Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/WB2IdbVLNodyjqUAYSJmDZqvC68.roa
File: WB2IdbVLNodyjqUAYSJmDZqvC68.roa (raw, json)
Hash identifier: lvUsv/eaBqH8QHfQ0WJ1ft+WZJj5CjtFcmVIykmeQcw=
Subject key identifier: 58:1D:88:75:B5:4B:36:87:72:8E:A5:00:61:22:66:0D:9A:AF:0B:AF
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A9C4CC9
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/WB2IdbVLNodyjqUAYSJmDZqvC68.roa
Signing time: Thu 05 May 2022 07:41:29 +0000
ROA not before: Thu 05 May 2022 07:41:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178015433 (0xa9c4cc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 5 07:41:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=581d8875b54b3687728ea5006122660d9aaf0baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:e4:0b:7f:2f:04:33:5c:d0:74:aa:d1:4c:
f7:46:da:c7:09:f6:18:3c:78:05:34:a6:ae:cf:2f:
c8:98:47:47:ec:8d:0e:ff:8a:ca:1e:de:50:f1:7f:
61:ad:86:dd:bc:fe:c6:11:60:c7:bc:fd:4e:a6:d6:
48:b2:fe:92:56:c9:78:e8:40:7d:4c:03:63:31:ec:
ea:75:b9:e6:93:bd:5a:93:30:2f:5b:14:32:62:34:
26:73:03:63:f3:11:ac:5e:11:37:b1:94:1a:f7:8e:
5e:8d:ca:5a:61:3b:ee:fd:73:9c:26:8d:6c:60:46:
b7:a2:38:5d:12:2d:b2:b4:04:52:3e:e9:d4:b5:2e:
fd:95:e3:33:df:eb:9c:a8:38:12:94:82:f9:e3:fe:
38:3b:fc:63:ea:83:9f:96:1d:61:b9:85:c0:9b:5e:
c6:9c:a2:9c:72:f8:e4:0c:5f:b2:a1:47:48:6b:5d:
8b:4e:25:81:46:b5:de:c4:4e:36:75:fb:b4:1a:12:
9b:2c:d4:cc:3d:80:51:73:7e:6f:49:cb:e8:ab:11:
f8:b7:63:74:10:dc:69:60:56:2e:29:7a:9b:4e:5a:
37:5b:41:b1:5b:db:1a:58:d1:43:c3:b9:17:43:8f:
26:98:8d:99:06:9e:20:ef:02:bb:25:f3:02:7b:e1:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1D:88:75:B5:4B:36:87:72:8E:A5:00:61:22:66:0D:9A:AF:0B:AF
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/WB2IdbVLNodyjqUAYSJmDZqvC68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.210.0/23
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.32.0/23
89.117.36.0/23
89.117.64.0/22
89.117.70.0/23
89.117.94.0/23
89.117.102.0/23
89.117.116.0/23
89.117.139.0/24
89.117.158.0-89.117.163.255
89.117.188.0/24
89.117.190.0/24
89.117.218.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bf:57:77:7e:3f:a1:f5:18:27:cc:b4:34:9a:72:98:39:e0:
e6:36:50:34:1a:52:7b:eb:80:06:6e:d3:cc:2d:07:b5:19:e4:
0e:ad:0f:13:7d:a4:bb:10:23:1d:94:87:28:97:bb:b3:5c:a4:
6b:8b:66:3e:05:22:68:9e:00:41:05:86:7d:f9:dd:31:ff:dc:
