Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NbB9cql5_P-QDbjctb6CtSfHNXM.roa
File: NbB9cql5_P-QDbjctb6CtSfHNXM.roa (raw, json)
Hash identifier: g6Wkp3jUAL/JEYBefWoTuqbeuLPn3dfuQREnOMnZGkg=
Subject key identifier: 35:B0:7D:72:A9:79:FC:FF:90:0D:B8:DC:B5:BE:82:B5:27:C7:35:73
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B40098D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NbB9cql5_P-QDbjctb6CtSfHNXM.roa
Signing time: Wed 08 Jun 2022 12:07:02 +0000
ROA not before: Wed 08 Jun 2022 12:07:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 84.46.171.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
84.46.240.0/20 maxlen: 20
84.46.234.0/23 maxlen: 23
84.46.236.0/22 maxlen: 22
86.38.246.0/23 maxlen: 23
86.38.242.0/23 maxlen: 23
86.38.241.0/24 maxlen: 24
86.38.248.0/21 maxlen: 21
86.38.189.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
86.38.202.0/23 maxlen: 23
86.38.204.0/23 maxlen: 23
86.38.214.0/24 maxlen: 24
86.38.225.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.32.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.24.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
86.38.178.0/23 maxlen: 23
86.38.184.0/23 maxlen: 23
86.38.186.0/23 maxlen: 23
86.38.180.0/23 maxlen: 23
86.38.182.0/23 maxlen: 23
89.117.228.0/23 maxlen: 23
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 23
89.117.72.0/21 maxlen: 21
89.117.80.0/22 maxlen: 22
89.117.84.0/23 maxlen: 23
89.117.87.0/24 maxlen: 24
89.117.88.0/22 maxlen: 22
89.117.94.0/23 maxlen: 23
89.117.96.0/22 maxlen: 22
89.117.101.0/24 maxlen: 24
89.117.102.0/23 maxlen: 23
89.117.111.0/24 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.116.0/23 maxlen: 23
89.117.118.0/24 maxlen: 24
89.117.16.0/21 maxlen: 21
89.117.12.0/23 maxlen: 23
89.117.24.0/23 maxlen: 23
89.117.28.0/22 maxlen: 22
89.117.27.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
89.117.36.0/23 maxlen: 23
89.117.32.0/23 maxlen: 23
89.117.40.0/21 maxlen: 21
89.117.48.0/20 maxlen: 20
89.117.64.0/22 maxlen: 22
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.216.0/23 maxlen: 23
89.117.222.0/24 maxlen: 24
89.117.226.0/23 maxlen: 23
89.117.124.0/24 maxlen: 24
89.117.120.0/22 maxlen: 22
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.117.132.0/22 maxlen: 22
89.117.139.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
89.117.142.0/23 maxlen: 23
89.117.144.0/21 maxlen: 21
89.117.158.0/23 maxlen: 23
89.117.157.0/24 maxlen: 24
89.117.160.0/22 maxlen: 22
89.117.164.0/24 maxlen: 24
89.117.168.0/23 maxlen: 23
89.117.167.0/24 maxlen: 24
89.117.171.0/24 maxlen: 24
89.117.172.0/22 maxlen: 22
89.116.108.0/24 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 23
89.116.115.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 23
89.116.126.0/23 maxlen: 23
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.144.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.146.0/23 maxlen: 23
89.116.148.0/23 maxlen: 23
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.52.0/23 maxlen: 23
89.116.58.0/23 maxlen: 23
89.116.64.0/22 maxlen: 22
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 23
89.116.80.0/21 maxlen: 21
89.116.88.0/23 maxlen: 23
89.116.92.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.224.0/21 maxlen: 21
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.237.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.117.0.0/22 maxlen: 22
