Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LFFKfFjFgnKjm78B8GRookWDFrA.roa
File: LFFKfFjFgnKjm78B8GRookWDFrA.roa (raw, json)
Hash identifier: avvSLw0Aq4f0nECU7vqUgVSWlrWVuk2xIVCWZpmJMog=
Subject key identifier: 2C:51:4A:7C:58:C5:82:72:A3:9B:BF:01:F0:64:68:A2:45:83:16:B0
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B613AEA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LFFKfFjFgnKjm78B8GRookWDFrA.roa
Signing time: Tue 14 Jun 2022 08:52:44 +0000
ROA not before: Tue 14 Jun 2022 08:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 84.46.171.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
84.46.240.0/20 maxlen: 20
84.46.234.0/23 maxlen: 23
84.46.236.0/22 maxlen: 22
86.38.246.0/23 maxlen: 23
86.38.242.0/23 maxlen: 23
86.38.241.0/24 maxlen: 24
86.38.248.0/21 maxlen: 21
86.38.189.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
86.38.202.0/23 maxlen: 23
86.38.204.0/23 maxlen: 23
86.38.214.0/24 maxlen: 24
86.38.225.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.32.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.24.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
86.38.178.0/23 maxlen: 23
86.38.184.0/23 maxlen: 23
86.38.186.0/23 maxlen: 23
86.38.180.0/23 maxlen: 23
86.38.182.0/23 maxlen: 23
89.117.228.0/23 maxlen: 23
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 23
89.117.72.0/21 maxlen: 21
89.117.80.0/22 maxlen: 22
89.117.84.0/23 maxlen: 23
89.117.87.0/24 maxlen: 24
89.117.88.0/22 maxlen: 22
89.117.94.0/23 maxlen: 23
89.117.96.0/22 maxlen: 22
89.117.101.0/24 maxlen: 24
89.117.102.0/23 maxlen: 23
89.117.111.0/24 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.116.0/23 maxlen: 23
89.117.118.0/24 maxlen: 24
89.117.16.0/21 maxlen: 21
89.117.12.0/23 maxlen: 23
89.117.24.0/23 maxlen: 23
89.117.28.0/22 maxlen: 22
89.117.27.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
89.117.36.0/23 maxlen: 23
89.117.32.0/23 maxlen: 23
89.117.40.0/21 maxlen: 21
89.117.48.0/20 maxlen: 20
89.117.64.0/22 maxlen: 22
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.216.0/23 maxlen: 23
89.117.222.0/24 maxlen: 24
89.117.226.0/23 maxlen: 23
89.117.124.0/24 maxlen: 24
89.117.120.0/22 maxlen: 22
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.117.132.0/22 maxlen: 22
89.117.139.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
89.117.142.0/23 maxlen: 23
89.117.144.0/21 maxlen: 21
89.117.158.0/23 maxlen: 23
89.117.157.0/24 maxlen: 24
89.117.160.0/22 maxlen: 22
89.117.164.0/24 maxlen: 24
89.117.168.0/23 maxlen: 23
89.117.167.0/24 maxlen: 24
89.117.171.0/24 maxlen: 24
89.117.172.0/22 maxlen: 22
89.116.108.0/24 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 23
89.116.115.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 23
89.116.126.0/23 maxlen: 23
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.144.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.146.0/23 maxlen: 23
89.116.148.0/23 maxlen: 23
89.116.150.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.52.0/23 maxlen: 23
89.116.58.0/23 maxlen: 23
89.116.64.0/22 maxlen: 22
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 23
89.116.80.0/21 maxlen: 21
89.116.88.0/23 maxlen: 23
89.116.92.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.224.0/21 maxlen: 21
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.237.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.117.0.0/22 maxlen: 22
89.116.255.0/24 maxlen: 24
89.117.5.0/24 maxlen: 24
89.117.11.0/24 maxlen: 24
89.117.6.0/23 maxlen: 23
89.117.8.0/23 maxlen: 23
89.116.163.0/24 maxlen: 24
89.116.164.0/23 maxlen: 23
89.116.166.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.169.0/24 maxlen: 24
89.116.172.0/23 maxlen: 23
89.116.168.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 23
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.198.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.200.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 23
