Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/No1PQBr-tFl434FO8ZBZMWzJvfg.roa
File: No1PQBr-tFl434FO8ZBZMWzJvfg.roa (raw, json)
Hash identifier: yq1ljwZaRWJ64RVJwwvhmzCahb2GPEBUdw5bwBlzzU8=
Subject key identifier: 36:8D:4F:40:1A:FE:B4:59:78:DF:81:4E:F1:90:59:31:6C:C9:BD:F8
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A84603F
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/No1PQBr-tFl434FO8ZBZMWzJvfg.roa
Signing time: Wed 27 Apr 2022 07:06:25 +0000
ROA not before: Wed 27 Apr 2022 07:06:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176447551 (0xa84603f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 27 07:06:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=368d4f401afeb45978df814ef19059316cc9bdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:ed:90:f5:34:b6:13:7e:99:7c:52:91:9d:
3f:c0:3b:87:70:88:b3:fa:11:2a:c6:1c:ec:a0:1b:
dd:6d:3b:c9:fd:29:97:9b:29:5c:4d:31:33:f5:5e:
df:d4:7a:33:06:b6:c4:70:f6:5a:18:b4:46:2e:db:
5b:b9:1f:86:8c:18:aa:49:95:29:3b:c7:f6:95:15:
c9:d4:6e:ac:3e:cd:45:af:1f:31:b9:c2:75:5a:17:
22:86:88:2a:3c:ef:4d:e4:ca:25:74:52:dc:e4:bf:
8a:bf:84:94:72:2b:7a:74:86:07:84:40:eb:a9:87:
a2:1b:7f:7d:d4:1d:29:ed:de:dd:2b:b7:36:fa:b6:
2a:38:02:75:c4:70:d1:af:75:7a:1e:e3:ba:be:86:
cf:3a:01:20:31:df:d5:7d:ce:bd:17:9e:59:e4:16:
49:59:98:d5:14:2c:05:b2:44:e7:2d:ea:95:ab:f2:
9c:62:88:0c:4a:09:59:ca:f2:c2:38:0d:6d:1f:07:
41:78:35:a7:a4:7f:ea:40:4c:c3:ef:a6:ce:e3:9a:
ce:22:c5:94:7c:a4:85:84:8a:e1:62:b9:0a:b7:76:
53:e8:44:fa:f1:4d:72:6c:38:25:0f:c1:ac:22:04:
70:43:25:87:3f:97:4f:ed:92:72:e7:02:89:95:b3:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:4F:40:1A:FE:B4:59:78:DF:81:4E:F1:90:59:31:6C:C9:BD:F8
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/No1PQBr-tFl434FO8ZBZMWzJvfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.202.0/24
89.116.210.0/23
89.116.218.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0/24
89.117.218.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
17:bb:81:b5:f3:26:e8:34:68:38:4c:ce:3f:55:84:5c:e0:82:
91:4b:58:d3:6e:b4:8b:48:bd:58:1e:da:fd:b2:85:8a:8e:13:
c1:f5:b6:a9:38:60:a6:1c:b0:e1:ee:99:30:1a:f3:1e:fb:70:
5e:18:67:ac:1e:be:c0:3a:e8:d0:6b:b3:cd:a9:49:d7:3a:a7:
16:73:63:85:96:0a:0d:37:90:13:f5:bf:f0:25:30:fc:5a:d1:
5a:29:5d:d5:ab:78:b9:54:54:7c:e9:9f:4d:7b:e0:8e:71:95:
f0:d4:40:ad:ef:be:de:40:62:05:2c:d4:a2:e8:1a:27:7b:cd:
23:e4:e8:23:45:c6:5d:67:a4:14:fd:90:da:c6:59:ce:83:92:
d3:54:45:4e:13:80:8e:3d:ae:c3:c9:63:89:cc:2f:f7:6b:f1:
df:8f:f3:83:34:a1:71:58:8a:cd:d5:92:73:df:84:75:cc:37:
5a:ec:e9:7a:d8:ec:0f:cb:0b:1c:7c:06:96:4b:47:46:8e:ff:
53:aa:3b:2b:23:1d:f9:2e:90:12:7f:9a:bd:c6:11:70:61:45:
5f:ee:55:4f:1e:3d:07:48:b9:0b:fe:3f:e6:30:5d:97:d8:be:
da:b7:19:be:89:a2:cb:13:05:29:1c:4c:2b:c3:55:34:c5:4a:
c3:0a:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org