Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/CJZOXElF50714C3CWXql-XdUgcc.roa
File: CJZOXElF50714C3CWXql-XdUgcc.roa (raw, json)
Hash identifier: 5ZsHNsEUYMWwhCm7gi672z48piBAuWUk7F9pcJHjvH0=
Subject key identifier: 08:96:4E:5C:49:45:E7:4E:F5:E0:2D:C2:59:7A:A5:F9:77:54:81:C7
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182EEBD0E0DFE6690729FA18D0AE0AC7484
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/CJZOXElF50714C3CWXql-XdUgcc.roa
Signing time: Tue 30 Aug 2022 12:32:23 +0000
ROA not before: Tue 30 Aug 2022 12:32:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:bd:0e:0d:fe:66:90:72:9f:a1:8d:0a:e0:ac:74:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 30 12:32:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08964e5c4945e74ef5e02dc2597aa5f9775481c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:a1:ec:77:54:19:5e:58:7c:60:59:ac:f8:
0e:74:1e:a0:70:81:5f:22:3c:62:28:7f:80:e3:98:
f4:07:31:d3:57:50:3d:d6:63:ab:22:bf:c1:4d:53:
d8:02:28:99:f3:bb:6e:da:dd:84:b0:2c:db:8c:8d:
95:09:5f:2e:88:06:8a:9e:78:c3:a7:e0:e1:e1:74:
75:11:50:1e:fc:69:5c:68:8a:3c:d2:01:d9:90:8d:
af:47:d1:42:6f:bc:7b:f4:8b:2a:5b:eb:20:6c:5f:
67:27:fc:a5:37:55:67:fd:8e:fd:95:18:71:01:ad:
00:bd:31:13:1d:fc:5e:4e:aa:6d:b9:47:0f:24:d6:
1b:eb:9a:7a:eb:23:49:cc:13:8b:d5:13:94:5a:a8:
c6:b3:10:be:52:41:1c:03:f3:d0:88:8b:8d:a9:47:
cb:cb:ed:29:48:45:87:c3:59:6d:24:03:f3:26:fa:
0d:ae:fb:58:c3:6c:83:23:5f:01:16:69:6d:0a:eb:
e7:44:62:2e:50:03:e0:25:24:1d:7b:c6:67:30:8d:
ba:19:12:db:8d:43:32:63:f4:9e:f7:e3:b9:67:28:
7f:db:e2:15:89:9d:e9:76:f2:97:4d:45:60:97:3f:
72:d3:b4:a6:bb:13:5c:2e:23:02:80:52:64:6b:e5:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:4E:5C:49:45:E7:4E:F5:E0:2D:C2:59:7A:A5:F9:77:54:81:C7
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/CJZOXElF50714C3CWXql-XdUgcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.108.0/24
89.116.125.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0/23
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/24
89.117.8.0/23
89.117.28.0-89.117.33.255
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:28:96:fa:77:21:2e:bd:bf:bc:70:7d:ff:d1:37:6f:33:3f:
ab:36:69:4a:4d:d2:bd:c9:1a:b5:66:62:ea:ee:bb:92:fc:98:
69:8f:6d:c5:e2:3c:ab:72:08:4c:86:76:57:4a:bb:a5:0c:c4:
46:dc:e9:64:34:35:76:c9:71:cd:a1:c2:4c:52:22:5c:ca:ad:
a2:91:c3:ba:4e:e7:64:45:30:04:dd:e2:22:55:53:0e:a0:34:
9b:df:9a:32:49:24:ab:31:46:8b:2b:8f:04:f3:23:59:cc:19:
63:ac:9c:df:34:dd:81:17:07:c4:1f:fd:c0:7a:9d:76:ed:99:
fa:61:38:3f:59:5d:f1:34:ca:a0:18:9a:ad:43:72:e5:01:1f:
03:25:8c:0b:9b:fc:29:61:77:09:73:ef:38:69:80:7e:b7:ee:
44:23:7c:a8:be:c7:cf:20:c7:95:59:a3:9c:9b:73:65:8f:78:
f5:50:ed:0d:9d:2f:2d:71:b3:71:70:cb:be:aa:82:08:3b:6b:
86:a5:8b:0e:c1:85:b8:f1:17:5c:93:af:16:c3:46:13:f9:c2:
c0:8a:fd:ba:2a:03:14:e9:e4:51:e3:65:95:30:b4:06:91:aa:
e9:aa:79:50:25:e3:a8:88:0a:50:ea:d3:e2:72:db:42:a6:b0:
72:1c:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org