Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/GVj7kO47gYe6WXDGQrMQwaA28Ls.roa
File: GVj7kO47gYe6WXDGQrMQwaA28Ls.roa (raw, json)
Hash identifier: wYShb7F2MgTS53jSBDFRRLaxRbo8KcNh95CU7+oD2bE=
Subject key identifier: 19:58:FB:90:EE:3B:81:87:BA:59:70:C6:42:B3:10:C1:A0:36:F0:BB
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B16B6E7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/GVj7kO47gYe6WXDGQrMQwaA28Ls.roa
Signing time: Fri 27 May 2022 06:40:13 +0000
ROA not before: Fri 27 May 2022 06:40:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 89.117.68.0/24 maxlen: 24
89.116.236.0/24 maxlen: 24
89.116.234.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
84.46.170.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.15.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186037991 (0xb16b6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 27 06:40:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1958fb90ee3b8187ba5970c642b310c1a036f0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1c:1f:7d:8f:de:e8:4d:16:c0:c2:fe:d2:1f:
d7:11:2d:3b:d3:63:0a:79:d0:3c:b1:42:ce:ea:bf:
83:bf:75:12:9d:47:cd:5f:4c:a4:d5:37:49:5f:d6:
6e:47:0a:82:89:a0:48:0a:4c:45:d5:22:58:66:e1:
5a:3b:15:74:de:19:c5:8a:af:52:6d:a8:12:77:1e:
b5:5f:bf:8f:0d:2f:e3:52:8a:78:3c:8d:f8:89:d5:
75:b9:b6:fa:4e:2b:b0:b1:99:43:e2:25:17:78:de:
fe:5d:fc:80:ea:b7:a2:aa:11:94:8e:61:be:fe:c5:
47:d1:b4:6e:39:d0:89:d9:0f:18:f6:86:0d:d4:fb:
e9:3d:0a:5e:bc:9a:ae:9b:b3:4f:54:87:d1:9f:98:
ec:fd:0e:63:bc:b0:65:c5:ea:1d:80:f2:fb:94:04:
e7:c0:ff:43:45:06:78:eb:54:aa:6c:6b:72:02:16:
87:02:d6:14:5d:74:6b:67:57:43:06:19:89:21:dc:
a5:5c:2d:8e:0d:28:7a:e8:70:d3:87:49:a2:d9:d8:
db:68:1e:66:ac:96:c4:86:7a:76:9c:03:c8:0b:95:
09:36:d7:8f:bb:2d:a5:b8:0e:08:d7:1e:63:e8:d8:
a4:4d:09:80:88:e2:67:2a:81:c1:f3:f6:b7:89:0f:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:FB:90:EE:3B:81:87:BA:59:70:C6:42:B3:10:C1:A0:36:F0:BB
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/GVj7kO47gYe6WXDGQrMQwaA28Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.175.0/24
86.38.190.0/24
89.116.70.0/24
89.116.102.0/24
89.116.234.0/24
89.116.236.0/24
89.116.244.0/24
89.117.15.0/24
89.117.35.0/24
89.117.68.0/24
89.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d7:03:6c:ed:b1:5e:07:12:60:18:e4:57:32:6c:25:12:3d:
25:24:5d:b3:74:f5:40:2f:eb:79:94:69:73:59:94:9a:76:36:
9e:08:69:de:10:e9:fb:e5:f8:f0:a1:f2:09:a9:b8:bd:c2:43:
67:48:c2:71:26:ad:32:ad:16:d3:d1:93:56:e9:61:d3:f6:bc:
4f:5d:cd:ff:ec:53:fd:c7:b7:28:25:6c:4c:81:92:a4:b7:78:
38:7f:62:01:e6:cc:e6:39:38:59:8a:92:a6:c2:fb:47:50:32:
09:52:7d:8e:94:a0:2f:9a:e9:82:50:bc:8a:f9:d3:8a:20:8c:
74:b8:1f:f9:90:3b:b3:d8:41:b5:fd:31:4f:53:54:7b:a7:d6:
63:ac:7d:31:68:58:da:22:12:75:c0:b3:60:ee:71:dd:4a:05:
1e:21:78:ff:ea:fc:3f:8a:08:73:4e:29:4a:f0:9c:58:19:60:
0c:35:77:6e:9a:ff:c9:f3:ce:ee:fb:39:50:87:38:48:a5:68:
db:cd:36:66:1e:ea:de:7c:90:01:64:f0:35:8a:1a:cc:7e:10:
e4:c4:4c:6f:f0:54:40:e1:1d:66:01:81:0d:4d:11:69:9d:53:
0c:8a:ab:79:60:a2:44:e3:ff:4c:5f:c9:81:19:64:1e:28:42:
d1:a5:91:d6
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIECxa25zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDUy
NzA2NDAxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTk1OGZiOTBlZTNi
ODE4N2JhNTk3MGM2NDJiMzEwYzFhMDM2ZjBiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOYcH32P3uhNFsDC/tIf1xEtO9NjCnnQPLFCzuq/g791Ep1H
zV9MpNU3SV/WbkcKgomgSApMRdUiWGbhWjsVdN4ZxYqvUm2oEncetV+/jw0v41KK
eDyN+InVdbm2+k4rsLGZQ+IlF3je/l38gOq3oqoRlI5hvv7FR9G0bjnQidkPGPaG
DdT76T0KXryarpuzT1SH0Z+Y7P0OY7ywZcXqHYDy+5QE58D/Q0UGeOtUqmxrcgIW
hwLWFF10a2dXQwYZiSHcpVwtjg0oeuhw04dJotnY22geZqyWxIZ6dpwDyAuVCTbX
j7stpbgOCNceY+jYpE0JgIjiZyqBwfP2t4kPOuECAwEAAaOCAkswggJHMB0GA1Ud
DgQWBBQZWPuQ7juBh7pZcMZCsxDBoDbwuzAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L0dWajdrTzQ3Z1llNldYREdRck1Rd2FBMjhMcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBh
BggrBgEFBQcBBwEB/wRSMFAwTgQCAAEwSAMEAFQuqgMEAFYmrwMEAFYmvgMEAFl0
RgMEAFl0ZgMEAFl06gMEAFl07AMEAFl09AMEAFl1DwMEAFl1IwMEAFl1RAMEAFl1
2jANBgkqhkiG9w0BAQsFAAOCAQEAV9cDbO2xXgcSYBjkVzJsJRI9JSRds3T1QC/r
eZRpc1mUmnY2nghp3hDp++X48KHyCam4vcJDZ0jCcSatMq0W09GTVulh0/a8T13N
/+xT/ce3KCVsTIGSpLd4OH9iAebM5jk4WYqSpsL7R1AyCVJ9jpSgL5rpglC8ivnT
iiCMdLgf+ZA7s9hBtf0xT1NUe6fWY6x9MWhY2iISdcCzYO5x3UoFHiF4/+r8P4oI
c04pSvCcWBlgDDV3bpr/yfPO7vs5UIc4SKVo2802Zh7q3nyQAWTwNYoazH4Q5MRM
b/BUQOEdZgGBDU0RaZ1TDIqreWCiROP/TF/JgRlkHihC0aWR1g==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org