Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/2Wa0H20RXxYmg6GknqppFE0JGCA.roa
File: 2Wa0H20RXxYmg6GknqppFE0JGCA.roa (raw, json)
Hash identifier: cJF4nYCVFJ6s4iaK/4Sx8Ram3qlABL7UFqdtDPvtj3A=
Subject key identifier: D9:66:B4:1F:6D:11:5F:16:26:83:A1:A4:9E:AA:69:14:4D:09:18:20
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D4A51B96A250044E9EF6FF1721702090
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/2Wa0H20RXxYmg6GknqppFE0JGCA.roa
Signing time: Thu 25 Aug 2022 10:56:06 +0000
ROA not before: Thu 25 Aug 2022 10:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:a5:1b:96:a2:50:04:4e:9e:f6:ff:17:21:70:20:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 25 10:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d966b41f6d115f162683a1a49eaa69144d091820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:83:1d:ad:0c:f1:1a:04:00:7d:f3:74:16:
f2:cc:b7:2b:0b:17:92:9b:c8:30:8f:5e:8f:db:5c:
33:21:f1:c5:cc:d0:c4:4f:df:bb:1d:89:3a:93:c2:
13:74:e9:91:ee:0f:47:84:78:18:80:63:b5:4d:66:
2e:df:fb:aa:6b:81:0b:ee:4f:ad:90:f9:70:3e:10:
5b:97:4c:ad:98:36:85:7b:91:03:25:ce:20:db:bd:
43:a4:52:ba:2f:4e:9a:f0:8e:60:fd:c0:00:ec:24:
30:9a:05:0c:5c:64:85:cf:93:8a:3d:5a:a1:db:66:
d8:a6:f5:d5:ac:de:e9:6c:7c:38:ca:df:04:2d:ea:
03:0b:9f:fc:20:0a:4f:ff:ca:3f:af:39:df:98:82:
9d:80:d2:7d:2a:25:e5:4a:b5:46:39:f1:79:93:ac:
29:0f:c7:2e:70:2b:9e:ca:7d:3d:dc:f0:14:ae:45:
74:a7:20:f2:3d:87:fe:8d:fd:9d:7c:e7:ff:b4:58:
51:60:bc:62:42:cb:ce:25:ca:a6:ce:7f:51:90:56:
ec:1e:18:b0:ed:73:59:54:8b:6c:ec:6f:f7:75:2f:
74:e3:c1:f9:44:94:50:c2:57:8e:de:de:01:06:06:
b6:67:c3:d6:bd:c0:4f:76:1c:60:14:50:e8:9a:5d:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:B4:1F:6D:11:5F:16:26:83:A1:A4:9E:AA:69:14:4D:09:18:20
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/2Wa0H20RXxYmg6GknqppFE0JGCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.132.0/24
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/24
89.117.8.0/23
89.117.12.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:50:f4:c0:09:ca:cd:9c:95:d1:0e:f8:9b:00:d6:db:37:1d:
98:f8:ff:28:ff:a2:04:0a:68:c6:27:d0:ab:d0:34:b4:b8:19:
75:27:f7:17:9c:78:be:49:44:11:a8:a3:cc:d0:e0:bf:80:ee:
6f:ca:de:52:de:2a:c8:f3:86:96:61:d9:ad:f4:c5:48:65:e9:
25:75:f6:47:b1:9c:fa:9b:a2:f2:c1:7e:17:76:4a:93:41:a5:
