Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Cm3LS6vHtmRO_ExsVXtEGcpaD2U.roa
File: Cm3LS6vHtmRO_ExsVXtEGcpaD2U.roa (raw, json)
Hash identifier: 1vKSUzfAC/jm0JiTE/FWJ/zVuPIRwNbkr30GvCkihpE=
Subject key identifier: 0A:6D:CB:4B:AB:C7:B6:64:4E:FC:4C:6C:55:7B:44:19:CA:5A:0F:65
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D8FEC398CB0371A013C1634A8429E8B0
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Cm3LS6vHtmRO_ExsVXtEGcpaD2U.roa
Signing time: Fri 26 Aug 2022 07:12:30 +0000
ROA not before: Fri 26 Aug 2022 07:12:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:fe:c3:98:cb:03:71:a0:13:c1:63:4a:84:29:e8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 26 07:12:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a6dcb4babc7b6644efc4c6c557b4419ca5a0f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:79:19:bd:f4:60:5b:18:ff:a6:b0:5e:0f:
87:23:f2:bb:bb:44:ca:00:17:46:56:5c:2c:50:41:
54:22:36:b7:ac:85:fe:4f:67:b3:90:2b:0d:3e:34:
76:ff:3f:fd:ea:66:6f:ac:b8:3d:6b:27:37:27:4d:
83:60:54:44:b1:75:59:54:3b:81:e9:89:7d:78:38:
e9:a8:0f:98:25:d2:88:84:aa:b1:fe:54:52:17:d7:
2e:14:fc:5f:54:b3:8f:c3:68:c2:4f:33:db:01:c3:
ab:b1:34:e8:ed:ef:2a:3c:38:32:76:44:21:b1:95:
44:bf:66:97:93:70:30:ce:d3:ed:8c:61:48:37:07:
93:77:bd:9c:c5:4f:a7:f9:df:a0:2b:78:54:7e:b8:
be:72:ce:f2:20:22:b7:cf:32:ea:10:d9:a8:49:40:
f6:db:85:71:f3:c3:e2:8b:8d:f5:e0:eb:e4:57:4d:
bf:b7:14:20:b9:62:ca:c1:84:b3:2b:a3:9f:82:3a:
8b:41:ac:26:7f:0c:e3:c7:6c:1b:d5:e8:16:3b:22:
50:ed:29:51:42:ac:8e:b5:9f:18:e6:dd:03:b1:fe:
2c:e9:86:2a:31:94:5a:89:e9:fe:5d:fe:fa:fa:56:
c9:19:6a:31:b9:1d:33:6f:f7:b5:73:79:82:ac:79:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6D:CB:4B:AB:C7:B6:64:4E:FC:4C:6C:55:7B:44:19:CA:5A:0F:65
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Cm3LS6vHtmRO_ExsVXtEGcpaD2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0-89.116.186.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/24
89.117.8.0/23
89.117.28.0-89.117.33.255
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c8:e4:12:9e:6a:ff:9a:9f:ad:60:25:dd:fd:1e:ca:8c:15:
fe:73:ff:4b:ee:f2:3c:69:9b:12:52:91:88:83:29:6f:07:a9:
6c:90:b5:ca:b8:a5:ed:70:be:06:be:ad:da:97:df:22:12:55:
68:a1:0f:52:2f:bd:3a:68:65:32:c8:3e:02:d4:f2:1a:52:c8:
