Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/DgaJkN-RqcU4lWQzWIlzVrarSxY.roa
File: DgaJkN-RqcU4lWQzWIlzVrarSxY.roa (raw, json)
Hash identifier: Pf02EpFZbgJZgmb+NFBQl4h9KYvVfzXuzYO3biqXCKI=
Subject key identifier: 0E:06:89:90:DF:91:A9:C5:38:95:64:33:58:89:73:56:B6:AB:4B:16
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A834EB0
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/DgaJkN-RqcU4lWQzWIlzVrarSxY.roa
Signing time: Wed 27 Apr 2022 07:06:24 +0000
ROA not before: Wed 27 Apr 2022 07:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176377520 (0xa834eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 27 07:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e068990df91a9c53895643358897356b6ab4b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:82:93:fa:de:1d:0a:96:52:de:6b:8d:8e:
4e:ea:02:f8:e6:11:ac:11:3a:34:cb:0c:6a:ec:75:
18:6e:ee:b2:ef:4f:ac:95:f1:5c:06:ef:71:47:fa:
08:02:18:55:72:38:f0:55:61:49:e9:c7:dd:74:a8:
69:10:5d:3c:bd:df:79:b6:c0:6e:9b:d3:1b:e6:91:
da:e9:6a:d5:fa:fc:d6:49:b1:76:30:9a:b7:d8:cf:
13:7f:7e:9d:45:ce:54:ae:07:8d:66:86:40:d9:da:
c4:78:6a:c2:29:76:6b:c9:e1:3d:de:86:87:c5:d4:
7c:8c:f3:19:9b:b9:31:fb:15:c9:14:27:eb:49:31:
6c:d1:84:ed:5b:42:31:9d:a4:60:f1:81:6a:6d:7f:
27:83:c6:2c:b9:e0:f6:ea:a4:8c:28:23:36:dd:b7:
e7:21:6b:98:8f:f9:ba:85:d8:18:5d:ec:9a:66:b2:
54:b5:92:f9:56:2c:d7:bd:98:e5:1e:f9:b3:01:57:
14:7c:d7:cd:e1:09:2b:b0:cb:1f:b9:b3:a6:ea:61:
b2:35:4d:7c:48:50:18:1c:b8:04:1f:81:42:11:f0:
79:46:68:6a:d1:e0:ed:16:8c:24:e3:05:5e:0c:a4:
cf:32:1d:6b:e0:f7:dc:05:39:df:2e:75:4b:31:9c:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:89:90:DF:91:A9:C5:38:95:64:33:58:89:73:56:B6:AB:4B:16
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/DgaJkN-RqcU4lWQzWIlzVrarSxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.202.0/24
89.116.210.0/23
89.116.218.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0/24
89.117.218.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:c3:13:45:fa:09:1f:2a:81:5f:10:eb:11:f2:72:ec:75:c4:
48:29:ac:dc:e1:bc:7a:0c:5d:42:57:8e:fa:5d:1b:79:56:30:
29:61:51:4f:e3:f7:4f:7d:73:9e:fd:7b:ad:48:6c:77:3d:25:
87:ac:1c:0d:bd:62:d8:cd:0d:f2:56:d0:da:a2:9a:59:b0:63:
e0:6f:5f:e1:94:ba:14:38:ce:af:d9:8d:fc:f5:73:d1:1c:24:
48:26:54:88:99:2a:17:c3:f2:8e:56:44:46:91:16:71:4b:b3:
00:c4:6a:3d:09:84:de:ac:06:cf:d8:79:11:e2:39:bd:83:fb:
