Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/BE3etBqU3xDrb-VPWdZtt2EsYOY.roa
File: BE3etBqU3xDrb-VPWdZtt2EsYOY.roa (raw, json)
Hash identifier: w3/WbGX46wV9Yu4C8wnWAyyVa1kB3v+5FNdZsr/GYuc=
Subject key identifier: 04:4D:DE:B4:1A:94:DF:10:EB:6F:E5:4F:59:D6:6D:B7:61:2C:60:E6
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182CA36ABFB06B4D4EC3832146018DCDEA0
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/BE3etBqU3xDrb-VPWdZtt2EsYOY.roa
Signing time: Tue 23 Aug 2022 10:19:16 +0000
ROA not before: Tue 23 Aug 2022 10:19:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:36:ab:fb:06:b4:d4:ec:38:32:14:60:18:dc:de:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 23 10:19:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=044ddeb41a94df10eb6fe54f59d66db7612c60e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:d8:9d:bd:55:b7:10:03:f5:e0:42:52:9d:
0d:4f:fc:f2:48:b9:de:7b:01:28:c7:5a:cd:0b:ff:
61:06:81:5d:e0:48:39:3e:c0:9b:ea:d2:18:8a:9d:
56:f1:3b:31:9e:e3:64:57:54:56:3c:96:de:d3:b2:
9c:23:44:73:d2:db:87:ea:16:67:8b:f8:fc:53:c6:
07:e2:e7:a3:54:0f:8d:e2:5b:2e:d2:e1:00:0e:28:
55:61:3f:1c:0d:ef:17:4c:47:0b:26:47:3e:4c:7b:
04:8e:b3:7b:b3:34:50:10:a4:6f:fd:14:4c:85:e3:
bf:f7:10:4a:6e:54:4e:6c:f2:3f:28:6b:c4:b3:68:
94:23:b9:1d:d8:20:bf:06:e8:3a:4d:a7:87:90:ce:
1b:96:62:2d:77:5f:d7:f9:50:c5:03:c4:ed:b6:f2:
01:43:5d:f7:0b:32:d6:52:e7:90:20:60:57:49:06:
62:03:b1:dc:23:c9:20:2f:68:ef:b3:55:c0:89:47:
5f:c5:c1:d7:b2:2e:7b:4f:87:a4:05:d3:ef:a2:9d:
cc:b8:55:f0:88:f0:e1:a8:50:61:a7:23:1b:87:38:
a4:98:b0:4e:3e:d0:70:b4:52:af:37:eb:09:5a:5d:
5e:33:10:15:9b:a2:8d:87:91:6a:30:8c:b2:eb:b9:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4D:DE:B4:1A:94:DF:10:EB:6F:E5:4F:59:D6:6D:B7:61:2C:60:E6
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/BE3etBqU3xDrb-VPWdZtt2EsYOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.132.0/24
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.252.0/23
89.117.8.0/23
89.117.12.0/23
89.117.32.0/23
89.117.36.0/23
89.117.94.0/23
89.117.102.0/23
89.117.116.0/23
89.117.158.0/23
89.117.190.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7c:ad:93:dd:40:15:af:c0:54:16:7b:27:62:02:2d:0c:4e:
76:e4:1d:1a:96:11:cb:4c:1c:c8:3e:c5:5b:94:5c:7f:d1:80:
2c:d6:25:05:16:23:92:50:98:9f:81:b7:3d:08:9e:a0:f0:96:
de:e6:d8:5c:b8:4f:42:5c:4a:4a:7e:02:e1:e8:85:a4:0e:ff:
93:85:ab:18:cb:25:7d:37:6c:82:cd:2b:d6:17:52:6e:b3:61:
12:49:e1:8b:9d:13:e6:8e:14:f0:ae:0c:a8:a2:8f:c6:d0:85:
82:ec:6f:96:d3:cb:cd:90:20:c2:78:75:1e:8d:a3:8a:34:fe:
2f:28:87:06:e9:23:fc:15:c4:33:23:43:7f:93:09:d6:e1:5c:
21:7b:76:50:0e:7d:ca:56:23:91:69:6e:c8:da:21:97:28:77:
25:fe:f3:85:5e:a4:ce:4d:0d:b8:52:f6:5f:55:3a:c2:da:3f:
03:43:da:81:93:35:be:bd:ce:8b:7c:64:5a:3d:dc:0a:1b:3e:
c2:b5:77:28:5e:92:b5:9d:39:db:3c:1e:4d:ab:7e:08:3d:1a:
3b:e0:e3:c2:16:74:81:3f:40:1f:9a:9a:42:85:e2:72:8a:2c:
bf:36:53:14:da:ab:88:73:85:a1:48:5c:fb:b5:00:1e:cf:92:
fc:bc:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org