Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/GoPOcWYfQufN_8nQV2TEZKi2by4.roa
File: GoPOcWYfQufN_8nQV2TEZKi2by4.roa (raw, json)
Hash identifier: CMQUqoXnwTcCC9w25ZVLzzTd4HjoZ1AjjecN74h1k7c=
Subject key identifier: 1A:83:CE:71:66:1F:42:E7:CD:FF:C9:D0:57:64:C4:64:A8:B6:6F:2E
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B0B515A
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/GoPOcWYfQufN_8nQV2TEZKi2by4.roa
Signing time: Wed 25 May 2022 09:29:32 +0000
ROA not before: Wed 25 May 2022 09:29:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185291098 (0xb0b515a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 25 09:29:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a83ce71661f42e7cdffc9d05764c464a8b66f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:85:da:33:4b:8a:53:39:54:20:4a:d7:a7:
9d:98:b5:bc:ef:09:b3:7e:02:7f:c2:8d:f7:b5:8e:
70:8f:31:85:34:21:93:f9:45:15:0d:0c:2f:2c:93:
2a:77:f3:2f:3f:66:6c:67:5a:77:df:a0:1d:04:06:
bb:19:0e:49:94:9f:7a:a5:bf:2e:7b:af:54:de:3a:
06:af:55:40:b3:f5:27:8b:13:fc:5c:18:f7:8c:d6:
38:23:f8:77:ea:01:8b:7f:cc:b4:a8:98:cb:5d:2d:
dc:1a:70:23:07:c1:3b:04:0c:64:67:f4:51:a6:45:
ee:be:2d:59:f0:31:ea:78:c3:b2:e4:ff:b8:72:fa:
d5:c3:aa:f4:c0:a8:19:dc:5e:83:e4:b8:0e:32:52:
ff:4e:97:13:59:ae:4c:c8:28:c9:5f:98:2f:f1:ad:
63:f8:60:83:9e:c7:ff:80:ac:25:b6:de:9f:88:22:
ad:25:7f:b3:3c:90:13:a5:50:d6:9d:44:bd:94:2c:
dc:9b:83:ab:86:f6:2e:b5:83:c1:03:1a:1c:9b:08:
2c:fd:dc:71:55:ba:a8:c0:98:aa:5f:ab:1f:4e:04:
b7:2c:82:b1:64:df:05:19:f3:17:d8:95:28:49:e9:
05:a0:43:47:8b:35:35:21:e1:a4:17:b4:e2:ae:29:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:83:CE:71:66:1F:42:E7:CD:FF:C9:D0:57:64:C4:64:A8:B6:6F:2E
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/GoPOcWYfQufN_8nQV2TEZKi2by4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.202.0/23
89.116.54.0/24
89.116.70.0/24
89.116.88.0/23
89.116.99.0/24
89.116.103.0/24
89.116.106.0/23
89.116.112.0/23
89.116.115.0/24
89.116.126.0-89.116.128.255
89.116.130.0/23
89.116.135.0/24
89.116.141.0/24
89.116.148.0/23
89.116.156.0/24
89.116.158.0/24
89.116.161.0/24
89.116.171.0/24
89.116.175.0/24
89.116.177.0/24
89.116.193.0/24
89.116.203.0/24
89.116.208.0/22
89.116.218.0/24
89.116.220.0/23
89.116.223.0/24
89.116.233.0/24
89.116.252.0/23
89.116.255.0/24
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.68.0/24
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.96.0/22
89.117.102.0/23
89.117.109.0/24
89.117.112.0/22
89.117.129.0-89.117.130.255
89.117.132.0/22
89.117.142.0/23
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:f2:bf:5e:3a:a0:ed:a3:45:d7:62:47:b3:35:ed:e4:36:74:
a6:53:0a:13:bc:53:6a:0a:0c:c4:92:56:ae:9d:64:ac:65:f1:
57:af:0d:9f:8d:1c:06:8c:ca:33:bc:8f:29:ba:3e:8a:45:b4:
20:da:af:24:07:aa:ac:3b:18:df:c5:b7:19:c5:43:c7:06:6f:
6f:d7:cc:ad:f7:75:5b:0d:26:08:34:2d:bf:cf:84:b5:f4:cc:
bb:9d:04:19:d3:a0:d0:99:43:c4:02:65:3c:2c:23:b4:e8:9e:
2c:28:b5:65:f0:df:6a:6c:4e:0e:ac:f1:b8:e1:bc:22:c7:60:
4e:ff:2e:a6:72:6b:d3:3d:b0:7f:17:25:e2:62:bc:e6:e4:89:
e1:b5:30:f8:0e:a9:65:f5:ee:40:c0:e2:2b:ff:94:71:93:13:
57:1c:1e:c9:55:2b:e1:26:19:48:3f:ce:0f:ae:cb:70:f2:1a:
2a:d7:6a:e0:66:6c:8c:66:30:06:bf:f1:35:73:ff:9e:01:62:
98:8f:80:d9:df:c4:ee:d2:4b:dd:0b:64:73:93:ca:b3:69:82:
0b:c4:9f:94:3e:66:9f:9c:b2:e9:66:15:16:1c:eb:86:bf:de:
80:f0:6a:5c:1f:85:9a:c6:a3:61:e1:4e:41:70:1a:08:99:29:
de:42:de:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org