20:c4:aa:ab:8f:7d:7c:92:27:e6:cd:b4:7b:4e:aa:d3:7d:a7:
75:c9:36:c0:4e:c4:85:0f:62:4f:c5:83:0c:92:df:7c:b7:5f:
53:44:9f:19:0d:1b:0b:40:53:27:d8:0c:2d:d8:76:2b:e3:2c:
d1:94:08:d5:f6:b2:a5:f6:fc:da:fa:ed:47:f3:ac:95:39:76:
80:fc:3a:17:0c:48:60:1e:84:c5:68:7f:f8:08:0a:f4:31:fe:
2a:ed:3f:f4:66:35:38:13:20:cd:13:9f:e2:22:ec:e3:40:1f:
1c:e8:cf:aa:86:de:f7:32:a8:eb:fe:5a:63:a9:6b:af:07:40:
f0:19:a5:0d
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIECoNOsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDQy
NzA3MDYyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGUwNjg5OTBkZjkx
YTljNTM4OTU2NDMzNTg4OTczNTZiNmFiNGIxNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIuHgpP63h0KllLea42OTuoC+OYRrBE6NMsMaux1GG7usu9P
rJXxXAbvcUf6CAIYVXI48FVhSenH3XSoaRBdPL3febbAbpvTG+aR2ulq1fr81kmx
djCat9jPE39+nUXOVK4HjWaGQNnaxHhqwil2a8nhPd6Gh8XUfIzzGZu5MfsVyRQn
60kxbNGE7VtCMZ2kYPGBam1/J4PGLLng9uqkjCgjNt235yFrmI/5uoXYGF3smmay
VLWS+VYs172Y5R75swFXFHzXzeEJK7DLH7mzpuphsjVNfEhQGBy4BB+BQhHweUZo
atHg7RaMJOMFXgykzzIda+D33AU53y51SzGcXMkCAwEAAaOCA/0wggP5MB0GA1Ud
DgQWBBQOBomQ35GpxTiVZDNYiXNWtqtLFjAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L0RnYUprTi1ScWNVNGxXUXpXSWx6VnJhclN4WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AhEGCCsGAQUFBwEHAQH/BIICADCCAfwwggH4BAIAATCCAfADBAFULuoDBAFWJrIw
DAMEAVYmtgMEAlYmuAMEAVYmygMEAVYm9gMEAVl0OjAMAwQCWXREAwQAWXRGAwQA
WXRMAwQBWXRYMAwDBABZdFsDBABZdFwwDAMEAVl0agMEAFl0bDAMAwQAWXR9AwQA
WXSAMAwDBAFZdIIDBABZdIQDBABZdIcDBABZdIkDBABZdI0wDAMEAll0lAMEAFl0
ljAMAwQAWXSZAwQAWXSaAwQAWXSeAwQAWXShAwQAWXSjAwQAWXSmAwQBWXSsAwQA
WXSvAwQAWXSxAwQAWXSzMAwDBANZdLgDBABZdLowDAMEAFl0vQMEAFl0vgMEAFl0
wQMEAFl0ygMEAVl00gMEAFl02gMEAFl0+gMEAVl0/AMEAFl0/zAMAwQBWXUGAwQB
WXUIAwQBWXUMAwQBWXUYMAwDBAJZdRwDBAFZdSADBAFZdSQwDAMEBll1QAMEAFl1
RDAMAwQBWXVGAwQBWXVUAwQCWXVYMAwDBAFZdV4DBAJZdWADBAFZdWYDBABZdW0w
DAMEBFl1cAMEAVl1dAMEAFl1gQMEAll1hAMEAFl1iwMEAVl1jjAMAwQBWXWeAwQC
WXWgAwQAWXW8AwQAWXW+AwQAWXXXAwQAWXXaAwQAWXXeAwQBWXXkAwQAWXX1AwQA
WXX6MA0GCSqGSIb3DQEBCwUAA4IBAQDNwxNF+gkfKoFfEOsR8nLsdcRIKazc4bx6
DF1CV476XRt5VjApYVFP4/dPfXOe/XutSGx3PSWHrBwNvWLYzQ3yVtDaoppZsGPg
b1/hlLoUOM6v2Y389XPRHCRIJlSImSoXw/KOVkRGkRZxS7MAxGo9CYTerAbP2HkR
4jm9g/sgxKqrj318kifmzbR7TqrTfad1yTbATsSFD2JPxYMMkt98t19TRJ8ZDRsL
QFMn2Awt2HYr4yzRlAjV9rKl9vza+u1H86yVOXaA/DoXDEhgHoTFaH/4CAr0Mf4q
7T/0ZjU4EyDNE5/iIuzjQB8c6M+qht73Mqjr/lpjqWuvB0DwGaUN
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org