Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4l5rjVlMCwLe3A8e7yJds-RV9to.roa
File: 4l5rjVlMCwLe3A8e7yJds-RV9to.roa (raw, json)
Hash identifier: fMx5LHsvUhjQBw2zVuVEUKYaNkCd5FJ53pykTZToTmo=
Subject key identifier: E2:5E:6B:8D:59:4C:0B:02:DE:DC:0F:1E:EF:22:5D:B3:E4:55:F6:DA
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AE9CE8B
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4l5rjVlMCwLe3A8e7yJds-RV9to.roa
Signing time: Wed 18 May 2022 08:20:19 +0000
ROA not before: Wed 18 May 2022 08:20:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183094923 (0xae9ce8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 18 08:20:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e25e6b8d594c0b02dedc0f1eef225db3e455f6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:f4:e5:dc:df:d2:53:66:2d:87:58:6f:b2:
f8:5e:b3:aa:b2:95:1a:7e:6f:8f:7e:06:68:05:e9:
aa:18:56:3a:de:73:2f:4f:c1:fd:fe:cf:9a:8e:8c:
fc:4c:d6:e4:19:a1:86:72:68:ff:54:fd:08:23:15:
33:39:11:08:c5:03:10:32:18:1f:22:9f:fe:a5:67:
38:b3:90:f2:8c:0e:fd:6b:7d:7b:bc:32:cf:61:78:
57:cb:52:94:7e:4c:b8:42:a3:24:0e:07:4d:05:90:
2a:a3:c6:21:b8:d1:4f:29:41:8b:0b:e0:a8:1a:bd:
10:6e:a3:60:e9:9d:78:ea:34:26:93:82:64:c0:f5:
3c:9e:6f:73:e3:4f:dd:2b:29:42:e4:83:93:ab:96:
3c:a7:50:b6:46:2f:fc:bd:44:de:7b:d9:73:7f:aa:
dc:48:ad:92:0f:5d:3e:48:5f:00:f4:be:10:74:35:
2a:df:0c:dd:9f:1b:3f:a8:80:3a:0e:e0:7b:c1:83:
ff:ed:2b:3a:b2:6e:15:5f:be:e8:dc:d2:f0:8d:cd:
0d:b2:20:2e:72:69:ac:ca:01:eb:a1:ad:20:c2:11:
5c:b1:65:9d:c4:55:4e:7c:90:92:a1:93:f9:c1:39:
c3:e0:79:4e:df:31:59:54:44:f3:4c:a3:29:6f:f4:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5E:6B:8D:59:4C:0B:02:DE:DC:0F:1E:EF:22:5D:B3:E4:55:F6:DA
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4l5rjVlMCwLe3A8e7yJds-RV9to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0/22
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a3:73:3c:9f:c8:48:d5:29:e1:b3:7b:5a:85:32:16:4f:c9:
06:93:2b:02:d3:c1:32:43:b3:c6:90:81:ae:53:e7:40:f1:3a:
3a:30:5e:91:ed:96:ad:c0:73:8b:7a:d7:3f:a2:2a:8a:57:5e:
34:9c:a0:5e:95:c1:33:4b:c9:f0:cf:7e:88:12:53:06:70:2f:
45:9c:6b:6f:18:bd:1a:69:5d:51:87:09:bc:5c:93:19:2a:ea:
df:de:a2:4b:eb:df:b2:ca:16:9c:01:4f:06:d5:59:10:db:9e:
fa:cb:78:7d:5d:27:b1:ea:46:cb:23:ed:be:8d:30:c2:3d:25:
ff:4d:59:db:7a:9e:cb:e0:e3:30:87:42:b0:e0:cf:41:86:de:
5e:68:ed:98:10:68:e8:fd:8a:35:56:1b:6c:6d:57:30:15:10:
36:28:08:05:13:70:c0:92:c4:91:86:8c:57:c2:e8:5d:76:86:
e6:54:45:85:f1:19:88:41:5a:cd:e3:49:ae:f9:da:f9:f9:f2:
58:5a:3b:77:10:2f:32:f2:b8:7b:67:0b:a8:2e:5f:c5:53:b3:
1c:c0:92:52:38:82:04:ca:6b:92:33:fb:c5:7c:0e:3f:6f:84:
67:ca:8e:b8:82:da:06:fa:06:f0:cb:fa:b9:6f:ed:40:67:cc:
26:7f:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org