Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/MP3C56Kf2xX_AvVSYeWpjrfy2jo.roa
File: MP3C56Kf2xX_AvVSYeWpjrfy2jo.roa (raw, json)
Hash identifier: oGHTXGmQCFyMDxOj7LtKKbp3U/uAedsECR9U6xJ4OYY=
Subject key identifier: 30:FD:C2:E7:A2:9F:DB:15:FF:02:F5:52:61:E5:A9:8E:B7:F2:DA:3A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D4A51BE5A6B4BADD9D44F1B28F55A25E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/MP3C56Kf2xX_AvVSYeWpjrfy2jo.roa
Signing time: Thu 25 Aug 2022 10:56:06 +0000
ROA not before: Thu 25 Aug 2022 10:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:a5:1b:e5:a6:b4:ba:dd:9d:44:f1:b2:8f:55:a2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 25 10:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30fdc2e7a29fdb15ff02f55261e5a98eb7f2da3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:cf:72:5a:47:9e:c0:3e:0a:fa:60:d6:d8:
ed:4d:08:8b:91:15:97:57:0b:48:eb:9b:bf:4c:3f:
4a:0f:b4:0c:4c:05:dd:19:58:95:2c:db:68:a3:60:
30:6f:8c:3d:5b:6b:d2:4e:6b:76:08:f5:4b:51:27:
2e:6b:8f:e1:f0:aa:3c:11:88:a7:c3:46:44:0a:7b:
6e:1d:20:e1:6b:e9:15:c5:0f:e7:fa:ce:09:99:c5:
f4:89:b5:7f:03:f2:51:ef:5d:3c:9d:90:f3:b4:e6:
1b:3b:5c:1f:c1:65:55:70:10:9f:18:b9:f2:42:0f:
d1:db:48:34:1f:bc:37:da:73:8c:e7:f8:8c:1f:94:
4a:24:81:68:89:5e:01:ca:79:34:35:76:8a:4f:ec:
28:a5:8c:9f:fe:1a:89:30:4f:76:01:c5:1a:f2:58:
a2:c2:f2:d6:26:ce:1b:6e:a2:28:08:11:4c:a0:ea:
46:34:24:53:62:00:d1:44:27:f5:c6:40:e9:9b:99:
48:a7:01:7d:a8:a5:cd:a5:c0:c3:d4:84:3a:b2:c3:
21:2b:ea:23:35:e3:54:42:51:8f:c3:fd:38:3a:0f:
e9:59:be:66:3e:57:16:d5:33:e0:6e:da:8b:38:b1:
47:9f:f7:23:97:fb:ef:6a:8d:01:a2:40:f5:ad:32:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:C2:E7:A2:9F:DB:15:FF:02:F5:52:61:E5:A9:8E:B7:F2:DA:3A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/MP3C56Kf2xX_AvVSYeWpjrfy2jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.132.0/24
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0-89.116.186.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/24
89.117.8.0/23
89.117.12.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c0:40:f2:bf:2d:b5:79:f6:f5:a2:8e:98:db:65:4c:a6:d5:
6b:fc:25:52:e0:69:5e:68:19:b1:8e:e8:ba:08:0b:28:18:61:
af:3d:c2:d5:43:ef:6f:6f:ff:86:76:d9:fc:ea:38:54:03:e7:
18:e1:52:5a:a4:85:69:22:66:97:f2:d1:fb:2c:e8:d5:7e:8e:
