Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LbF07QIA3h3qYwjX-I9NFIvjU9A.roa
File: LbF07QIA3h3qYwjX-I9NFIvjU9A.roa (raw, json)
Hash identifier: 16Y2sXjIfvdsdpp9Kr9+Byd89jfeg9hAC52orYLchhw=
Subject key identifier: 2D:B1:74:ED:02:00:DE:1D:EA:63:08:D7:F8:8F:4D:14:8B:E3:53:D0
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182866F187E5C150A3FFECB884DFCBDEC45
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LbF07QIA3h3qYwjX-I9NFIvjU9A.roa
Signing time: Wed 10 Aug 2022 06:26:43 +0000
ROA not before: Wed 10 Aug 2022 06:26:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:86:6f:18:7e:5c:15:0a:3f:fe:cb:88:4d:fc:bd:ec:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 10 06:26:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db174ed0200de1dea6308d7f88f4d148be353d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:3a:0c:61:24:51:f0:e5:6c:79:e7:de:9b:
85:7b:e6:ce:ed:1c:2a:51:3f:dc:b8:6a:f0:54:0e:
9d:f2:1b:63:b2:5d:35:09:49:a2:c0:39:b7:de:13:
78:d0:cc:64:65:4b:49:18:87:03:09:8e:ad:5d:df:
99:5b:6a:13:d6:bc:0c:63:df:de:77:35:2a:48:01:
2e:83:b1:aa:c9:89:58:ac:a3:f5:5a:5b:0e:6d:ba:
c6:04:13:8c:ca:5f:eb:40:51:9c:5d:1d:63:ef:30:
4a:c7:15:c3:0f:66:44:f8:56:5f:44:a4:7f:35:08:
3c:90:b0:b9:0c:ae:71:b8:77:bb:28:c6:14:01:c6:
37:82:16:08:1f:91:22:fb:40:b5:6f:c6:6d:36:c8:
cd:5a:8c:37:49:de:c8:af:46:9b:b1:b5:84:ac:d5:
d3:67:93:ed:e8:65:1d:f3:fc:fd:8c:2b:5f:47:9b:
aa:ce:a0:5c:e1:17:a9:d9:2d:bc:ed:ca:e5:a2:f7:
ee:da:9a:52:d5:df:f7:d2:88:ce:3a:b2:85:f9:c4:
de:5c:94:48:a8:a4:bf:7e:48:e4:93:60:7d:ea:01:
b2:86:7b:55:5c:0e:cc:29:fc:c3:07:34:fd:8a:6f:
dc:49:87:a7:61:96:d3:e6:d7:5f:50:f8:10:14:bc:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:74:ED:02:00:DE:1D:EA:63:08:D7:F8:8F:4D:14:8B:E3:53:D0
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/LbF07QIA3h3qYwjX-I9NFIvjU9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:83:b1:41:cf:99:6a:c7:fb:64:f0:61:3d:e3:fa:8d:fa:c9:
c0:b1:42:e5:a5:bf:9c:de:1b:3a:f2:62:2b:29:11:cb:a4:06:
58:39:9b:d7:35:16:45:4e:72:55:69:b1:f7:5a:de:8e:c9:94:
b5:65:d6:9d:81:a9:c9:ae:d0:0b:22:cb:99:8a:a1:4c:d7:1c:
70:2f:84:1e:91:af:3e:1b:37:4c:6f:ca:e9:29:9d:61:18:e3:
22:a1:c8:da:eb:a0:24:65:42:60:5e:f4:17:ea:8d:7f:ba:60:
a9:28:5b:4c:52:aa:3f:38:c2:44:34:8e:45:46:6b:60:eb:3b:
13:5a:07:51:36:60:69:a8:97:9c:47:3c:54:cd:b1:09:bd:93:
15:d1:f0:e6:7d:07:7f:ba:41:cd:b0:e0:bd:63:dc:1a:ca:8f:
42:93:f8:96:f9:6f:45:ea:f3:54:6c:20:eb:c8:56:e7:7f:13:
4b:ce:df:ff:08:f4:e0:5f:de:18:7d:b8:78:40:dc:47:7b:85:
a5:d1:d5:f3:87:0b:c8:7f:66:80:ae:e5:cc:dc:8a:7c:ef:b7:
ce:90:f0:93:48:26:d7:ba:2b:5e:76:ec:54:88:11:0b:01:2c:
c6:c9:b0:ad:26:b1:cf:14:3d:cc:e2:5e:56:65:d4:0b:7f:71:
d0:6b:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org