Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/IhrWbfrqQw1VUlq0bseSWoEIeDc.roa
File: IhrWbfrqQw1VUlq0bseSWoEIeDc.roa (raw, json)
Hash identifier: BxQyy8aPqHjaYE5/NRoJgpqA58OO2BhFBrJCaYNPxfg=
Subject key identifier: 22:1A:D6:6D:FA:EA:43:0D:55:52:5A:B4:6E:C7:92:5A:81:08:78:37
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A7ADE97
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/IhrWbfrqQw1VUlq0bseSWoEIeDc.roa
Signing time: Sun 24 Apr 2022 22:33:13 +0000
ROA not before: Sun 24 Apr 2022 22:33:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
89.117.167.0/24 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175824535 (0xa7ade97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 24 22:33:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=221ad66dfaea430d55525ab46ec7925a81087837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:26:e1:a6:7c:31:18:fc:9d:97:5a:96:e7:
55:96:b3:2c:07:f6:f6:31:db:b5:cb:fa:59:4d:94:
bb:9a:c4:93:99:8b:9d:57:36:26:d5:17:aa:7a:69:
0c:59:a5:0d:93:f0:08:54:33:f7:43:04:c4:35:43:
8f:e5:fe:e0:48:e9:4b:3c:4b:8e:cb:88:5d:da:1a:
6e:b0:ba:5b:66:ff:91:c2:cc:9c:bb:6e:38:03:9f:
12:2f:0e:20:2e:b2:de:be:88:e1:8a:d8:cf:b2:2a:
21:07:ad:83:67:5f:9e:66:75:d9:6a:44:50:2e:2b:
0e:22:c3:12:4f:a9:73:d0:eb:dd:96:82:34:d9:13:
84:d0:5a:91:aa:01:e7:97:e0:98:60:b4:61:91:74:
0b:d9:ba:7d:af:c2:67:ad:fc:80:af:a3:5b:36:77:
a7:50:9c:26:a8:eb:f7:ad:36:ff:d5:6b:62:26:46:
81:00:55:2f:b6:e7:76:35:ea:fb:04:8f:16:f7:65:
93:d3:d1:ae:11:1e:5d:09:e5:ac:56:50:f5:2c:1d:
3d:c8:2c:6b:7c:a7:45:1e:e9:a9:2a:4b:c6:cd:a0:
00:8c:ff:f9:6b:d3:d6:6a:aa:7f:dc:b6:80:10:32:
71:97:e6:1e:93:24:9c:25:e4:24:d3:59:12:7a:b8:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1A:D6:6D:FA:EA:43:0D:55:52:5A:B4:6E:C7:92:5A:81:08:78:37
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/IhrWbfrqQw1VUlq0bseSWoEIeDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.202.0/24
89.116.210.0/23
89.116.218.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.167.0/24
89.117.188.0/24
89.117.190.0/24
89.117.215.0/24
89.117.218.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:10:1b:f0:14:b8:5d:0c:03:56:33:40:54:4f:fb:0e:d7:d8:
9e:2c:72:96:29:cc:e3:b9:4b:c0:22:ab:5a:21:94:4c:3e:d9:
0f:6f:27:c9:92:6e:b7:41:de:45:7d:c3:38:6d:8c:ca:0d:a5:
42:f1:23:c3:4a:7e:c2:b5:16:44:2e:e0:5b:99:d9:08:b4:dc:
ec:96:2e:89:18:67:91:94:b1:96:bc:a9:45:72:a1:44:9d:e3:
64:58:ce:bd:61:5b:10:06:9c:04:d4:41:0f:7f:f3:78:33:8a:
e9:7f:31:41:d3:92:65:d9:ce:45:49:7b:5d:3e:e4:17:4a:5f:
f3:b7:e8:56:03:19:64:bf:77:29:3a:83:aa:83:1b:08:1e:a4:
f4:de:06:47:40:1d:d4:d9:da:89:37:33:56:3e:ed:1b:96:33:
24:a0:cc:0f:21:ea:e0:68:ce:63:5d:ac:95:67:db:c9:f1:0f:
95:1d:7d:53:c1:b7:e0:ce:81:82:8c:2d:7d:fa:a2:f6:1b:e7:
32:a7:c0:59:aa:15:9f:f0:c1:00:d6:92:de:39:29:b4:aa:84:
41:3a:b0:82:44:b0:e9:8e:42:45:88:98:03:f6:13:14:1a:c3:
ff:aa:2d:05:76:cd:54:f7:bf:ca:24:3f:82:a7:09:84:47:9d:
31:8d:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:39 2025 by rpki-client