64:d4:a0:7b:d7:3f:52:a5:9d:c1:2e:f8:b9:97:9d:5b:31:c3:
78:07:0a:c1:4e:2b:65:71:21:00:5e:a9:7f:60:e2:3d:0a:87:
38:39:d5:ca:8e:0a:86:4d:42:18:f4:50:95:e7:81:d9:8d:1b:
75:59:d8:1a:13:de:f0:8b:71:3e:98:b3:42:1b:61:be:2d:4e:
95:ce:38:a9:41:0b:92:c8:58:0a:1d:d9:c8:04:51:77:79:97:
43:b2:bd:e9:fd:f3:99:4f:01:c3:e2:c1:27:ca:1f:ec:ab:a9:
38:42:22:dc:23:cc:7c:24:e1:ce:9b:bf:1d:c7:b2:6e:35:25:
70:01:26:a5:be:22:b7:07:3c:a3:ab:f3:28:a5:7e:89:21:45:
70:96:7b:97:9d:4d:90:ed:31:bb:c9:63:31:f3:e5:c9:f7:45:
a8:1c:44:88:4c:a2:3b:65:a2:ee:48:8a:8e:97:e8:8c:b7:53:
27:ec:9d:7a
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIECpxMyTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDUw
NTA3NDEyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTgxZDg4NzViNTRi
MzY4NzcyOGVhNTAwNjEyMjY2MGQ5YWFmMGJhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8s5At/LwQzXNB0qtFM90baxwn2GDx4BTSmrs8vyJhHR+yN
Dv+Kyh7eUPF/Ya2G3bz+xhFgx7z9TqbWSLL+klbJeOhAfUwDYzHs6nW55pO9WpMw
L1sUMmI0JnMDY/MRrF4RN7GUGveOXo3KWmE77v1znCaNbGBGt6I4XRItsrQEUj7p
1LUu/ZXjM9/rnKg4EpSC+eP+ODv8Y+qDn5YdYbmFwJtexpyinHL45AxfsqFHSGtd
i04lgUa13sRONnX7tBoSmyzUzD2AUXN+b0nL6KsR+LdjdBDcaWBWLil6m05aN1tB
sVvbGljRQ8O5F0OPJpiNmQaeIO8CuyXzAnvh+ncCAwEAAaOCA3MwggNvMB0GA1Ud
DgQWBBRYHYh1tUs2h3KOpQBhImYNmq8LrzAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1dCMklkYlZMTm9keWpxVUFZU0ptRFpxdkM2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AYcGCCsGAQUFBwEHAQH/BIIBdjCCAXIwggFuBAIAATCCAWYDBAFWJrIwDAMEAVYm
tgMEAlYmuAMEAVYmygMEAVYm9gMEAVl0OgMEAVl0RAMEAFl0TAMEAVl0WDAMAwQA
WXRbAwQAWXRcMAwDBAFZdGoDBABZdGwwDAMEAFl0fQMEAFl0gDAMAwQBWXSCAwQA
WXSEAwQAWXSHAwQAWXSJAwQAWXSNMAwDBAJZdJQDBABZdJYwDAMEAFl0mQMEAFl0
mgMEAFl0oQMEAFl0owMEAFl0pgMEAFl0szAMAwQDWXS4AwQAWXS6MAwDBABZdL0D
BABZdL4DBAFZdNIDBAFZdPwDBABZdP8wDAMEAVl1BgMEAVl1CAMEAVl1DAMEAVl1
IAMEAVl1JAMEAll1QAMEAVl1RgMEAVl1XgMEAVl1ZgMEAVl1dAMEAFl1izAMAwQB
WXWeAwQCWXWgAwQAWXW8AwQAWXW+AwQAWXXaAwQAWXXeAwQBWXXkAwQAWXX1AwQA
WXX6AwQAWXX+MA0GCSqGSIb3DQEBCwUAA4IBAQBTv1d3fj+h9RgnzLQ0mnKYOeDm
NlA0GlJ764AGbtPMLQe1GeQOrQ8TfaS7ECMdlIcol7uzXKRri2Y+BSJongBBBYZ9
+d0x/9xk1KB71z9SpZ3BLvi5l51bMcN4BwrBTitlcSEAXql/YOI9Coc4OdXKjgqG
TUIY9FCV54HZjRt1WdgaE97wi3E+mLNCG2G+LU6VzjipQQuSyFgKHdnIBFF3eZdD
sr3p/fOZTwHD4sEnyh/sq6k4QiLcI8x8JOHOm78dx7JuNSVwASalviK3Bzyjq/Mo
pX6JIUVwlnuXnU2Q7TG7yWMx8+XJ90WoHESITKI7ZaLuSIqOl+iMt1Mn7J16
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org