Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/73dY-vXCliLWp2QNvbOsgFjpefs.roa
File: 73dY-vXCliLWp2QNvbOsgFjpefs.roa (raw, json)
Hash identifier: GbAanjpwDV9Ip57uMTsnUqh+rKEmRN6ZEqgnsmYL1Cc=
Subject key identifier: EF:77:58:FA:F5:C2:96:22:D6:A7:64:0D:BD:B3:AC:80:58:E9:79:FB
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182E3D038DFBB8D6DA63D1D66F3FA011E2E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/73dY-vXCliLWp2QNvbOsgFjpefs.roa
Signing time: Sun 28 Aug 2022 09:37:30 +0000
ROA not before: Sun 28 Aug 2022 09:37:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e3:d0:38:df:bb:8d:6d:a6:3d:1d:66:f3:fa:01:1e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 28 09:37:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef7758faf5c29622d6a7640dbdb3ac8058e979fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:38:bc:28:65:21:f2:97:9f:d8:d5:c8:57:
a8:ad:95:4b:f5:97:18:89:5d:d6:23:04:3d:d7:0d:
98:3c:d4:97:18:0e:00:0f:c8:ba:fa:2f:29:d0:1d:
7d:f3:c5:5e:fa:7f:66:bf:e6:b2:49:77:87:03:cb:
11:e2:7a:33:b8:5c:08:29:52:ce:62:88:64:a7:8f:
00:47:09:f4:4a:b4:d0:ba:13:b6:8d:c6:01:fe:21:
10:36:7d:2b:98:a9:90:6d:20:4e:42:b7:7d:74:49:
17:67:b8:1b:03:e4:d3:e8:5f:d1:02:63:77:73:71:
37:65:89:f2:c8:79:cb:73:ee:87:b6:d8:d5:a5:0c:
31:d0:f8:f9:3f:af:c3:ed:ed:e5:e0:f8:76:e4:d2:
42:7b:82:87:28:d9:66:0f:ed:d1:85:33:58:4f:37:
57:94:32:f3:ae:48:1d:2f:57:52:4d:48:14:a5:80:
11:43:ab:04:dc:4f:1a:c9:fa:e8:fe:1f:7e:ec:b0:
04:91:a8:93:dc:eb:25:f3:ec:08:98:79:d5:43:40:
98:93:88:40:10:7c:85:14:d2:03:33:7b:fa:6e:3f:
c8:43:5f:bc:77:72:ea:45:29:a7:5b:dc:43:b3:5c:
5f:25:b7:bc:93:4f:b1:e0:27:a8:80:53:4f:b5:f8:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:58:FA:F5:C2:96:22:D6:A7:64:0D:BD:B3:AC:80:58:E9:79:FB
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/73dY-vXCliLWp2QNvbOsgFjpefs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.92.0/24
89.116.108.0/24
89.116.125.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.184.0/23
89.116.210.0/23
89.116.252.0/24
89.117.8.0/23
89.117.32.0/23
89.117.94.0/23
89.117.102.0/23
89.117.116.0/23
89.117.190.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:1a:bf:40:ca:17:b9:a9:56:db:18:9d:db:6c:45:9a:1c:c1:
69:b3:f2:01:26:bd:31:cd:45:83:96:18:c0:56:18:2b:d3:6b:
4b:b9:e5:84:af:6e:36:80:65:43:9a:34:b6:ae:73:9e:94:27:
5e:ae:64:5b:ab:7e:06:7b:24:0b:eb:1f:77:aa:5c:36:dc:9a:
c3:41:ed:f8:9a:00:8a:b2:09:fe:95:b6:3d:da:9f:72:b1:ff:
d2:bd:2f:5e:60:05:19:e8:04:1d:37:fc:82:77:55:da:56:6c:
cb:92:9d:f5:bf:b5:d5:2d:4c:dc:7c:77:c7:5c:b8:b4:70:28:
70:bc:ae:4e:7b:07:4c:84:78:3e:c6:a4:00:a0:72:8a:11:ec:
9d:35:d1:e3:a8:58:1b:6a:6e:5e:a6:bf:17:2b:8f:ef:c7:0e:
34:73:d3:30:48:e9:b0:f8:79:83:db:62:70:47:3c:1e:7f:4a:
95:fd:05:d5:3c:44:9b:a8:40:66:1e:6f:0c:6e:6f:f6:07:d2:
26:63:6d:18:29:e5:79:4f:28:84:5e:fc:83:7a:a1:50:1e:d4:
5d:6b:a1:a6:db:4c:fa:60:e5:93:42:e3:20:8b:7a:f8:4f:e4:
7e:15:76:c6:65:a0:ed:6e:7d:e0:1e:52:31:b4:53:5f:df:0b:
cd:d3:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:09 2025 by rpki-client