Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H8Nnml-xuHZKePLgAb5LEDvrsBY.roa
File: H8Nnml-xuHZKePLgAb5LEDvrsBY.roa (raw, json)
Hash identifier: w59hCZn/KMr6rM3XQZBo2Le+X5+nIlclKCBrPLk8oWg=
Subject key identifier: 1F:C3:67:9A:5F:B1:B8:76:4A:78:F2:E0:01:BE:4B:10:3B:EB:B0:16
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B875F34
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H8Nnml-xuHZKePLgAb5LEDvrsBY.roa
Signing time: Thu 23 Jun 2022 12:58:57 +0000
ROA not before: Thu 23 Jun 2022 12:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193421108 (0xb875f34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 23 12:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fc3679a5fb1b8764a78f2e001be4b103bebb016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:5a:94:8e:da:1d:51:1d:59:cc:ec:1b:56:
78:67:5f:a4:27:60:2e:25:4b:d6:90:c5:63:57:bc:
90:38:f0:e7:a6:cc:fe:3a:00:4c:54:11:55:9e:17:
73:7d:d6:25:0e:dd:ed:24:8c:6c:ae:97:d3:81:23:
dd:a0:3f:36:1f:0a:61:d2:03:e5:64:8a:ba:49:29:
5c:62:92:49:cb:3f:f8:79:69:c1:d6:61:5d:e4:88:
63:56:8f:e5:2f:96:a7:c7:73:12:bd:68:c3:57:35:
74:7f:ed:df:de:ba:67:a6:fa:dc:17:8a:7f:1a:b3:
95:91:0b:92:b3:b3:f5:e7:96:06:9e:c9:8d:17:e6:
94:31:8d:15:31:78:ce:81:14:23:bf:32:5d:17:b3:
d4:08:85:40:92:e7:11:b7:ab:88:9c:b3:a6:a3:4f:
30:ae:5a:3d:0b:74:82:f5:6d:6d:f3:91:47:27:dd:
ea:92:a1:60:8f:41:f6:f9:7c:de:f9:01:3b:e3:70:
51:54:84:b2:a3:87:e7:e6:85:59:d6:14:35:9c:39:
a8:94:93:93:2d:36:d9:fa:7a:70:34:eb:f1:f0:8f:
e2:14:f3:cd:ef:fe:18:0f:ef:c7:fc:1f:62:15:cc:
82:d4:d1:73:82:fe:86:7f:a8:bd:37:61:92:cf:50:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:67:9A:5F:B1:B8:76:4A:78:F2:E0:01:BE:4B:10:3B:EB:B0:16
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H8Nnml-xuHZKePLgAb5LEDvrsBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a8:ea:8d:51:0d:ca:ad:95:0b:67:5e:a1:48:69:cd:bb:e7:
33:82:69:2e:bc:1d:e2:ff:9e:bc:8e:50:44:9a:56:c6:71:5a:
ec:0e:e1:48:24:e0:61:e0:a7:84:eb:41:7a:50:e8:06:66:cd:
c6:f3:97:c8:44:4e:b8:39:1b:e1:c1:f4:cd:5d:cf:63:9d:c2:
d7:9b:cc:f8:bc:c9:fb:95:22:d2:37:11:04:b2:37:a2:74:fb:
23:9e:a2:d0:c8:52:fe:b7:20:e3:70:ca:fb:c5:c1:fa:85:68:
40:b6:b8:8d:0d:6f:53:fb:20:cb:03:6c:e1:20:de:a8:19:fd:
6a:e0:59:1e:0c:f5:47:83:84:b0:5e:dc:ef:c0:8d:83:c7:75:
63:6a:24:bd:32:ad:c5:cf:d8:02:e4:00:4e:ca:f7:fb:0d:a2:
07:64:dc:b7:e5:39:92:6b:1d:ae:0c:cd:f4:bb:b7:6f:72:85:
68:36:c1:fb:a9:b1:37:f5:74:90:9e:28:17:cd:d9:2b:6a:80:
44:9d:34:01:ae:26:10:9e:77:61:20:04:c1:c5:2e:45:d0:f4:
e3:93:36:82:95:d5:8d:2c:90:0c:c1:22:3a:1b:a5:c2:88:ce:
57:3c:ac:90:cc:1f:98:9d:f2:5e:66:0b:97:36:8b:82:dc:3b:
be:9f:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org