Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Lw0Y9Gb8u7RvpUui5vv9y-FuLJs.roa
File: Lw0Y9Gb8u7RvpUui5vv9y-FuLJs.roa (raw, json)
Hash identifier: M3ag3cCUc0wnJPPqrlXkLobaNCl8Soy0JDbZ83a8rBs=
Subject key identifier: 2F:0D:18:F4:66:FC:BB:B4:6F:A5:4B:A2:E6:FB:FD:CB:E1:6E:2C:9B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0BAF647E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Lw0Y9Gb8u7RvpUui5vv9y-FuLJs.roa
Signing time: Fri 01 Jul 2022 05:45:02 +0000
ROA not before: Fri 01 Jul 2022 05:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196043902 (0xbaf647e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 1 05:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f0d18f466fcbbb46fa54ba2e6fbfdcbe16e2c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:ab:16:58:ec:69:f0:ca:c6:17:cb:75:e6:
02:44:7d:19:ae:36:c5:9b:7f:8e:31:9a:b3:d2:b2:
ac:5d:77:67:5e:05:dd:f3:6b:d3:73:c3:f6:3a:de:
0b:93:43:07:dd:7b:32:14:d2:61:10:f3:9a:7f:9e:
9b:b8:7c:98:e7:4d:bf:d9:d9:25:7f:93:5c:b3:7b:
6a:04:3b:10:5b:10:0d:8b:f5:de:43:6c:9d:81:c7:
49:30:a3:6a:ec:f1:61:3c:f7:36:88:b6:44:cb:d2:
13:3a:67:3e:28:1a:90:c4:01:67:94:62:bb:9d:d3:
37:b9:ca:84:2c:ba:15:2a:5a:7e:9e:30:14:cb:2d:
91:16:27:54:a1:cc:99:9c:b3:c4:73:e9:e0:5a:9d:
ca:20:a0:fc:62:6c:7e:f2:26:33:8a:a0:4a:cb:f9:
df:d8:45:47:4d:be:95:25:ab:07:02:04:3a:cc:9f:
1c:42:ef:fc:30:54:70:41:15:c9:4c:de:dc:63:d7:
40:e6:76:1a:3d:f9:1e:5f:c3:e1:1c:72:6c:e9:10:
b7:82:94:2b:03:40:20:7e:f3:a0:7e:0b:99:16:9f:
f8:78:bb:1a:99:6b:b5:b8:e7:41:f5:d1:fc:4b:74:
47:3e:e0:e7:24:7c:64:f1:73:42:e9:b8:46:63:a6:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0D:18:F4:66:FC:BB:B4:6F:A5:4B:A2:E6:FB:FD:CB:E1:6E:2C:9B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Lw0Y9Gb8u7RvpUui5vv9y-FuLJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
05:30:b9:f7:0e:29:2f:77:49:fc:85:78:55:8d:00:84:67:d9:
a3:48:06:a4:56:e4:ba:d1:52:45:20:34:8a:d1:6c:70:57:f2:
64:e4:26:d8:bd:01:80:3c:77:07:d3:11:14:26:12:ef:d3:25:
79:46:c8:72:be:e7:45:13:ff:6c:2c:78:e8:38:7f:c8:1f:ff:
f1:51:e0:77:1e:30:f2:ba:77:60:7d:ef:c6:bf:21:12:09:4d:
0e:85:38:08:22:df:44:4e:c8:c2:52:74:5e:3d:c9:e7:93:0c:
49:f2:f0:7f:b6:da:99:70:45:53:0c:89:6a:b5:f7:81:5a:97:
7c:8a:8d:19:10:97:55:c9:77:da:96:e1:d7:f6:39:d0:4c:57:
20:07:47:6d:a4:6b:4a:3e:1e:18:7e:c0:dc:e8:b0:08:0e:bd:
73:83:68:58:0d:27:02:ba:6b:4f:3b:13:1f:a6:67:38:77:2d:
0d:49:dc:31:8f:f0:47:e9:7c:38:de:f5:8e:f6:9f:08:c8:fc:
cb:ce:98:9b:71:6b:b4:5a:e3:fe:61:4b:2c:0a:2d:fc:31:a8:
e3:70:2d:c9:7a:f7:f6:1f:64:81:fd:f4:c2:08:1b:cd:86:4d:
eb:71:bf:cf:2e:c5:ac:de:bb:d6:d0:11:e1:27:00:d9:b4:5d:
32:13:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org