ed:e0:de:71:18:0d:6d:34:9a:ec:af:77:73:44:64:e6:4c:93:
fb:b6:1b:a1:49:9c:b0:29:89:19:90:c8:61:c7:0f:65:91:f2:
d2:ab:54:ff:39:31:a7:84:97:e6:ca:78:43:63:1c:5e:9e:f8:
bf:0b:c1:6c:2d:cb:b2:fd:4c:4c:a9:da:56:3f:fc:ce:83:9b:
be:e4:6f:a4:6a:0d:f4:18:0b:37:18:c9:58:9e:3b:f8:73:3e:
2f:9a:42:9b:15:a9:a1:ee:69:9a:af:45:a2:47:4f:fa:53:67:
0e:e7:ba:bf:29:09:4b:90:16:b8:27:a8:c2:17:6d:72:5b:2a:
f5:18:f7:58:e3:cf:d7:32:76:26:39:bd:30:0d:72:18:70:19:
03:de:b3:1a:39:6f:d2:8c:9b:1e:61:80:30:1c:b4:b0:78:67:
80:a2:0d:07:2a:05:54:56:fa:a9:34:fe:63:91:10:f9:02:c0:
67:d7:9b:4f
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgISAYLY/sOYywNxoBPBY0qEKeiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODI2MDcxMjMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTZkY2I0YmFiYzdiNjY0NGVmYzRjNmM1NTdiNDQxOWNhNWEwZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD55Gb30YFsY/6awXg+HI/K7u0TK
ABdGVlwsUEFUIja3rIX+T2ezkCsNPjR2/z/96mZvrLg9ayc3J02DYFREsXVZVDuB
6Yl9eDjpqA+YJdKIhKqx/lRSF9cuFPxfVLOPw2jCTzPbAcOrsTTo7e8qPDgydkQh
sZVEv2aXk3AwztPtjGFINweTd72cxU+n+d+gK3hUfri+cs7yICK3zzLqENmoSUD2
24Vx88Pii4314OvkV02/txQguWLKwYSzK6OfgjqLQawmfwzjx2wb1egWOyJQ7SlR
QqyOtZ8Y5t0Dsf4s6YYqMZRaien+Xf76+lbJGWoxuR0zb/e1c3mCrHmDbwIDAQAB
o4IDKTCCAyUwHQYDVR0OBBYEFApty0urx7ZkTvxMbFV7RBnKWg9lMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvQ20zTFM2dkh0bVJPX0V4c1ZYdEVHY3BhRDJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPQYIKwYBBQUHAQcBAf8EggEsMIIBKDCCASQEAgABMIIB
HAMEAVQu6gMEAVYmsgMEAlYmuAMEAVYmygMEAVYm9gMEAVl0OgMEAVl0WAMEAFl0
XDAMAwQBWXRqAwQAWXRsMAwDBABZdH0DBAdZdAADBABZdIQDBABZdIcDBABZdJYD
BABZdKEDBABZdKMDBABZdKYDBAFZdKwDBABZdK8DBABZdLEwDAMEA1l0uAMEAFl0
ugMEAFl0wQMEAVl00gMEAFl02gMEAFl0/AMEAVl1CDAMAwQCWXUcAwQBWXUgAwQD
WXVIAwQBWXVUAwQCWXVYAwQBWXVeAwQBWXVmAwQAWXVtAwQBWXV0AwQAWXWBAwQC
WXWEAwQBWXWOAwQAWXW+AwQAWXXXAwQAWXXeAwQBWXXkAwQAWXX1AwQAWXX6MA0G
CSqGSIb3DQEBCwUAA4IBAQBayOQSnmr/mp+tYCXd/R7KjBX+c/9L7vI8aZsSUpGI
gylvB6lskLXKuKXtcL4Gvq3al98iElVooQ9SL706aGUyyD4C1PIaUsjt4N5xGA1t
NJrsr3dzRGTmTJP7thuhSZywKYkZkMhhxw9lkfLSq1T/OTGnhJfmynhDYxxenvi/
C8FsLcuy/UxMqdpWP/zOg5u+5G+kag30GAs3GMlYnjv4cz4vmkKbFamh7mmar0Wi
R0/6U2cO57q/KQlLkBa4J6jCF21yWyr1GPdY48/XMnYmOb0wDXIYcBkD3rMaOW/S
jJseYYAwHLSweGeAog0HKgVUVvqpNP5jkRD5AsBn15tP
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org