Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/GSgolq1WbwaKTfP2SytR_NT3tQA.roa
File: GSgolq1WbwaKTfP2SytR_NT3tQA.roa (raw, json)
Hash identifier: 0Lr55yepZZ/uiMvP3ae//HrQ21GaEWjlyM4zK/XEOgM=
Subject key identifier: 19:28:28:96:AD:56:6F:06:8A:4D:F3:F6:4B:2B:51:FC:D4:F7:B5:00
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182CA36AB2F48EB6956241FFEE20C75B788
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/GSgolq1WbwaKTfP2SytR_NT3tQA.roa
Signing time: Tue 23 Aug 2022 10:19:16 +0000
ROA not before: Tue 23 Aug 2022 10:19:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:36:ab:2f:48:eb:69:56:24:1f:fe:e2:0c:75:b7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 23 10:19:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19282896ad566f068a4df3f64b2b51fcd4f7b500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:49:e6:c6:fe:dc:05:da:8b:4c:da:2f:5c:
a7:dd:bf:2f:e5:dc:fb:b6:7c:4e:62:52:3b:bb:5c:
d7:cd:85:b5:03:be:97:2a:e5:2b:d3:4f:9b:e7:b3:
43:7c:bf:cb:3d:0b:60:3d:07:da:c5:68:fd:41:83:
b1:35:c1:b9:cb:3f:e5:e6:69:c4:d5:05:cd:07:06:
e3:a8:5c:98:9a:f9:ca:11:96:ae:98:d1:29:9c:0a:
b1:74:0b:3f:4b:bd:43:06:8a:cc:01:ae:e2:0a:cc:
24:38:ff:57:ef:b8:80:70:e1:df:4c:f8:09:7f:28:
f3:dc:0b:f1:2b:eb:0c:03:6c:95:01:53:cf:9b:30:
ea:a8:dc:20:6e:d3:4e:0c:81:c0:16:21:cf:e3:78:
d3:83:03:ba:27:b1:40:da:d7:91:6c:30:d3:ea:b2:
d6:16:b1:2d:b2:9c:f7:97:58:13:e4:fb:59:60:ec:
ab:42:1b:7c:9c:66:17:8b:c9:a7:68:21:0a:ce:76:
bd:0f:66:bd:47:54:a3:2f:1d:3d:f7:24:d9:e6:1b:
99:b6:14:3a:77:a6:3c:92:37:96:27:4f:b1:47:cb:
e7:ed:aa:1a:ae:7a:9b:47:e4:12:84:6d:93:37:d7:
91:f1:21:d9:3f:5a:81:9f:f0:73:10:6d:8d:38:84:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:28:28:96:AD:56:6F:06:8A:4D:F3:F6:4B:2B:51:FC:D4:F7:B5:00
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/GSgolq1WbwaKTfP2SytR_NT3tQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.132.0/24
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.117.8.0/23
89.117.12.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a7:c2:9e:bf:62:23:23:1e:50:9d:2d:61:11:34:b1:23:57:
b8:1a:a2:a8:38:93:6d:95:38:fc:b8:a3:47:e6:68:85:16:39:
bb:74:41:82:e9:98:50:ac:43:cb:a1:09:09:08:f7:0d:88:15:
b0:e6:fd:c0:35:62:ab:f7:30:f2:d1:4a:01:2a:59:4d:9c:59:
db:b5:59:8d:46:03:b4:46:dd:f1:72:0a:91:a2:2f:f6:e3:44:
de:f2:ee:83:68:d9:d9:68:dc:d6:23:f1:b8:f2:9e:86:bb:7d:
30:a3:e0:bf:01:ac:77:6e:17:30:88:5b:ac:f4:7a:60:cd:9d:
01:c7:5b:b8:2c:8a:38:69:4c:90:d3:24:93:cf:da:34:de:bd:
70:de:99:d0:9c:ed:f2:f6:4c:51:75:01:e7:35:e4:5d:8f:2c:
36:20:0d:e0:4e:a1:8c:96:8c:38:6f:6b:9f:08:4b:9f:63:ca:
f2:0c:4f:39:77:1d:fa:d0:2b:9a:e1:36:61:bd:59:25:1d:4d:
b9:22:5a:12:72:ee:a0:9c:68:eb:d9:fe:9b:a4:f1:9e:74:15:
ff:61:cc:e2:39:6f:2d:c5:23:03:7b:73:24:ff:4f:42:80:16:
8a:a1:ea:45:9b:9b:8d:91:37:f7:98:04:fa:2c:f5:30:78:d1:
e4:b5:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org