Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Ytr4JBHXuXUmcrjpYul5Npur5T8.roa
File: Ytr4JBHXuXUmcrjpYul5Npur5T8.roa (raw, json)
Hash identifier: UtaZ7YgGl+pCcm4SKdLC5FDJGRQNDXzPjbSu8Skqky8=
Subject key identifier: 62:DA:F8:24:11:D7:B9:75:26:72:B8:E9:62:E9:79:36:9B:AB:E5:3F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B9372E5
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Ytr4JBHXuXUmcrjpYul5Npur5T8.roa
Signing time: Sun 26 Jun 2022 12:34:22 +0000
ROA not before: Sun 26 Jun 2022 12:34:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194212581 (0xb9372e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 26 12:34:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62daf82411d7b9752672b8e962e979369babe53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:de:fc:d6:82:45:59:b6:2f:66:c8:e5:2c:
78:d4:4a:64:51:25:81:72:16:42:32:35:33:c6:55:
65:f1:78:8f:ca:77:a7:4a:35:14:88:82:39:0c:e4:
be:21:9c:a8:68:c0:bc:7e:7f:2a:a6:36:7e:35:1f:
66:6c:7d:f4:31:84:a9:d3:9c:3c:52:0a:3a:73:28:
a8:c3:48:7b:19:e0:01:b8:b5:3e:62:15:cc:98:57:
fd:c2:f6:d8:d8:14:78:1a:ce:8a:72:80:a2:cd:97:
1a:6a:a9:49:38:7a:72:b1:42:f0:44:45:a3:fe:dd:
03:46:0e:96:22:f1:9b:3b:2f:08:35:6b:e3:19:2e:
f9:1d:f7:bf:06:5c:36:7e:43:ec:3c:73:91:1a:6e:
3d:08:ed:10:1d:7d:d1:5d:f0:e6:3c:dc:e6:86:51:
d8:e4:21:39:d8:59:47:d3:e2:3a:23:39:16:98:af:
de:10:ff:58:c1:c9:50:97:b8:41:e1:07:3a:f4:97:
e9:f2:e4:9f:32:49:90:2d:42:6f:b0:0b:5a:5f:72:
3c:09:11:16:47:c1:08:ce:8e:69:73:6d:8d:aa:ba:
49:e3:5b:df:39:2c:03:81:ae:9b:cd:87:4f:d9:ca:
36:45:3c:29:7d:e4:b6:e3:fe:2d:f0:a5:8e:f2:9c:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DA:F8:24:11:D7:B9:75:26:72:B8:E9:62:E9:79:36:9B:AB:E5:3F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Ytr4JBHXuXUmcrjpYul5Npur5T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.202.0/23
89.116.54.0/24
89.116.70.0/24
89.116.88.0/23
89.116.99.0/24
89.116.103.0/24
89.116.106.0/23
89.116.112.0/23
89.116.115.0/24
89.116.126.0/23
89.116.130.0/23
89.116.135.0/24
89.116.141.0/24
89.116.148.0/23
89.116.156.0/24
89.116.161.0/24
89.116.171.0/24
89.116.175.0/24
89.116.177.0/24
89.116.193.0/24
89.116.203.0/24
89.116.208.0/22
89.116.218.0/24
89.116.220.0/23
89.116.223.0/24
89.116.233.0/24
89.116.252.0/23
89.116.255.0/24
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.68.0/24
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.96.0/22
89.117.102.0/23
89.117.109.0/24
89.117.112.0/22
89.117.129.0-89.117.130.255
89.117.132.0/22
89.117.142.0/23
