Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Fv9Gnx_JSZm7-8qWrDF2vL2dlbk.roa
File: Fv9Gnx_JSZm7-8qWrDF2vL2dlbk.roa (raw, json)
Hash identifier: YEFX/0fkmC2yF6Byt4RfGRCHzetG96tTnwqrOBoXru8=
Subject key identifier: 16:FF:46:9F:1F:C9:49:99:BB:FB:CA:96:AC:31:76:BC:BD:9D:95:B9
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182A668B29BBFFD78A47CA306AC4E5F899B
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Fv9Gnx_JSZm7-8qWrDF2vL2dlbk.roa
Signing time: Tue 16 Aug 2022 11:27:35 +0000
ROA not before: Tue 16 Aug 2022 11:27:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:68:b2:9b:bf:fd:78:a4:7c:a3:06:ac:4e:5f:89:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 16 11:27:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16ff469f1fc94999bbfbca96ac3176bcbd9d95b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:81:9d:c6:c7:f5:10:1a:a2:63:32:27:d3:
62:cb:58:ba:60:7f:a6:aa:44:c2:f2:e3:0d:bc:7f:
a6:c3:7d:3a:dc:eb:a0:9e:19:79:5f:03:05:8d:0d:
05:cc:a1:60:51:b4:42:b7:49:07:75:45:e3:c7:fb:
45:ed:45:be:ce:31:2d:04:e7:c3:a3:27:8b:d9:33:
a6:8c:d7:60:b1:ed:12:22:1c:3b:0c:51:55:bc:8e:
94:42:3a:0b:22:11:c0:b7:5b:ea:a1:be:b2:69:13:
55:b5:c2:73:0e:7f:55:f3:9c:27:18:d1:72:59:40:
b2:45:a1:c6:d2:99:3e:48:ff:d7:55:ed:82:da:df:
11:cb:7c:09:20:ab:5c:f2:41:9f:ad:f0:93:be:76:
9b:15:b4:7d:26:3b:eb:d7:59:c0:78:b7:04:7d:04:
56:84:e4:45:5b:85:fe:bc:0c:e2:1a:fd:45:7e:b7:
4f:20:5b:c6:7c:cc:a3:1e:0b:67:58:c7:e7:e9:0d:
fb:f1:56:5f:4e:88:86:09:9c:b5:c8:a0:86:4d:f1:
55:a1:e4:89:b1:0a:7e:29:1a:e8:82:14:ad:59:56:
33:6e:23:9f:71:1b:45:b1:bc:30:e1:94:dd:6b:09:
da:b2:f1:98:bf:ad:27:ba:91:fc:02:61:4c:49:5b:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FF:46:9F:1F:C9:49:99:BB:FB:CA:96:AC:31:76:BC:BD:9D:95:B9
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Fv9Gnx_JSZm7-8qWrDF2vL2dlbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
be:5d:91:38:5c:75:e2:d7:45:f6:a0:a6:31:a2:f8:c2:93:a7:
0d:4b:45:02:42:ed:ca:0d:0e:48:11:4c:d3:e0:99:c9:78:24:
f8:56:16:53:0a:a5:f4:68:6f:53:9a:e8:ea:e7:93:cc:7a:32:
f7:23:9c:e9:7b:65:2d:6a:e9:84:3f:4e:8d:3f:84:10:bb:6c:
2f:cb:d6:c2:6b:c7:03:77:c6:97:e0:36:eb:ab:ec:e7:f4:14:
fa:9c:71:a2:64:73:59:5a:db:58:ed:1f:a9:cf:41:92:b5:72:
47:06:f3:63:18:26:d0:e7:58:19:78:2a:2b:7b:c6:6e:94:91:
ea:fe:10:ec:ef:af:4b:93:dd:43:d0:a6:0b:ce:07:a1:7f:35:
c7:c9:55:4b:de:b3:ea:ba:df:0e:59:62:5d:47:b7:32:a9:58:
cf:86:95:6c:df:80:66:3b:fe:14:75:6b:8b:89:cb:d3:fa:07:
9d:e1:f4:8a:fe:0f:6a:a4:98:99:c0:ee:a4:39:ab:91:1e:39:
3b:a7:93:b5:fa:6a:3b:db:7b:67:4b:fa:94:61:5a:39:76:9b:
e6:e3:e3:5d:49:69:57:6c:8e:9a:69:ba:f0:f9:27:d7:17:6b:
56:bb:80:e9:8a:4a:fd:ab:d3:16:2b:63:f1:05:3d:eb:15:da:
2e:8b:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org