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.24.0/21 maxlen: 24
89.116.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190921450 (0xb613aea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 14 08:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c514a7c58c58272a39bbf01f06468a2458316b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:68:f8:16:1b:bd:cc:3d:6b:80:b6:3d:65:
c3:1e:9f:a1:2e:b8:12:4d:4f:92:ec:42:df:69:6e:
8b:07:10:f5:91:f6:d3:0d:d1:97:3f:41:83:80:a8:
6a:b9:56:25:76:87:eb:dd:ea:b7:ee:ca:05:08:d9:
fc:e5:65:a4:fd:94:06:3c:76:c5:54:26:5e:9d:6e:
bf:40:07:37:db:5e:04:36:97:87:e5:c5:4c:16:0a:
c9:70:48:b6:c9:89:33:2e:2d:a2:21:19:95:6c:03:
bd:20:0d:10:34:fd:cc:49:4d:07:ec:8a:89:af:6b:
49:72:8f:d9:96:a0:c6:0d:bd:86:a0:18:72:f1:9d:
12:91:ac:70:91:ee:d9:cb:e5:d9:29:f0:2f:be:bc:
47:f7:26:76:90:b4:fd:1a:29:40:db:ba:7b:df:d2:
a8:86:69:d8:15:66:82:1a:f8:a4:44:ce:e5:07:f0:
8c:8b:da:c9:e7:3c:a5:f4:09:87:9e:50:cf:42:ef:
07:02:ee:f3:79:d1:1e:f6:ed:68:2e:d5:4b:b6:20:
4b:e9:9c:e7:98:2a:4e:2f:80:f6:47:6d:fa:5c:99:
fb:99:2c:f1:48:c7:54:b9:c0:24:58:a6:35:02:a9:
c9:a5:b3:a3:cb:77:65:6b:8b:27:17:c4:41:8a:39:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:51:4A:7C:58:C5:82:72:A3:9B:BF:01:F0:64:68:A2:45:83:16:B0
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LFFKfFjFgnKjm78B8GRookWDFrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.183.0/24
84.46.171.0/24
84.46.234.0-84.46.255.255
86.38.7.0/24
86.38.24.0/24
86.38.32.0/24
86.38.37.0/24
86.38.151.0/24
86.38.156.0/24
86.38.175.0/24
86.38.177.0-86.38.187.255
86.38.189.0-86.38.190.255
86.38.202.0-86.38.205.255
86.38.214.0/24
86.38.225.0-86.38.226.255
86.38.241.0-86.38.243.255
86.38.246.0-86.38.255.255
89.116.24.0-89.116.39.255
89.116.52.0-89.116.54.255
89.116.58.0/23
89.116.64.0-89.116.70.255
89.116.80.0-89.116.89.255
89.116.92.0/24
89.116.99.0-89.116.100.255
89.116.103.0/24
89.116.106.0-89.116.108.255
89.116.112.0/23
89.116.115.0/24
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.140.0/23
89.116.144.0/24
89.116.146.0-89.116.150.255
89.116.154.0/24
89.116.163.0-89.116.166.255
89.116.168.0/23
89.116.171.0-89.116.173.255
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.198.0/24
89.116.200.0/24
89.116.202.0/23
89.116.208.0/22
89.116.220.0/23
89.116.223.0-89.116.231.255
89.116.233.0/24
89.116.237.0/24
89.116.239.0/24
89.116.248.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0-89.117.3.255
89.117.5.0-89.117.9.255
89.117.11.0-89.117.13.255
89.117.16.0-89.117.25.255
89.117.27.0-89.117.33.255
89.117.36.0-89.117.38.255
89.117.40.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.87.0-89.117.91.255
89.117.94.0-89.117.99.255
89.117.101.0-89.117.103.255
89.117.111.0-89.117.118.255
89.117.120.0-89.117.124.255
89.117.126.0/24
89.117.129.0-89.117.130.255
89.117.132.0-89.117.136.255
89.117.139.0/24
89.117.142.0-89.117.151.255
89.117.157.0-89.117.164.255
89.117.167.0-89.117.169.255
89.117.171.0-89.117.175.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:39:d5:2a:2c:c9:93:6c:7a:47:90:25:3b:5c:3a:be:8e:04:
ea:a8:77:28:73:cb:1b:0a:ab:fd:04:e0:ce:15:1e:5d:fd:37:
72:cb:d3:0f:cf:66:84:7c:95:89:d9:20:fb:d7:6b:81:0e:8d:
6c:fd:58:22:40:6f:6c:45:76:09:8b:5a:bc:46:79:56:c1:73:
d8:47:c5:ec:35:c6:46:8e:36:8b:71:3b:30:64:bb:96:80:19:
fe:cb:40:18:ac:26:eb:6d:b2:2e:42:b1:c8:b9:c5:41:0d:44:
f5:d8:ca:bf:e3:b3:ba:3c:47:2b:3e:b2:40:b6:f2:9c:9c:03:
0a:f4:85:42:9d:19:6e:ea:ff:b1:4a:d1:57:6e:63:3f:fc:29:
a2:80:a0:e3:19:65:12:3a:8b:45:bb:6b:91:0a:43:c2:a6:23:
29:2e:15:d5:2f:4d:4a:55:35:66:ea:5a:99:99:5a:7a:25:0a:
5e:5f:cb:96:65:09:53:86:c7:72:c4:35:31:b8:8b:2d:b1:a6:
4b:62:c7:1d:d6:43:ed:c3:5e:74:73:33:d5:2d:3c:6f:5d:5c:
6e:63:ae:c1:22:96:92:4d:de:08:8e:84:1b:94:81:20:5f:28:
51:34:4b:fc:4a:90:65:47:ad:ae:80:99:fc:7c:bb:64:a2:a7:
67:c3:ab:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org