Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UKJCzir9fCCqhRIE7mAqU8rMzC8.roa
File: UKJCzir9fCCqhRIE7mAqU8rMzC8.roa (raw, json)
Hash identifier: e72m4d4YAjgqOUIC61snJhRD7sA5NNue9IUrFsLHS7U=
Subject key identifier: 50:A2:42:CE:2A:FD:7C:20:AA:85:12:04:EE:60:2A:53:CA:CC:CC:2F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A2BC736
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UKJCzir9fCCqhRIE7mAqU8rMzC8.roa
Signing time: Wed 06 Apr 2022 09:25:04 +0000
ROA not before: Wed 06 Apr 2022 09:25:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.216.0/23 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
89.117.167.0/24 maxlen: 24
84.46.234.0/23 maxlen: 24
89.117.168.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170641206 (0xa2bc736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 6 09:25:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50a242ce2afd7c20aa851204ee602a53cacccc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:83:64:97:fb:d1:31:cd:d9:fc:41:cd:3a:
1d:13:78:0e:17:b2:14:55:90:e1:3d:6e:26:db:17:
c3:8e:4a:db:0a:1e:ea:a9:eb:8a:6b:21:74:4b:b2:
49:7c:d6:f4:2b:bd:2f:5c:67:cf:0a:dd:a1:c3:7c:
d7:48:fb:5c:c2:c9:ff:b4:bd:82:f6:35:a2:00:12:
bc:57:c0:fe:43:75:37:ae:44:8b:2f:84:1a:d4:c6:
be:73:d6:e8:a2:6c:08:56:9b:15:e9:a6:fc:c2:49:
a2:6b:aa:96:0f:de:e7:31:df:f0:e4:aa:49:22:6f:
cf:e1:60:86:89:41:45:ed:27:92:91:0d:ca:a3:61:
d7:d8:c4:d0:03:d7:84:a4:40:40:75:6a:67:2c:e8:
12:6e:37:27:59:a9:a0:bc:d9:15:58:61:47:d7:9f:
98:51:78:68:aa:e2:21:28:11:bf:7e:17:63:7f:c8:
24:33:9e:86:02:d2:14:42:a2:3c:8e:21:77:ff:a8:
55:8f:8f:91:a6:b7:22:e5:d0:10:9c:77:49:70:b6:
76:8a:20:f2:9f:3a:13:46:4b:4a:d2:9b:35:05:29:
9f:f4:e6:f1:e3:5c:5b:45:3e:a5:1c:e4:b2:10:b5:
b7:d8:52:08:d8:52:a1:58:3c:41:18:fa:c7:e0:9f:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A2:42:CE:2A:FD:7C:20:AA:85:12:04:EE:60:2A:53:CA:CC:CC:2F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UKJCzir9fCCqhRIE7mAqU8rMzC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.202.0/24
89.116.210.0/23
89.116.218.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.167.0-89.117.169.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4b:27:a0:89:3c:3a:39:f6:10:8a:68:25:ff:8a:29:03:ee:
f1:3d:50:c1:43:21:9e:2d:bd:23:f9:68:27:f1:70:2f:e7:36:
39:9f:29:9b:2e:88:7c:56:6c:68:fa:99:92:bf:da:33:8a:25:
ab:55:e1:26:ae:79:28:e9:79:21:1f:ed:e6:99:a6:c8:92:02:
04:bb:0f:53:ab:2f:77:77:ac:d6:be:9f:f9:c0:af:e2:4f:4e:
df:fe:8e:09:80:c0:03:10:27:bd:a2:1c:65:77:ce:45:a9:b7:
