Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/6afq2Af2dSLLyV-7HnGQUdaAar8.roa
File: 6afq2Af2dSLLyV-7HnGQUdaAar8.roa (raw, json)
Hash identifier: znl9U+MfU/ru+r2v3hEywjWu3vOnGY9adwUc8UJ6tC0=
Subject key identifier: E9:A7:EA:D8:07:F6:75:22:CB:C9:5F:BB:1E:71:90:51:D6:80:6A:BF
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B4D1301
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/6afq2Af2dSLLyV-7HnGQUdaAar8.roa
Signing time: Thu 09 Jun 2022 18:38:03 +0000
ROA not before: Thu 09 Jun 2022 18:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189600513 (0xb4d1301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 9 18:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9a7ead807f67522cbc95fbb1e719051d6806abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:0a:7c:59:0c:b0:1d:b7:e9:65:fb:be:83:
b2:34:0b:da:dd:fa:e1:6e:b7:84:03:94:02:bf:38:
74:2e:db:c2:47:3c:55:6c:da:94:0c:7e:be:fa:6c:
b9:fb:2b:48:73:a2:48:e2:01:19:b6:ed:30:6b:bc:
88:3b:a4:55:4b:c2:33:34:1f:d3:28:32:d9:6d:fb:
b1:30:50:40:84:71:77:55:11:a9:23:79:f4:cc:b1:
77:a0:a1:c9:bf:8a:d2:cb:1b:35:f0:0d:e8:c0:99:
38:35:32:f9:8a:59:b8:59:a2:08:ee:ca:5a:0c:3a:
be:92:21:da:01:39:47:3f:ff:00:1b:ed:73:b5:a2:
05:d9:20:a7:fd:f3:90:9e:c0:ca:3f:20:2d:ec:4c:
71:d3:f7:9a:57:53:bb:f4:d9:de:14:84:d4:23:7d:
8d:07:9d:56:6b:c1:84:cc:7e:01:d1:79:68:0b:80:
3f:7d:ef:ef:2b:f4:2f:4c:e9:a6:0a:19:2b:b5:71:
95:89:fa:d0:e2:f9:d2:16:7f:c4:e3:8c:4c:80:46:
47:e8:b5:89:de:fb:25:16:da:8e:8e:d3:f7:70:84:
d0:71:64:c6:cf:f3:82:de:f6:85:99:02:54:34:2e:
d3:5d:d3:62:96:a5:4c:26:2d:0a:c8:59:92:6a:4a:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:EA:D8:07:F6:75:22:CB:C9:5F:BB:1E:71:90:51:D6:80:6A:BF
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/6afq2Af2dSLLyV-7HnGQUdaAar8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.210.0/23
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.32.0/23
89.117.36.0/23
89.117.64.0/22
89.117.70.0/23
89.117.94.0/23
89.117.102.0/23
89.117.116.0/23
89.117.158.0-89.117.163.255
89.117.190.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:32:94:ef:32:4f:a0:d1:41:56:fa:9d:fd:cf:04:cf:54:8e:
ba:aa:5b:eb:a6:65:28:1e:82:6d:44:0e:a9:41:76:3f:48:91:
7b:c1:89:dd:53:7f:a5:64:ad:d0:39:f2:3a:70:20:90:4e:eb:
3a:9a:98:fc:f5:61:f9:96:ee:bd:80:62:10:7e:a2:f9:ab:ed:
1b:aa:2e:7d:1c:b3:2e:e3:fd:8b:97:db:3f:0a:5c:31:6c:8c:
cc:ee:70:4c:1f:c3:d3:9c:70:8b:35:32:d3:0d:84:17:f8:a1:
bd:03:0e:58:d6:8a:58:86:df:18:2a:a4:73:a4:b1:bd:e8:d1:
96:dd:21:77:5a:76:13:64:2e:64:b4:53:ba:d1:a4:10:e8:08:
12:cc:49:1d:e9:b4:bb:d1:a5:38:4a:05:69:bf:b1:53:54:80:
b9:5f:16:15:a0:20:3f:c3:1e:50:f7:ec:83:3d:e1:4b:c3:a9:
98:b9:fb:01:ba:f7:3d:90:94:16:f3:55:3b:bc:1a:63:14:41:
df:27:0a:18:0e:3d:ed:55:b4:2e:24:6a:d3:55:c8:5c:ff:18:
96:46:cc:8f:8a:19:10:33:71:9a:2b:69:f3:77:ac:9b:57:54:
6a:83:44:9e:81:82:35:d3:95:6a:db:a3:30:bf:d1:66:13:06:
cb:ff:d2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org