89.116.255.0/24 maxlen: 24
89.117.5.0/24 maxlen: 24
89.117.11.0/24 maxlen: 24
89.117.6.0/23 maxlen: 23
89.117.8.0/23 maxlen: 23
89.116.163.0/24 maxlen: 24
89.116.164.0/23 maxlen: 23
89.116.166.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.169.0/24 maxlen: 24
89.116.172.0/23 maxlen: 23
89.116.168.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 23
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.198.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.200.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 23
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.24.0/21 maxlen: 24
89.116.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188746125 (0xb40098d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 8 12:07:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35b07d72a979fcff900db8dcb5be82b527c73573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:6f:fa:ea:0e:f9:b3:da:88:dc:e0:23:7f:
ce:b7:53:d1:0f:08:19:3b:b3:7a:f0:bf:f7:b5:ba:
2f:e2:f7:16:b0:03:4c:05:9c:62:4b:42:e9:c5:bd:
e1:21:89:c0:79:6b:83:8f:00:82:b6:78:c9:96:20:
e0:3c:4a:fa:92:41:84:3d:ce:36:90:88:da:c9:2f:
d4:73:1c:80:67:24:63:fa:9c:7f:7a:cc:16:51:3a:
89:09:31:9d:f1:83:16:29:35:e3:df:ed:be:a4:a5:
9d:02:1c:88:bf:eb:b2:a1:bf:d8:39:0b:db:62:05:
73:ae:62:21:05:72:e3:14:a8:6c:0a:ff:97:24:1b:
26:16:d4:26:6c:4c:ad:f4:91:06:04:2b:d4:1c:6a:
2b:c3:07:8f:d9:6e:09:20:76:21:fd:70:f9:82:c5:
a5:f5:b9:f9:02:33:3c:db:20:ca:97:fe:0f:d3:cc:
39:25:f0:81:98:fd:f3:02:40:ba:7b:45:0e:09:b2:
67:85:10:a9:8d:a1:1d:19:c4:7d:6f:62:f5:9a:b8:
a0:59:79:03:20:ea:76:ad:ec:9d:8c:53:53:33:4f:
b2:8a:dd:90:1b:49:e5:91:f1:e4:71:1b:48:ea:6f:
46:ee:4e:4c:07:5e:cb:ca:03:33:87:37:a7:a1:fb:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B0:7D:72:A9:79:FC:FF:90:0D:B8:DC:B5:BE:82:B5:27:C7:35:73
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NbB9cql5_P-QDbjctb6CtSfHNXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.183.0/24
84.46.171.0/24
84.46.234.0-84.46.255.255
86.38.7.0/24
86.38.24.0/24
86.38.32.0/24
86.38.37.0/24
86.38.151.0/24
86.38.156.0/24
86.38.175.0/24
86.38.177.0-86.38.187.255
86.38.189.0-86.38.190.255
86.38.202.0-86.38.205.255
86.38.214.0/24
86.38.225.0-86.38.226.255
86.38.241.0-86.38.243.255
86.38.246.0-86.38.255.255
89.116.24.0-89.116.39.255
89.116.52.0-89.116.54.255
89.116.58.0/23
89.116.64.0-89.116.70.255
89.116.80.0-89.116.89.255
89.116.92.0/24
89.116.99.0-89.116.100.255
89.116.103.0/24
89.116.106.0-89.116.108.255
89.116.112.0/23
89.116.115.0/24
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.140.0/23
89.116.144.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.163.0-89.116.166.255
89.116.168.0/23
89.116.171.0-89.116.173.255
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.198.0/24
89.116.200.0/24
89.116.202.0/23
89.116.208.0/22
89.116.220.0/23
89.116.223.0-89.116.231.255
89.116.233.0/24
89.116.237.0/24
89.116.239.0/24
89.116.248.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0-89.117.3.255
89.117.5.0-89.117.9.255
89.117.11.0-89.117.13.255
89.117.16.0-89.117.25.255
89.117.27.0-89.117.33.255
89.117.36.0-89.117.38.255
89.117.40.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.87.0-89.117.91.255
89.117.94.0-89.117.99.255
89.117.101.0-89.117.103.255
89.117.111.0-89.117.118.255
89.117.120.0-89.117.124.255
89.117.126.0/24
89.117.129.0-89.117.130.255
89.117.132.0-89.117.136.255
89.117.139.0/24
