Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9ELPCXa7MimRFitkOcuVnCiT_AY.roa
File: 9ELPCXa7MimRFitkOcuVnCiT_AY.roa (raw, json)
Hash identifier: Fy4mgXeQWRmc1Qh8O0EaUVsZsnayOmCpYFElwpUcv4c=
Subject key identifier: F4:42:CF:09:76:BB:32:29:91:16:2B:64:39:CB:95:9C:28:93:FC:06
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 096202DB
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9ELPCXa7MimRFitkOcuVnCiT_AY.roa
Signing time: Tue 08 Feb 2022 07:26:13 +0000
ROA not before: Tue 08 Feb 2022 07:26:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.216.0/23 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.117.168.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.72.0/22 maxlen: 24
86.38.220.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.246.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.212.0/22 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157418203 (0x96202db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 8 07:26:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f442cf0976bb322991162b6439cb959c2893fc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:94:d4:97:76:bd:be:e3:7e:b7:bf:6c:96:
e5:82:04:fb:7a:2b:74:52:7e:c1:d1:f6:a4:c2:19:
e6:7e:a9:b1:15:3f:2e:10:1d:78:46:ec:b6:b6:55:
65:2b:ab:c6:75:2d:52:84:d7:7c:4a:a6:70:af:c9:
b0:86:9a:ae:cb:fa:d5:a4:8f:9d:fd:68:20:42:73:
af:e6:86:0a:e1:27:4d:71:a8:61:25:2e:78:57:0c:
ae:6a:43:9b:36:2b:9e:f3:4c:cf:10:0e:e4:db:d6:
1e:db:21:60:9e:d9:15:35:db:3d:cc:6e:28:08:88:
b7:1f:dd:67:eb:4a:2c:b3:98:3d:6a:27:51:df:02:
b5:da:b4:08:30:22:78:68:1d:9b:94:4b:ac:e2:e5:
a2:a7:db:6e:d7:08:bb:cb:c2:ad:6f:7b:02:af:1a:
7d:80:cf:76:64:f8:2e:b5:b0:8a:65:aa:04:4d:20:
67:6d:fb:e5:de:a2:f9:cc:b2:57:d2:53:26:10:f5:
f4:18:1a:66:a8:e5:06:38:ef:c5:25:e9:db:9b:65:
ca:3f:49:8f:7f:cc:93:97:d4:57:ef:fe:01:ee:f7:
4c:82:d8:d8:0e:75:49:0a:d1:21:d4:1d:cd:2b:14:
2a:17:f9:8b:90:06:e9:f4:fe:cd:9e:52:33:6b:ac:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:42:CF:09:76:BB:32:29:91:16:2B:64:39:CB:95:9C:28:93:FC:06
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9ELPCXa7MimRFitkOcuVnCiT_AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.4.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.220.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0/23
89.116.72.0-89.116.76.255
89.116.88.0/23
89.116.91.0/24
89.116.106.0/23
89.116.126.0/23
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.163.0-89.116.166.255
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.180.0-89.116.185.255
89.116.210.0-89.116.215.255
89.116.218.0/24
89.116.239.0/24
89.116.242.0/23
89.116.246.0/23
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0/22
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.168.0/23
89.117.190.0/24
89.117.216.0/23
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
06:81:10:20:c0:c6:62:d8:52:07:ea:55:88:2d:b4:3b:7e:28:
26:88:b2:25:06:0b:c1:f7:ec:ae:d1:33:c9:fe:cc:40:97:8e:
10:bd:63:cd:28:ec:b8:fa:0f:20:f7:41:d1:c2:ad:c4:d3:d0:
f6:ec:b6:ef:b8:78:88:67:e9:df:5e:87:8c:62:e0:41:20:af:
f5:2b:97:30:4a:35:79:bc:c8:68:40:89:9b:f8:e6:a1:8b:6b:
c2:5a:0b:38:99:27:5b:29:b5:d1:45:53:b2:65:6c:2e:92:db:
94:08:c9:6c:38:f3:25:3b:14:0f:2f:36:a2:1f:b1:19:55:03:
26:2f:88:e4:cb:72:19:a4:b2:3e:e2:0e:71:8f:04:2e:0c:45:
65:ed:89:da:3e:a3:1e:c1:d9:67:d0:75:3c:15:9a:54:4d:e0:
15:87:79:1a:5b:04:4f:0e:6b:83:f3:11:c2:64:67:8e:f1:f7:
17:07:30:d7:b9:d1:a9:65:09:99:17:59:44:c1:84:13:be:83:
df:e3:01:7b:91:23:f2:db:6c:bb:79:c6:6d:e0:5c:86:77:36:
6d:54:d2:1e:ee:4c:65:34:82:e7:fa:17:ca:6e:a9:0d:26:91:
e0:32:9a:f4:43:3e:44:46:07:35:02:83:88:4d:2f:ce:fa:7a:
7e:8d:0b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org