a4:7b:3e:46:97:13:19:59:9e:a0:89:8e:b3:a5:ef:e9:1d:17:
c1:c2:59:94:03:91:09:2c:c8:14:7d:49:30:2a:1a:f4:5c:88:
78:67:2a:5e:05:7a:cf:6b:c3:53:0d:f6:57:95:03:21:83:56:
f5:4d:36:62:dc:4b:f4:5e:a0:90:eb:dd:c0:90:0f:23:b6:9b:
35:82:ce:f7:6f:eb:24:4e:81:10:c7:8e:7e:e8:c5:1b:6f:9d:
c2:d1:c6:8e:93:2b:c9:3e:1b:82:92:d9:7a:9a:97:ce:31:cf:
88:84:9f:be:a6:d9:89:50:af:b6:28:2f:47:c4:4b:dd:fc:50:
fd:e2:bf:18:3d:fb:0b:7a:3b:ad:68:7e:35:ef:99:da:ab:1c:
c7:8e:49:76:c1:6c:c4:56:75:08:2e:53:fb:50:a2:c2:2d:01:
aa:5f:f8:da
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgISAYLUpRuWolAETp72/xchcCCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODI1MTA1NjA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTY2YjQxZjZkMTE1ZjE2MjY4M2ExYTQ5ZWFhNjkxNDRkMDkxODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXCDHa0M8RoEAH3zdBbyzLcrCxeS
m8gwj16P21wzIfHFzNDET9+7HYk6k8ITdOmR7g9HhHgYgGO1TWYu3/uqa4EL7k+t
kPlwPhBbl0ytmDaFe5EDJc4g271DpFK6L06a8I5g/cAA7CQwmgUMXGSFz5OKPVqh
22bYpvXVrN7pbHw4yt8ELeoDC5/8IApP/8o/rznfmIKdgNJ9KiXlSrVGOfF5k6wp
D8cucCueyn093PAUrkV0pyDyPYf+jf2dfOf/tFhRYLxiQsvOJcqmzn9RkFbsHhiw
7XNZVIts7G/3dS9048H5RJRQwleO3t4BBga2Z8PWvcBPdhxgFFDoml2AKQIDAQAB
o4IDNzCCAzMwHQYDVR0OBBYEFNlmtB9tEV8WJoOhpJ6qaRRNCRggMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvMldhMEgyMFJYeFltZzZHa25xcHBGRTBKR0NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBSwYIKwYBBQUHAQcBAf8EggE6MIIBNjCCATIEAgABMIIB
KgMEAVQu6gMEAVYmsgMEAlYmuAMEAVYmygMEAVYm9gMEAVl0OgMEAVl0WAMEAFl0
XDAMAwQBWXRqAwQAWXRsMAwDBABZdH0DBAdZdAADBABZdIQDBABZdIcwDAMEAll0
lAMEAFl0lgMEAFl0oQMEAFl0owMEAFl0pgMEAVl0rAMEAFl0rwMEAFl0sTAMAwQD
WXS4AwQAWXS6AwQBWXTSAwQAWXTaAwQAWXT8AwQBWXUIAwQBWXUMMAwDBAJZdRwD
BAFZdSADBAFZdSQDBANZdUgDBAFZdVQDBAJZdVgDBAFZdV4DBAFZdWYDBABZdW0D
BAFZdXQDBABZdYEDBAJZdYQDBAFZdY4DBAFZdZ4DBABZdb4DBABZddcDBAFZdeQD
BABZdfUDBABZdfowDQYJKoZIhvcNAQELBQADggEBALhQ9MAJys2cldEO+JsA1ts3
HZj4/yj/ogQKaMYn0KvQNLS4GXUn9xeceL5JRBGoo8zQ4L+A7m/K3lLeKsjzhpZh
2a30xUhl6SV19kexnPqbovLBfhd2SpNBpaR7PkaXExlZnqCJjrOl7+kdF8HCWZQD
kQksyBR9STAqGvRciHhnKl4Fes9rw1MN9leVAyGDVvVNNmLcS/ReoJDr3cCQDyO2
mzWCzvdv6yROgRDHjn7oxRtvncLRxo6TK8k+G4KS2Xqal84xz4iEn76m2YlQr7Yo
L0fES938UP3ivxg9+wt6O61ofjXvmdqrHMeOSXbBbMRWdQguU/tQosItAapf+No=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org