Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RW9rfYS2jVuli6tekeVComSlM8Q.roa
File: RW9rfYS2jVuli6tekeVComSlM8Q.roa (raw, json)
Hash identifier: Z+dhXaKYOVT5xGl1T0GX/uOL5d+xDI5Gk3dyQ7VgGGE=
Subject key identifier: 45:6F:6B:7D:84:B6:8D:5B:A5:8B:AB:5E:91:E5:42:A2:64:A5:33:C4
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B8626AC
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RW9rfYS2jVuli6tekeVComSlM8Q.roa
Signing time: Thu 23 Jun 2022 12:58:56 +0000
ROA not before: Thu 23 Jun 2022 12:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 89.117.109.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
86.38.4.0/23 maxlen: 24
89.117.48.0/20 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.120.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.246.0/23 maxlen: 24
86.38.242.0/23 maxlen: 24
86.38.241.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.189.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.200.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.214.0/24 maxlen: 24
86.38.220.0/23 maxlen: 24
86.38.226.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
89.117.11.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193341100 (0xb8626ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 23 12:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=456f6b7d84b68d5ba58bab5e91e542a264a533c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:d1:8e:72:e8:b4:c4:b2:65:5e:62:e1:0b:
06:67:b5:0b:8b:82:31:b1:d8:c5:ee:da:12:26:76:
aa:99:92:d6:be:21:5e:31:52:85:a6:15:6d:ac:5a:
a8:76:e3:6c:43:71:1b:35:43:ac:80:56:5a:f5:81:
45:8e:be:a5:7b:c0:98:18:36:39:c1:a6:3d:f4:72:
44:a4:37:dd:80:56:7d:91:7c:24:46:de:79:84:17:
14:f3:0d:d8:20:ce:31:42:01:ee:63:df:c0:21:fb:
30:a3:69:68:71:8e:7d:70:32:ef:99:b0:fd:fe:c3:
d2:d1:ce:9f:f6:8a:0c:8f:64:cf:d5:3f:e3:59:37:
25:61:5a:e8:75:2e:91:42:90:7c:a9:5d:5a:b1:98:
08:6b:d9:91:1c:f6:31:37:7e:3a:98:d7:4a:4f:4d:
20:29:c6:96:94:ac:70:c4:7a:f2:7b:b0:3f:5d:34:
b0:fd:de:4f:a1:3b:05:bf:4a:08:d2:3a:ce:1d:19:
57:69:be:ad:78:29:ec:a1:5e:b0:d6:02:0c:c5:72:
b2:ac:f5:76:57:c9:bb:95:c3:4d:68:b0:cc:a8:77:
d9:b6:ef:af:73:ef:3e:a7:1f:17:11:e8:a9:69:83:
25:24:1e:55:1c:dd:1a:36:32:03:ae:b3:ba:9a:33:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6F:6B:7D:84:B6:8D:5B:A5:8B:AB:5E:91:E5:42:A2:64:A5:33:C4
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RW9rfYS2jVuli6tekeVComSlM8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.183.0/24
84.46.200.0/24
86.38.4.0/23
86.38.180.0/22
86.38.189.0/24
86.38.200.0/24
86.38.214.0/24
86.38.220.0/23
86.38.226.0/24
86.38.238.0/24
86.38.241.0-86.38.243.255
86.38.246.0/23
