:c5:
bf:ef:b7:b0:0a:6b:e0:1a:57:25:21:6f:e3:a8:c2:bf:b0:b1:
3e:f6:18:c1:67:c2:8f:74:2a:ed:0d:80:d0:e4:27:c2:55:4a:
4a:b0:f4:d2:ea:fb:2d:33:ed:11:8e:4f:55:40:7c:72:ca:37:
6e:6f:36:1c:8e:1f:29:42:fc:a0:9b:39:62:e3:e1:34:4e:b6:
5d:3d:af:1b:28:b0:d5:02:4c:70:7c:6f:29:f1:94:eb:3c:56:
7a:b4:d3:93:dc:e9:6c:8c:45:03:9f:4b:59:51:cf:bd:05:cf:
de:7f:b5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org