Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/57SdP3wcT7NZFdOIwpq4grwr984.roa
File: 57SdP3wcT7NZFdOIwpq4grwr984.roa (raw, json)
Hash identifier: kxarXa4+4rQC+xKD1zO5bo16FupgqfQzSYDZ+XRhbpU=
Subject key identifier: E7:B4:9D:3F:7C:1C:4F:B3:59:15:D3:88:C2:9A:B8:82:BC:2B:F7:CE
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0181DA6558A6B0FE416CBF433064FB863EEB
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/57SdP3wcT7NZFdOIwpq4grwr984.roa
Signing time: Thu 07 Jul 2022 20:41:23 +0000
ROA not before: Thu 07 Jul 2022 20:41:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:65:58:a6:b0:fe:41:6c:bf:43:30:64:fb:86:3e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 7 20:41:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7b49d3f7c1c4fb35915d388c29ab882bc2bf7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:7b:b6:13:08:e5:dc:c8:02:9e:9c:5b:a7:
26:91:a8:a4:c9:b7:c6:14:f4:0c:ba:36:3a:7e:59:
6a:84:37:d8:cb:6a:d8:92:f5:6a:a8:56:d7:60:e5:
3f:bf:72:48:33:3c:67:cc:eb:da:6b:3f:0d:c0:85:
b4:93:a0:77:ed:b1:83:a2:30:2a:d3:84:ee:07:df:
ac:08:6a:dd:4f:fd:be:13:82:a6:e6:a0:e8:7e:14:
7c:7f:51:87:4f:ea:c4:9d:be:2d:d7:08:04:a8:62:
4b:a0:10:7d:60:97:fc:1f:67:b3:0a:bd:2f:f2:7c:
64:92:80:57:f7:d9:b7:64:47:5f:39:7a:d1:2d:ba:
9b:5e:fc:f9:65:26:68:6b:51:3a:29:63:5a:e7:11:
6a:6e:cc:76:2d:97:86:d4:29:38:6f:6a:20:14:81:
06:ae:91:ab:b3:de:e3:67:6c:d0:62:4f:bf:a8:31:
5c:75:04:6c:16:85:25:66:4b:0b:36:f0:23:cd:0e:
44:25:f4:3a:99:36:92:57:38:cc:13:47:69:c7:53:
21:b9:d2:95:ac:23:8b:79:e8:aa:6a:c9:0a:51:4a:
55:2f:8b:ca:85:6b:0c:d9:0a:78:43:a5:09:a7:4f:
ed:b4:8b:14:16:19:42:e3:30:dc:37:2e:ff:7b:a7:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B4:9D:3F:7C:1C:4F:B3:59:15:D3:88:C2:9A:B8:82:BC:2B:F7:CE
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/57SdP3wcT7NZFdOIwpq4grwr984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:aa:15:d9:1e:5e:a7:55:8a:d3:64:58:ff:d2:36:79:c6:53:
66:58:52:51:f3:e2:14:9a:bf:c3:f5:af:dc:46:aa:c1:eb:02:
6c:81:ea:4f:28:99:b0:8a:1e:56:03:81:ab:0b:4c:7f:0a:00:
f2:33:aa:4c:a3:50:9d:bb:a9:fe:1e:ac:e0:61:33:ed:d4:68:
a4:b0:45:f7:cd:6d:9a:8a:82:c2:7f:4d:cb:16:c1:5b:dc:7b:
67:da:00:a4:2f:4c:b3:4c:ae:0d:3a:eb:b5:0f:7b:b7:7a:fe:
6b:ec:25:4c:2c:ab:11:ed:85:38:1d:f6:73:cc:94:bf:c4:d7:
ca:17:e7:65:6c:4b:10:52:62:9d:8b:09:8c:3b:c8:c6:b6:2b:
c3:a3:da:72:d5:01:95:4a:64:b3:f2:18:d3:36:26:e8:c5:d5:
ff:a7:0d:3e:47:d2:e4:b9:8e:bd:c8:7c:da:54:b4:73:a9:88:
78:22:ef:34:2d:96:cf:f9:c0:05:a8:37:5e:10:1e:15:a2:47:
67:2b:e1:96:f1:a5:3b:c7:51:fd:e2:51:04:b6:6a:46:4b:c9:
d0:26:87:08:6f:f4:88:ab:13:fb:76:f1:98:27:d5:13:94:d7:
74:20:8a:5c:17:31:72:d5:72:89:9c:da:ef:02:88:d5:c8:b2:
b1:35:2a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org