Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/INe745PxBB6c-jlaD2sG4OhgdiQ.roa
File: INe745PxBB6c-jlaD2sG4OhgdiQ.roa (raw, json)
Hash identifier: l0IpF4XLLLIQBETS0idpZh2QrNteJJ6mGHKjixcU4gE=
Subject key identifier: 20:D7:BB:E3:93:F1:04:1E:9C:FA:39:5A:0F:6B:06:E0:E8:60:76:24
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182866F193A6F3A7F9CE776B5E69025B4B1
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/INe745PxBB6c-jlaD2sG4OhgdiQ.roa
Signing time: Wed 10 Aug 2022 06:26:44 +0000
ROA not before: Wed 10 Aug 2022 06:26:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:86:6f:19:3a:6f:3a:7f:9c:e7:76:b5:e6:90:25:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 10 06:26:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20d7bbe393f1041e9cfa395a0f6b06e0e8607624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8d:65:de:82:08:dc:4d:27:c3:b5:67:a9:41:
eb:f7:1f:b3:e5:22:51:73:77:7d:86:b5:7d:2e:47:
22:34:79:36:b9:24:69:04:67:08:58:fa:c9:26:ac:
79:9d:84:d9:48:75:03:ab:9c:3e:cd:0b:b8:d4:18:
1c:f6:d4:81:3d:7e:61:5f:36:53:6a:0a:51:8e:f3:
73:80:5e:7f:59:fb:df:26:82:0f:8b:60:d3:df:2c:
3b:40:17:89:8c:00:d8:b1:a1:31:ae:74:5e:84:23:
29:f6:a5:ef:1b:d3:2b:15:47:28:36:a0:d2:75:9b:
9a:1e:f6:2b:2b:f9:db:ce:ec:a8:8f:d0:ec:05:00:
ca:03:98:85:30:2d:df:c1:42:52:9c:99:3d:7c:b2:
45:e2:c4:b5:cf:6c:92:ae:92:29:69:0d:99:e2:49:
21:70:79:74:7b:cb:76:12:56:3b:3f:eb:57:17:65:
b0:dc:37:33:6a:45:60:23:65:26:37:9f:a6:63:3c:
8f:95:4c:fe:53:56:5a:0b:2a:b8:8b:98:52:30:57:
fb:b2:c6:ec:9f:b1:b8:8b:ba:5f:f5:5f:e3:9e:c1:
82:16:5d:9a:50:54:98:cf:9a:d5:5c:1d:3b:8f:f1:
55:9a:84:b1:53:1d:4c:4e:bb:fc:b6:62:00:1f:91:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D7:BB:E3:93:F1:04:1E:9C:FA:39:5A:0F:6B:06:E0:E8:60:76:24
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/INe745PxBB6c-jlaD2sG4OhgdiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d6:aa:6d:1d:9c:ae:8e:44:53:a2:b6:4b:c7:46:25:88:48:
d7:fd:df:b5:d3:44:8d:3e:d3:a7:c0:54:6f:44:b9:f8:37:28:
a5:bd:5b:37:7d:e5:8a:69:85:50:b5:64:36:f3:78:20:b9:28:
7b:e2:aa:14:91:cd:fc:de:30:0b:c3:0f:78:a7:5b:de:24:74:
b3:9a:c3:c2:9a:9a:22:37:a9:62:f2:9b:99:f6:33:54:73:26:
58:cf:01:1f:38:ed:1d:19:34:5f:0d:d6:e4:6f:7f:dd:a2:aa:
19:73:49:7b:2b:ed:1e:dd:4a:ae:4a:1f:3e:c2:5f:98:fb:98:
78:68:23:6f:45:71:bf:1e:4a:16:9d:6e:ca:ee:76:c2:43:30:
1f:87:1d:96:55:44:0e:f3:98:34:5b:18:68:ec:81:37:d1:b5:
38:89:82:d4:fb:82:69:37:99:36:6b:84:56:5b:88:50:c8:7b:
23:44:90:e4:54:ce:4c:0c:76:ed:ad:48:8f:40:4c:66:39:0e:
56:c2:e0:12:b9:96:f1:ed:ab:7d:83:03:b6:2f:7f:c6:68:48:
89:b3:40:54:3c:19:0a:08:aa:10:0c:e5:cb:74:6f:43:2c:8c:
e4:0b:47:19:e6:df:b7:16:5b:d6:ab:73:f9:6a:26:95:25:14:
bd:e9:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org