Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RnQAp4uhiRJ1XWEX7As57Gx4IUc.roa
File: RnQAp4uhiRJ1XWEX7As57Gx4IUc.roa (raw, json)
Hash identifier: GzusiZAhzk98D0+JkWhKW/HAfF8XJctyclqTTAXuAtE=
Subject key identifier: 46:74:00:A7:8B:A1:89:12:75:5D:61:17:EC:0B:39:EC:6C:78:21:47
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A79E850
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RnQAp4uhiRJ1XWEX7As57Gx4IUc.roa
Signing time: Sun 24 Apr 2022 22:33:12 +0000
ROA not before: Sun 24 Apr 2022 22:33:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.117.167.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.117.6.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175761488 (0xa79e850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 24 22:33:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=467400a78ba18912755d6117ec0b39ec6c782147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:4f:c8:25:fb:2a:89:cc:2c:d3:06:24:c5:
4d:db:5b:d7:48:7f:87:f8:ca:81:c4:cc:9b:b0:d6:
bf:70:8a:ac:b4:18:33:b2:f3:81:53:d0:e7:e2:2d:
11:fb:c0:7d:a2:a5:a0:a3:eb:c2:8b:e2:34:f0:ae:
be:ae:9f:ff:61:99:51:61:2f:f0:36:31:f0:2d:1b:
63:61:5b:c8:54:1f:b5:db:21:f9:3f:b2:89:12:54:
1f:18:e5:c3:96:8d:9a:4c:ea:b5:d3:9f:86:a1:23:
c3:33:a1:5a:7e:83:dd:2e:f8:84:bc:a7:b9:ce:f7:
5c:a1:c1:3a:2f:73:ea:16:3b:d5:49:16:80:1c:f9:
24:85:93:6b:4d:0f:65:01:d6:52:e9:c8:9b:81:5d:
d6:de:64:62:3f:8a:9f:31:62:52:5d:17:37:63:ca:
00:96:b7:5f:89:7e:2b:d6:72:85:ef:bf:1d:13:5b:
c1:c4:30:32:5e:78:46:67:e9:bc:9c:44:db:3d:71:
73:bc:71:6c:54:01:12:53:df:84:71:98:cf:c1:cc:
31:52:7d:6c:0b:09:7d:e4:43:24:77:6a:23:55:30:
91:bf:ad:ac:d6:e7:63:cd:47:93:70:d7:a3:15:ad:
13:a2:54:c0:a9:68:bf:b9:7e:67:2c:d8:a1:e6:75:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:74:00:A7:8B:A1:89:12:75:5D:61:17:EC:0B:39:EC:6C:78:21:47
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RnQAp4uhiRJ1XWEX7As57Gx4IUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.202.0/24
89.116.210.0/23
89.116.218.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.167.0/24
89.117.188.0/24
89.117.190.0/24
89.117.215.0/24
89.117.218.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5e:e7:52:f2:ac:ab:7d:6f:0d:60:45:01:2a:dd:eb:75:16:
ea:b7:f3:0b:6f:08:e5:2f:cb:ab:24:2d:d4:58:0b:01:e2:fe:
cc:b0:b9:26:87:0e:42:de:cb:73:55:ed:56:b3:46:96:4b:0d:
3f:e3:8c:83:cf:91:28:19:6f:e7:2c:17:d1:b3:46:67:97:72:
e2:b7:5c:22:5c:a5:78:07:73:d5:dd:9a:cb:fc:ef:74:e6:16:
72:a3:5c:f0:eb:cc:8d:d1:50:fd:86:8c:b5:4e:86:0a:f9:12:
96:db:44:94:26:a2:f8:20:99:d5:4c:a7:02:f1:2a:be:d3:0b:
9d:91:bd:df:08:0a:af:48:e7:22:0b:86:64:f8:e9:d0:15:b7:
80:e2:fd:3a:cb:5a:77:ba:0f:61:0b:38:c7:de:35:98:b8:8c:
83:ea:39:1a:c2:69:23:14:50:13:c9:b3:cd:cb:35:67:bf:e0:
d3:9c:13:eb:c7:8c:b8:9a:9f:22:f3:2a:54:3e:7c:58:5a:1c:
4d:c7:2b:ed:78:c3:5b:58:52:e8:cd:11:d9:8c:d8:46:a4:7b:
05:b5:00:4c:7d:20:77:02:53:d6:a6:29:15:3f:20:2b:d6:04:
dc:b8:89:dd:d4:4b:31:67:54:fe:d7:52:93:47:1a:42:aa:7e:
d8:bd:70:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org