Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H5Ye6XQX3rIE_13Ad2hPuZIgH1M.roa
File: H5Ye6XQX3rIE_13Ad2hPuZIgH1M.roa (raw, json)
Hash identifier: nSgJoI/FBZbpY9CAHm0PPzhrTWp6VVSNDJ8y1zTNgP8=
Subject key identifier: 1F:96:1E:E9:74:17:DE:B2:04:FF:5D:C0:77:68:4F:B9:92:20:1F:53
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183E56BD448AD8A18A54A80A107CFD240DC
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H5Ye6XQX3rIE_13Ad2hPuZIgH1M.roa
Signing time: Mon 17 Oct 2022 10:09:52 +0000
ROA not before: Mon 17 Oct 2022 10:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:6b:d4:48:ad:8a:18:a5:4a:80:a1:07:cf:d2:40:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 17 10:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f961ee97417deb204ff5dc077684fb992201f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:b1:25:a9:d6:2e:87:e7:59:4e:43:fc:dd:
58:68:66:0a:13:f3:f7:46:6e:f0:3c:f7:62:d2:14:
40:10:27:1b:dc:ec:ec:b6:7f:08:47:9f:c5:58:0d:
67:bc:f7:65:95:2e:eb:05:35:d7:e6:e7:67:d5:96:
26:4e:a9:1a:dd:88:6c:3d:30:93:9e:93:a9:7d:65:
4a:1b:70:8e:ba:78:77:ed:7b:89:0d:07:1c:68:d2:
8c:17:10:1b:ba:68:9c:1a:6b:4d:32:00:81:99:e5:
e1:b8:e9:14:7f:22:ed:c6:8d:83:28:46:19:9d:54:
44:d7:9c:23:bb:d2:76:71:2c:68:c5:a4:97:ba:ae:
b9:87:43:bc:99:d0:69:7b:f3:9e:ba:9b:00:29:5b:
2c:40:78:36:0a:35:11:53:4a:71:52:45:25:6b:54:
6d:b7:ac:dc:7f:5d:c0:cb:9a:a6:e0:f6:10:b2:a6:
b5:37:b1:14:7d:45:6c:5c:8f:02:9e:c9:c2:15:20:
f0:20:c3:fd:ab:7a:c9:36:5c:9d:b6:be:13:80:8f:
ea:51:d1:89:33:cb:f9:00:41:f3:45:04:c3:28:47:
eb:30:95:f7:55:06:09:0e:46:ed:6f:a5:b0:50:af:
81:8e:3e:18:fb:7b:82:b2:80:79:b2:ee:bd:25:c4:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:1E:E9:74:17:DE:B2:04:FF:5D:C0:77:68:4F:B9:92:20:1F:53
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H5Ye6XQX3rIE_13Ad2hPuZIgH1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.108.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.210.0/23
89.116.218.0/24
89.117.8.0/23
89.117.28.0-89.117.33.255
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.190.0/24
89.117.215.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
79:81:58:d2:f4:10:44:ab:16:98:01:0a:6b:b2:f1:0a:15:e9:
4f:31:53:f9:cc:55:7e:86:3d:5f:28:b3:d8:54:04:74:a0:d2:
a0:7b:8a:58:a0:73:c7:95:e8:66:93:1f:40:57:63:a4:01:43:
cd:35:4c:10:75:d3:b3:e7:13:f8:65:6e:82:b7:a9:cb:27:e7:
76:5b:55:bb:98:59:19:a5:53:79:0c:18:27:36:8f:98:96:3c:
b4:f2:1c:5a:87:58:ae:f5:9a:37:ad:f3:ff:37:12:c8:22:fe:
b1:a5:4b:9a:e6:d0:60:a6:40:94:95:b8:fd:ce:63:ee:08:d1:
15:2d:fd:20:28:e4:fb:9e:51:b3:ef:b9:57:43:6f:78:a3:88:
e1:2b:71:70:f2:a6:8e:18:2b:10:ba:be:4c:b2:3b:d4:97:80:
e8:11:a3:42:e0:03:f7:60:e3:82:54:c7:cd:8f:0c:3f:e2:bd:
0a:dd:81:b6:ef:13:16:09:fd:ec:64:6a:ed:df:4b:7e:66:ec:
ce:8e:ea:65:3d:90:6d:13:96:9d:77:24:35:0e:b9:82:01:0e:
b4:67:13:f1:ed:e1:56:5d:a3:bd:d0:4a:86:76:89:9d:46:6e:
c9:43:17:94:08:ae:6d:56:72:de:f4:18:2c:bc:56:af:6b:b3:
f0:8c:14:b9
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISAYPla9RIrYoYpUqAoQfP0kDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDE3MTAwOTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjk2MWVlOTc0MTdkZWIyMDRmZjVkYzA3NzY4NGZiOTkyMjAxZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hixJanWLofnWU5D/N1YaGYKE/P3
Rm7wPPdi0hRAECcb3Ozstn8IR5/FWA1nvPdllS7rBTXX5udn1ZYmTqka3YhsPTCT
npOpfWVKG3COunh37XuJDQccaNKMFxAbumicGmtNMgCBmeXhuOkUfyLtxo2DKEYZ
nVRE15wju9J2cSxoxaSXuq65h0O8mdBpe/OeupsAKVssQHg2CjURU0pxUkUla1Rt
t6zcf13Ay5qm4PYQsqa1N7EUfUVsXI8CnsnCFSDwIMP9q3rJNlydtr4TgI/qUdGJ
M8v5AEHzRQTDKEfrMJX3VQYJDkbtb6WwUK+Bjj4Y+3uCsoB5su69JcS/zQIDAQAB
o4IC1jCCAtIwHQYDVR0OBBYEFB+WHul0F96yBP9dwHdoT7mSIB9TMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvSDVZZTZYUVgzcklFXzEzQWQyaFB1WklnSDFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHrBggrBgEFBQcBBwEB/wSB2zCB2DCB1QQCAAEwgc4DBAFU
LuoDBAFWJrIDBAJWJrgDBAFWJsoDBAFWJvYDBABZdGwDBABZdIQDBABZdIcDBABZ
dJYDBABZdKEDBABZdKMDBABZdKYDBAFZdKwDBABZdK8DBABZdLEDBAFZdNIDBABZ
dNoDBAFZdQgwDAMEAll1HAMEAVl1IAMEA1l1SAMEAVl1VAMEAll1WAMEAVl1XgME
AFl1bQMEAVl1dAMEAFl1gQMEAll1hAMEAVl1jgMEAFl1vgMEAFl11wMEAVl15AME
AFl19QMEAFl1+jANBgkqhkiG9w0BAQsFAAOCAQEAeYFY0vQQRKsWmAEKa7LxChXp
TzFT+cxVfoY9Xyiz2FQEdKDSoHuKWKBzx5XoZpMfQFdjpAFDzTVMEHXTs+cT+GVu
grepyyfndltVu5hZGaVTeQwYJzaPmJY8tPIcWodYrvWaN63z/zcSyCL+saVLmubQ
YKZAlJW4/c5j7gjRFS39ICjk+55Rs++5V0NveKOI4StxcPKmjhgrELq+TLI71JeA
6BGjQuAD92DjglTHzY8MP+K9Ct2Btu8TFgn97GRq7d9Lfmbszo7qZT2QbROWnXck
NQ65ggEOtGcT8e3hVl2jvdBKhnaJnUZuyUMXlAiubVZy3vQYLLxWr2uz8IwUuQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org