89.116.56.0/24
89.116.58.0/23
89.116.68.0/23
89.116.96.0/24
89.116.135.0/24
89.116.156.0/24
89.116.158.0/24
89.116.175.0/24
89.116.177.0/24
89.116.218.0/24
89.116.242.0/23
89.116.246.0/23
89.117.11.0/24
89.117.48.0/20
89.117.109.0/24
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
71:71:36:6c:29:b0:1b:b2:e2:d6:05:44:6d:12:63:c7:77:32:
9f:9b:f0:a2:53:0f:22:d8:33:ed:1a:d9:6b:2b:b7:0c:7e:bb:
94:33:6b:36:e1:46:10:4c:38:f1:71:8e:68:db:75:18:ae:16:
db:99:80:86:c6:7d:61:b0:1f:73:86:08:d2:83:60:f6:00:28:
56:96:2a:bf:2e:a5:50:0f:82:73:00:38:c5:1e:c1:2c:fc:e6:
d8:a5:00:eb:5f:3d:6f:84:06:f7:19:13:7e:de:1b:9c:63:3a:
cb:55:55:2c:4a:da:e0:80:8d:83:3e:86:18:ad:87:67:db:56:
af:a6:15:a5:4b:b9:95:a1:bb:47:6f:64:f2:44:82:44:fa:f3:
94:c2:61:90:57:4f:fe:36:72:50:73:29:6c:a2:e7:18:86:b4:
d4:08:4e:24:68:2e:70:83:9f:15:00:5f:7e:9e:34:86:4b:69:
90:f1:ea:9d:62:b9:4a:4f:34:26:33:ee:c9:c7:3b:f5:0c:ff:
e4:b5:fb:b0:0b:09:2d:4b:65:ae:7c:fc:cf:cd:da:b1:bc:f8:
20:09:3e:a5:fa:c1:af:3d:12:c1:a2:46:f7:0f:97:cf:f3:7f:
a4:7f:6f:d4:2f:f5:3b:26:19:e3:e7:c9:16:ce:4b:ad:66:47:
b0:3a:79:cc
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIEC4YmrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDYy
MzEyNTg1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDU2ZjZiN2Q4NGI2
OGQ1YmE1OGJhYjVlOTFlNTQyYTI2NGE1MzNjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL110Y5y6LTEsmVeYuELBme1C4uCMbHYxe7aEiZ2qpmS1r4h
XjFShaYVbaxaqHbjbENxGzVDrIBWWvWBRY6+pXvAmBg2OcGmPfRyRKQ33YBWfZF8
JEbeeYQXFPMN2CDOMUIB7mPfwCH7MKNpaHGOfXAy75mw/f7D0tHOn/aKDI9kz9U/
41k3JWFa6HUukUKQfKldWrGYCGvZkRz2MTd+OpjXSk9NICnGlpSscMR68nuwP100
sP3eT6E7Bb9KCNI6zh0ZV2m+rXgp7KFesNYCDMVysqz1dlfJu5XDTWiwzKh32bbv
r3PvPqcfFxHoqWmDJSQeVRzdGjYyA66zupozRfcCAwEAAaOCArgwggK0MB0GA1Ud
DgQWBBRFb2t9hLaNW6WLq16R5UKiZKUzxDAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1JXOXJmWVMyalZ1bGk2dGVrZVZDb21TbE04US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
zQYIKwYBBQUHAQcBAf8Egb0wgbowgbcEAgABMIGwAwQAUoy3AwQAVC7IAwQBViYE
AwQCVia0AwQAVia9AwQAVibIAwQAVibWAwQBVibcAwQAVibiAwQAVibuMAwDBABW
JvEDBAJWJvADBAFWJvYDBABZdDgDBAFZdDoDBAFZdEQDBABZdGADBABZdIcDBABZ
dJwDBABZdJ4DBABZdK8DBABZdLEDBABZdNoDBAFZdPIDBAFZdPYDBABZdQsDBARZ
dTADBABZdW0DBAJZdXgwDQYJKoZIhvcNAQELBQADggEBAHFxNmwpsBuy4tYFRG0S
Y8d3Mp+b8KJTDyLYM+0a2Wsrtwx+u5QzazbhRhBMOPFxjmjbdRiuFtuZgIbGfWGw
H3OGCNKDYPYAKFaWKr8upVAPgnMAOMUewSz85tilAOtfPW+EBvcZE37eG5xjOstV
VSxK2uCAjYM+hhith2fbVq+mFaVLuZWhu0dvZPJEgkT685TCYZBXT/42clBzKWyi
5xiGtNQITiRoLnCDnxUAX36eNIZLaZDx6p1iuUpPNCYz7snHO/UM/+S1+7ALCS1L
Za58/M/N2rG8+CAJPqX6wa89EsGiRvcPl8/zf6R/b9Qv9TsmGePnyRbOS61mR7A6
ecw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org