89.117.142.0-89.117.151.255
89.117.157.0-89.117.164.255
89.117.167.0-89.117.169.255
89.117.171.0-89.117.175.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ce:1e:53:39:59:a4:34:1f:f2:e5:2e:a9:60:72:03:ff:80:
f7:15:cf:02:6e:b2:15:27:f4:e2:05:c5:0d:a8:38:83:7b:37:
02:83:11:32:7a:cf:b2:ef:2e:f9:ee:de:29:88:3c:53:06:13:
0d:1f:b0:ce:9d:a7:99:e8:a3:81:3c:98:9b:09:3e:e9:4f:ae:
48:c8:a8:d7:e4:0b:d4:82:70:76:5c:3a:f5:b7:78:67:4d:54:
f6:3c:4a:d1:b6:f4:b6:b6:4f:90:fa:48:07:c3:22:eb:cd:0f:
af:29:93:6e:68:9e:ca:b6:83:70:68:65:12:19:56:28:4d:4b:
d0:44:93:22:6c:24:db:55:21:c8:8a:69:ca:53:c5:1f:08:4b:
2c:37:26:fb:71:39:c0:67:e7:42:12:d3:6b:6b:c4:3a:37:82:
dd:68:e2:0b:0f:72:2b:d3:e3:7e:93:77:c4:71:3f:8c:6a:e6:
e7:8b:e0:6f:04:72:32:6b:50:fa:08:dc:18:58:5a:0e:86:f3:
47:34:2c:f1:5d:a9:6c:25:97:1c:4d:4d:e8:04:4e:a9:e5:6a:
4d:9a:c3:c5:ab:4c:10:c6:fb:15:57:1b:34:a6:5e:e6:0e:f7:
63:56:14:09:fb:0a:b6:39:2e:ae:22:55:d1:3d:9e:56:67:48:
a7:f4:a2:f4
-----BEGIN CERTIFICATE-----
MIIILzCCBxegAwIBAgIEC0AJjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDYw
ODEyMDcwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzViMDdkNzJhOTc5
ZmNmZjkwMGRiOGRjYjViZTgyYjUyN2M3MzU3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJYyb/rqDvmz2ojc4CN/zrdT0Q8IGTuzevC/97W6L+L3FrAD
TAWcYktC6cW94SGJwHlrg48AgrZ4yZYg4DxK+pJBhD3ONpCI2skv1HMcgGckY/qc
f3rMFlE6iQkxnfGDFik149/tvqSlnQIciL/rsqG/2DkL22IFc65iIQVy4xSobAr/
lyQbJhbUJmxMrfSRBgQr1BxqK8MHj9luCSB2If1w+YLFpfW5+QIzPNsgypf+D9PM
OSXwgZj98wJAuntFDgmyZ4UQqY2hHRnEfW9i9Zq4oFl5AyDqdq3snYxTUzNPsord
kBtJ5ZHx5HEbSOpvRu5OTAdey8oDM4c3p6H7ZSECAwEAAaOCBUkwggVFMB0GA1Ud
DgQWBBQ1sH1yqXn8/5ANuNy1voK1J8c1czAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L05iQjljcWw1X1AtUURiamN0YjZDdFNmSE5YTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
A10GCCsGAQUFBwEHAQH/BIIDTDCCA0gwggNEBAIAATCCAzwDBABSjLcDBABULqsw
CwMEAVQu6gMDAFQuAwQAViYHAwQAViYYAwQAViYgAwQAViYlAwQAViaXAwQAViac
AwQAViavMAwDBABWJrEDBAJWJrgwDAMEAFYmvQMEAFYmvjAMAwQBVibKAwQBVibM
AwQAVibWMAwDBABWJuEDBABWJuIwDAMEAFYm8QMEAlYm8DALAwQBVib2AwMAViYw
DAMEA1l0GAMEA1l0IDAMAwQCWXQ0AwQAWXQ2AwQBWXQ6MAwDBAZZdEADBABZdEYw
DAMEBFl0UAMEAVl0WAMEAFl0XDAMAwQAWXRjAwQAWXRkAwQAWXRnMAwDBAFZdGoD
BABZdGwDBAFZdHADBABZdHMwDAMEAFl0fQMEAFl0gDAMAwQBWXSCAwQAWXSEAwQB
WXSMAwQAWXSQMAwDBAFZdJIDBABZdJYwDAMEAFl0mQMEAFl0mjAMAwQAWXSjAwQA
WXSmAwQBWXSoMAwDBABZdKsDBAFZdKwDBABZdLMwDAMEA1l0uAMEAFl0ujAMAwQA
WXS9AwQAWXS+AwQAWXTGAwQAWXTIAwQBWXTKAwQCWXTQAwQBWXTcMAwDBABZdN8D
BANZdOADBABZdOkDBABZdO0DBABZdO8DBABZdPgDBABZdPoDBAFZdPwwDAMEAFl0
/wMEAll1ADAMAwQAWXUFAwQBWXUIMAwDBABZdQsDBAFZdQwwDAMEBFl1EAMEAVl1
GDAMAwQAWXUbAwQBWXUgMAwDBAJZdSQDBABZdSYwDAMEA1l1KAMEAFl1RDAMAwQB
WXVGAwQBWXVUMAwDBABZdVcDBAJZdVgwDAMEAVl1XgMEAll1YDAMAwQAWXVlAwQD
WXVgMAwDBABZdW8DBABZdXYwDAMEA1l1eAMEAFl1fAMEAFl1fjAMAwQAWXWBAwQA
WXWCMAwDBAJZdYQDBABZdYgDBABZdYswDAMEAVl1jgMEA1l1kDAMAwQAWXWdAwQA
WXWkMAwDBABZdacDBAFZdagwDAMEAFl1qwMEBFl1oAMEAFl1vAMEAFl1vjAMAwQA
WXXXAwQAWXXaAwQAWXXeMAwDBAFZdeIDBAFZdeQDBABZdfUDBABZdfoDBABZdf4w
DQYJKoZIhvcNAQELBQADggEBAGrOHlM5WaQ0H/LlLqlgcgP/gPcVzwJushUn9OIF
xQ2oOIN7NwKDETJ6z7LvLvnu3imIPFMGEw0fsM6dp5noo4E8mJsJPulPrkjIqNfk
C9SCcHZcOvW3eGdNVPY8StG29La2T5D6SAfDIuvND68pk25onsq2g3BoZRIZVihN
S9BEkyJsJNtVIciKacpTxR8ISyw3JvtxOcBn50IS02trxDo3gt1o4gsPcivT436T
d8RxP4xq5ueL4G8EcjJrUPoI3BhYWg6G80c0LPFdqWwllxxNTegETqnlak2aw8Wr
TBDG+xVXGzSmXuYO92NWFAn7CrY5Lq4iVdE9nlZnSKf0ovQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org