Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VOq6DblatS_yqsm9yizj40KrBFg.roa
File: VOq6DblatS_yqsm9yizj40KrBFg.roa (raw, json)
Hash identifier: wzgzAqjC/8mkXHh6Z8VGyMQpgX+wdJNBPooVc90ML44=
Subject key identifier: 54:EA:BA:0D:B9:5A:B5:2F:F2:AA:C9:BD:CA:2C:E3:E3:42:AB:04:58
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B9C33EA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VOq6DblatS_yqsm9yizj40KrBFg.roa
Signing time: Sun 26 Jun 2022 12:37:22 +0000
ROA not before: Sun 26 Jun 2022 12:37:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194786282 (0xb9c33ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 26 12:37:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54eaba0db95ab52ff2aac9bdca2ce3e342ab0458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:59:01:f7:47:b1:15:6f:2f:62:58:30:91:
5a:e1:ac:51:a1:f5:59:83:67:20:56:92:44:ee:00:
38:99:03:26:6f:41:ba:ab:b3:4b:57:30:1c:e1:e3:
f0:dc:5f:db:62:d7:24:26:4f:0c:d9:f0:db:fc:97:
04:26:d8:a2:73:b6:99:82:07:de:f2:68:31:04:25:
fc:03:26:8d:9c:97:2b:6a:c3:c1:75:92:c7:e6:e6:
d9:70:1a:a4:a2:44:56:8c:bd:9c:5f:0e:04:12:b2:
44:2f:57:34:a6:96:97:1e:e7:08:0e:42:38:a2:55:
71:e0:b9:30:5d:e1:d0:c6:f2:dd:8a:61:ca:6e:92:
a8:e8:79:1a:37:27:60:71:00:10:a8:3a:60:f9:49:
d8:3b:82:af:75:ea:51:d8:89:76:a2:37:31:9f:db:
66:8e:54:17:a2:4c:29:04:cd:55:69:08:03:b8:d3:
6a:c3:3b:3f:44:50:1c:29:0e:2c:39:a8:07:35:a7:
6d:ea:55:42:5e:56:f7:78:ac:b8:bd:e8:9f:8c:0f:
11:f5:fb:05:3a:c7:6d:6c:8b:04:90:7a:9a:b5:0c:
41:e4:e8:55:2f:ce:23:7d:67:78:09:2c:aa:c3:82:
38:7b:1a:b2:de:9d:a9:aa:d8:c4:80:19:8b:7a:4f:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:BA:0D:B9:5A:B5:2F:F2:AA:C9:BD:CA:2C:E3:E3:42:AB:04:58
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VOq6DblatS_yqsm9yizj40KrBFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.32.0/23
89.117.36.0/23
89.117.70.0/23
89.117.94.0/23
89.117.102.0/23
89.117.116.0/23
89.117.158.0-89.117.163.255
89.117.190.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:62:02:7e:25:d6:49:b5:eb:70:ad:a5:42:4f:45:4e:74:59:
0b:47:96:34:fd:f4:ae:46:92:29:ee:10:9f:d0:93:e0:ed:e3:
a1:88:11:d8:87:cb:84:c6:f8:5f:bc:17:df:fb:f1:15:10:84:
e7:fb:67:d0:27:70:6f:b1:98:da:5e:2b:9b:e6:31:1a:3d:53:
48:c2:f6:4c:70:36:76:25:ce:7a:81:46:61:86:48:49:dc:9b:
9d:82:33:c2:de:0c:df:77:a6:1f:07:85:6c:eb:5d:a2:79:72:
ca:0b:10:e8:ab:a2:8c:ba:71:05:dd:81:52:fd:80:84:6f:ff:
62:db:06:72:7a:56:6c:70:e0:4f:40:4d:98:c2:c5:94:b6:7b:
0e:89:e8:16:0b:0f:c7:82:68:ad:e4:d3:47:c5:c9:70:d9:28:
8a:f7:e1:39:e4:54:ea:6d:6a:0a:5d:4c:3f:ff:99:5d:8a:13:
09:11:e1:e3:1b:e4:44:e5:05:39:b3:50:4c:b7:8f:1f:07:b4:
19:ad:0c:08:ba:92:86:c5:2a:a7:b8:16:93:15:a1:74:3e:ce:
25:0d:b1:e6:4e:3a:ae:d8:4c:53:58:47:5c:c3:da:ad:ae:35:
f6:f9:32:d9:f2:08:1e:7d:3d:4a:b4:37:4d:38:c1:29:06:82:
a4:1b:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org