e3:5f:47:b5:7d:81:9f:c7:91:3c:af:3d:31:b9:09:2b:8b:ad:
6c:77:d0:f8:50:d1:3b:84:67:27:95:a4:cd:0f:cc:e8:28:90:
0f:dc:69:a5:fb:1e:13:42:af:9e:62:1b:2c:df:f3:23:e7:a7:
3a:9e:b7:7f:ae:c7:77:87:f4:fe:fd:c7:c4:a6:05:8a:aa:8e:
d0:35:db:7d:46:32:22:e4:06:a3:9c:65:b9:da:75:b7:43:2c:
74:25:36:4e:e7:60:f0:1a:06:e6:bb:ae:bc:24:91:79:2f:48:
c8:a7:e2:dc:85:20:55:db:9c:e7:ed:9b:c9:43:b7:5a:00:e1:
fb:28:af:34:99:26:ed:88:ca:99:17:ce:16:37:ab:cd:fc:0f:
69:d3:61:07
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIECivHNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDQw
NjA5MjUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBhMjQyY2UyYWZk
N2MyMGFhODUxMjA0ZWU2MDJhNTNjYWNjY2MyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALyBg2SX+9Exzdn8Qc06HRN4DheyFFWQ4T1uJtsXw45K2woe
6qnrimshdEuySXzW9Cu9L1xnzwrdocN810j7XMLJ/7S9gvY1ogASvFfA/kN1N65E
iy+EGtTGvnPW6KJsCFabFemm/MJJomuqlg/e5zHf8OSqSSJvz+FgholBRe0nkpEN
yqNh19jE0APXhKRAQHVqZyzoEm43J1mpoLzZFVhhR9efmFF4aKriISgRv34XY3/I
JDOehgLSFEKiPI4hd/+oVY+Pkaa3IuXQEJx3SXC2doog8p86E0ZLStKbNQUpn/Tm
8eNcW0U+pRzkshC1t9hSCNhSoVg8QRj6x+Cff5cCAwEAAaOCBCMwggQfMB0GA1Ud
DgQWBBRQokLOKv18IKqFEgTuYCpTyszMLzAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1VLSkN6aXI5ZkNDcWhSSUU3bUFxVThyTXpDOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AjcGCCsGAQUFBwEHAQH/BIICJjCCAiIwggIeBAIAATCCAhYDBAFULuoDBAFWJrIw
DAMEAVYmtgMEAlYmuAMEAVYmygMEAVYm9gMEAVl0NAMEAVl0OjAMAwQCWXREAwQA
WXRGAwQAWXRMAwQBWXRYMAwDBABZdFsDBABZdFwwDAMEAVl0agMEAFl0bDAMAwQA
WXR9AwQAWXSAMAwDBAFZdIIDBABZdIQDBABZdIcDBABZdIkDBABZdI0wDAMEAVl0
kgMEAFl0ljAMAwQAWXSZAwQAWXSaAwQAWXSeAwQAWXShMAwDBABZdKMDBABZdKYD
BAFZdKwDBABZdK8DBABZdLEDBABZdLMwDAMEA1l0uAMEAFl0ujAMAwQAWXS9AwQA
WXS+AwQAWXTBAwQAWXTKAwQBWXTSAwQAWXTaAwQAWXT6AwQBWXT8AwQAWXT/MAwD
BAFZdQYDBAFZdQgDBAFZdQwDBAFZdRgwDAMEAll1HAMEAVl1IAMEAVl1JDAMAwQG
WXVAAwQAWXVEMAwDBAFZdUYDBAFZdVQDBAJZdVgwDAMEAVl1XgMEAll1YAMEAVl1
ZgMEAFl1bTAMAwQEWXVwAwQBWXV0AwQAWXWBAwQCWXWEAwQAWXWLAwQBWXWOMAwD
BAFZdZ4DBAJZdaAwDAMEAFl1pwMEAVl1qAMEAFl1vAMEAFl1vjAMAwQAWXXXAwQA
WXXaAwQAWXXeMAwDBAFZdeIDBAFZdeQDBABZdfUDBABZdfoDBABZdf4wDQYJKoZI
hvcNAQELBQADggEBAH1LJ6CJPDo59hCKaCX/iikD7vE9UMFDIZ4tvSP5aCfxcC/n
NjmfKZsuiHxWbGj6mZK/2jOKJatV4SaueSjpeSEf7eaZpsiSAgS7D1OrL3d3rNa+
n/nAr+JPTt/+jgmAwAMQJ72iHGV3zkWpt+NfR7V9gZ/HkTyvPTG5CSuLrWx30PhQ
0TuEZyeVpM0PzOgokA/caaX7HhNCr55iGyzf8yPnpzqet3+ux3eH9P79x8SmBYqq
jtA1231GMiLkBqOcZbnadbdDLHQlNk7nYPAaBua7rrwkkXkvSMin4tyFIFXbnOft
m8lDt1oA4fsorzSZJu2IypkXzhY3q838D2nTYQc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org