Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4u8rFGWMoMdMaP7LEMBAxkQHUHg.roa
File: 4u8rFGWMoMdMaP7LEMBAxkQHUHg.roa (raw, json)
Hash identifier: 1do/Z3wUOaGUD2lEqeEhhZpVg4s8vVWgGJrqjJGOfmc=
Subject key identifier: E2:EF:2B:14:65:8C:A0:C7:4C:68:FE:CB:10:C0:40:C6:44:07:50:78
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09F9B227
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4u8rFGWMoMdMaP7LEMBAxkQHUHg.roa
Signing time: Sat 19 Mar 2022 10:24:52 +0000
ROA not before: Sat 19 Mar 2022 10:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.216.0/23 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.117.168.0/23 maxlen: 24
89.117.167.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
86.38.220.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.246.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.117.6.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167359015 (0x9f9b227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Mar 19 10:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2ef2b14658ca0c74c68fecb10c040c644075078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:bd:de:e6:58:01:3b:f1:4a:b1:c6:30:28:
80:73:b3:57:bd:64:e8:8b:16:36:63:8f:9e:cf:69:
cf:df:c1:1c:4d:7b:23:a5:af:51:7f:e0:b4:78:02:
51:59:36:c7:db:93:36:e6:bb:41:2d:f3:64:e1:3d:
ce:52:f9:cb:11:68:e4:b4:9a:76:5d:6f:7e:fc:71:
7a:99:46:a2:8f:5a:c1:11:98:1f:08:3c:ad:f8:e1:
d1:40:40:85:c6:0c:9d:ae:a4:39:12:cf:62:0c:77:
20:48:4f:89:65:20:35:81:ed:c3:d8:1e:54:62:78:
95:c3:91:c3:f9:99:37:5d:71:ae:5b:44:2f:46:eb:
ca:b3:a5:94:6e:19:17:29:5e:92:03:66:e0:ef:d5:
24:cd:09:86:86:54:1f:30:42:1e:1f:9d:79:78:8f:
b1:df:3d:1e:c2:94:cc:16:49:3f:41:0b:66:ae:ee:
ef:9d:6b:b0:47:00:6c:3c:7f:af:e4:6b:cf:f1:cd:
70:b2:5a:0f:3e:03:2e:15:06:63:64:83:43:c1:3e:
10:c1:9c:f6:a3:8e:44:a6:59:22:4b:35:1d:e7:3d:
2f:15:93:8a:d4:b1:fb:f4:1a:1d:e2:cd:7b:82:d8:
82:76:4e:d7:58:af:99:0d:f2:d4:37:56:c6:33:2e:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EF:2B:14:65:8C:A0:C7:4C:68:FE:CB:10:C0:40:C6:44:07:50:78
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4u8rFGWMoMdMaP7LEMBAxkQHUHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.4.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.220.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.202.0/24
89.116.210.0/23
89.116.218.0/24
89.116.239.0/24
89.116.242.0/23
89.116.246.0/23
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.167.0-89.117.169.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6f:04:79:69:29:6a:e1:ba:d5:d8:57:b6:84:03:64:98:f1:
a0:92:94:74:de:98:4d:17:80:04:6a:94:17:58:ac:65:fb:04:
e8:90:8e:ea:f8:3a:7a:7d:a7:00:5d:e8:10:d7:ec:ed:36:ec:
1d:51:a3:8e:09:b6:b4:84:86:78:43:99:8f:80:9d:b4:cc:d8:
0d:d7:3f:56:61:fd:8e:db:86:b4:5a:3a:d6:a2:86:2b:b3:73:
cf:49:12:7e:fd:0d:03:35:5e:79:93:a5:e8:14:ac:67:80:6b:
99:15:d4:7d:4a:7b:49:ca:be:29:0f:13:5c:69:c0:b8:43:d1:
01:d1:6f:2d:34:87:35:0d:d1:cd:6d:6c:14:52:d3:bc:56:aa:
10:82:23:41:70:30:2c:c3:a6:25:8e:2a:76:68:a1:1c:aa:55:
42:a8:1d:6b:4e:35:07:43:b0:da:53:a0:4b:42:26:09:90:f5:
0b:87:1a:47:04:cb:83:00:c4:2c:b4:f2:04:72:e5:26:bd:8c:
ae:e6:c9:98:92:e7:1a:90:b8:58:18:43:5b:29:87:ec:95:fe:
9b:84:24:a4:47:51:d8:29:99:3a:b5:2a:05:96:c3:b5:f4:38:
d3:c2:9d:ad:7a:44:eb:c6:6b:0f:8d:89:33:ff:f2:6a:c5:17:
0a:54:86:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org