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f3:d5:09:40:fc:f1:49:09:9f:8c:18:00:cd:46:7e:04:7f:
8e:ea:48:7b:5e:4b:7d:ea:ea:e0:7a:3f:39:4a:e6:05:11:3d:
c2:cc:ab:bc:7f:bd:0e:91:bd:68:a4:f8:40:d7:08:50:36:71:
be:47:db:0f:d5:f4:52:56:9e:ab:bd:c3:86:32:2d:d2:3c:18:
c0:6c:1a:c2:0c:4c:47:bf:98:29:bf:41:e9:91:76:e5:a1:0a:
a9:64:c1:e6:7d:91:40:27:1a:76:d6:f9:48:a9:03:cd:b5:2d:
8e:48:71:0e:2a:08:57:c9:a1:67:59:81:f6:bb:e2:52:80:14:
62:d3:0b:c9:b2:29:1a:59:15:87:f4:7c:ea:05:90:8d:b8:c3:
bb:8d:5a:c1:bf:79:bc:f7:6c:eb:1b:a4:26:19:1b:28:4c:f1:
f5:0f:d2:10:dd:ac:9d:7b:44:ea:9d:dc:03:33:c1:0f:c7:34:
9e:09:b4:dc:b8:fd:c5:a0:44:e8:a1:b7:4d:f5:8b:31:15:d9:
00:ca:ac:24:00:27:b1:f2:aa:3d:41:16:8a:3c:ac:c4:c5:f0:
64:6a:c5:e9:36:7f:69:f7:a1:b1:d6:1f:fd:a2:5b:3e:86:26:
e9:93:d8:67:67:1c:97:97:92:0e:78:e9:bd:2f:07:81:9b:52:
9c:d6:2d:20
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgIEC5Ny5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDYy
NjEyMzQyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjJkYWY4MjQxMWQ3
Yjk3NTI2NzJiOGU5NjJlOTc5MzY5YmFiZTUzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIp+3vzWgkVZti9myOUseNRKZFElgXIWQjI1M8ZVZfF4j8p3
p0o1FIiCOQzkviGcqGjAvH5/KqY2fjUfZmx99DGEqdOcPFIKOnMoqMNIexngAbi1
PmIVzJhX/cL22NgUeBrOinKAos2XGmqpSTh6crFC8ERFo/7dA0YOliLxmzsvCDVr
4xku+R33vwZcNn5D7DxzkRpuPQjtEB190V3w5jzc5oZR2OQhOdhZR9PiOiM5Fpiv
3hD/WMHJUJe4QeEHOvSX6fLknzJJkC1Cb7ALWl9yPAkRFkfBCM6OaXNtjaq6SeNb
3zksA4Gum82HT9nKNkU8KX3ktuP+LfCljvKcFGkCAwEAAaOCAyUwggMhMB0GA1Ud
DgQWBBRi2vgkEde5dSZyuOli6Xk2m6vlPzAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1l0cjRKQkhYdVhVbWNyanBZdWw1TnB1cjVUOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ATkGCCsGAQUFBwEHAQH/BIIBKDCCASQwggEgBAIAATCCARgDBAFULuoDBAFWJsoD
BABZdDYDBABZdEYDBAFZdFgDBABZdGMDBABZdGcDBAFZdGoDBAFZdHADBABZdHMD
BAFZdH4DBAFZdIIDBABZdIcDBABZdI0DBAFZdJQDBABZdJwDBABZdKEDBABZdKsD
BABZdK8DBABZdLEDBABZdMEDBABZdMsDBAJZdNADBABZdNoDBAFZdNwDBABZdN8D
BABZdOkDBAFZdPwDBABZdP8DBAFZdQwDBAFZdRgwDAMEAll1HAMEAVl1IAMEAFl1
RAMEA1l1SAMEAVl1VAMEAll1WAMEAll1YAMEAVl1ZgMEAFl1bQMEAll1cDAMAwQA
WXWBAwQAWXWCAwQCWXWEAwQBWXWOAwQAWXXXMA0GCSqGSIb3DQEBCwUAA4IBAQAz
89UJQPzxSQmfjBgAzUZ+BH+O6kh7Xkt96urgej85SuYFET3CzKu8f70Okb1opPhA
1whQNnG+R9sP1fRSVp6rvcOGMi3SPBjAbBrCDExHv5gpv0HpkXbloQqpZMHmfZFA
Jxp21vlIqQPNtS2OSHEOKghXyaFnWYH2u+JSgBRi0wvJsikaWRWH9HzqBZCNuMO7
jVrBv3m892zrG6QmGRsoTPH1D9IQ3ayde0TqndwDM8EPxzSeCbTcuP3FoEToobdN
9YsxFdkAyqwkACex8qo9QRaKPKzExfBkasXpNn9p96Gx1h/9ols+hibpk9hnZxyX
l5IOeOm9LweBm1Kc1i0g
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org