ef:42:5b:ca:04:b0:06:7c:fc:90:bf:79:59:39:7e:71:4a:56:
d8:c9:bb:48:41:c6:f8:3f:4e:ed:6c:ab:b9:90:7f:59:09:4f:
f7:af:2b:bb:3c:40:cf:5b:c9:8c:a6:31:3f:a3:11:27:4a:11:
c4:13:52:71:3c:53:a0:54:63:1b:41:1a:9c:df:c1:aa:13:8b:
9f:aa:62:34:ad:fe:cb:10:1a:1e:eb:c0:fa:57:41:1e:11:3e:
2b:ea:9a:54:23:f5:72:e3:a7:d3:9c:98:9b:72:12:71:f4:96:
b8:aa:e7:3e:23:0c:01:38:fb:af:e1:9e:5b:e6:1b:46:ab:66:
db:5c:59:d9:eb:a5:19:2f:15:71:32:66:10:3b:a6:66:68:45:
61:32:c8:07:ab:ad:7b:ba:45:14:38:46:4b:aa:eb:47:f2:f8:
af:ff:c4:58:1f:3e:5d:20:fc:5c:95:00:a0:f3:89:04:f5:8d:
91:db:1c:bf
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAYLUpRvlprS63Z1E8bKPVaJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODI1MTA1NjA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGZkYzJlN2EyOWZkYjE1ZmYwMmY1NTI2MWU1YTk4ZWI3ZjJkYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkfPclpHnsA+Cvpg1tjtTQiLkRWX
VwtI65u/TD9KD7QMTAXdGViVLNtoo2Awb4w9W2vSTmt2CPVLUScua4/h8Ko8EYin
w0ZECntuHSDha+kVxQ/n+s4JmcX0ibV/A/JR7108nZDztOYbO1wfwWVVcBCfGLny
Qg/R20g0H7w32nOM5/iMH5RKJIFoiV4Bynk0NXaKT+wopYyf/hqJME92AcUa8lii
wvLWJs4bbqIoCBFMoOpGNCRTYgDRRCf1xkDpm5lIpwF9qKXNpcDD1IQ6ssMhK+oj
NeNUQlGPw/04Og/pWb5mPlcW1TPgbtqLOLFHn/cjl/vvao0BokD1rTIw/QIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFDD9wuein9sV/wL1UmHlqY638to6MB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvTVAzQzU2S2YyeFhfQXZWU1llV3BqcmZ5MmpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCAT4EAgABMIIB
NgMEAVQu6gMEAVYmsgMEAlYmuAMEAVYmygMEAVYm9gMEAVl0OgMEAVl0WAMEAFl0
XDAMAwQBWXRqAwQAWXRsMAwDBABZdH0DBAdZdAADBABZdIQDBABZdIcwDAMEAll0
lAMEAFl0lgMEAFl0oQMEAFl0owMEAFl0pgMEAVl0rAMEAFl0rwMEAFl0sTAMAwQD
WXS4AwQAWXS6AwQAWXTBAwQBWXTSAwQAWXTaAwQAWXT8AwQBWXUIAwQBWXUMMAwD
BAJZdRwDBAFZdSADBAFZdSQDBANZdUgDBAFZdVQDBAJZdVgDBAFZdV4DBAFZdWYD
BABZdW0DBAFZdXQDBABZdYEDBAJZdYQDBAFZdY4DBAFZdZ4DBABZdb4DBABZddcD
BABZdd4DBAFZdeQDBABZdfUDBABZdfowDQYJKoZIhvcNAQELBQADggEBADbAQPK/
LbV59vWijpjbZUym1Wv8JVLgaV5oGbGO6LoICygYYa89wtVD729v/4Z22fzqOFQD
5xjhUlqkhWkiZpfy0fss6NV+ju9CW8oEsAZ8/JC/eVk5fnFKVtjJu0hBxvg/Tu1s
q7mQf1kJT/evK7s8QM9byYymMT+jESdKEcQTUnE8U6BUYxtBGpzfwaoTi5+qYjSt
/ssQGh7rwPpXQR4RPivqmlQj9XLjp9OcmJtyEnH0lriq5z4jDAE4+6/hnlvmG0ar
ZttcWdnrpRkvFXEyZhA7pmZoRWEyyAerrXu6RRQ4Rkuq60fy+K//xFgfPl0g/FyV
AKDziQT1jZHbHL8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org