Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ZqSmnSRb_AJokX1Q2nd8tked8B4.roa
File: ZqSmnSRb_AJokX1Q2nd8tked8B4.roa (raw, json)
Hash identifier: Y0kq/nNJ3ycBuJJOFcRgxgwohkibJw8gYC/hAl+FzGU=
Subject key identifier: 66:A4:A6:9D:24:5B:FC:02:68:91:7D:50:DA:77:7C:B6:47:9D:F0:1E
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09D668ED
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ZqSmnSRb_AJokX1Q2nd8tked8B4.roa
Signing time: Sat 05 Mar 2022 10:53:46 +0000
ROA not before: Sat 05 Mar 2022 10:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.216.0/23 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
89.117.167.0/24 maxlen: 24
84.46.234.0/23 maxlen: 24
89.117.168.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
86.38.220.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.246.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165046509 (0x9d668ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Mar 5 10:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66a4a69d245bfc0268917d50da777cb6479df01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:82:40:41:91:b3:3f:5f:b4:fd:58:5e:10:
d0:0c:76:0b:b5:92:27:3d:ee:6e:d1:e8:00:eb:b7:
48:40:98:66:56:e4:ab:ea:59:20:cc:62:5a:1d:79:
fc:78:8d:cb:86:1f:df:45:2e:e9:78:bc:47:38:1a:
a0:72:cd:e8:1e:35:fb:ea:05:8c:30:5e:53:c8:c6:
19:47:d5:c4:95:d7:15:97:bc:3c:26:95:f7:ee:fc:
4c:0d:87:25:8c:4b:a2:f1:1d:02:a1:2b:b6:5a:4c:
c8:ab:51:7e:7e:b3:67:01:d5:08:47:06:e3:99:5d:
29:dc:06:4c:c3:77:35:fe:e6:4e:9a:ea:13:6c:1a:
af:ef:d7:16:44:a2:4d:b0:3f:1c:31:8d:f5:77:6e:
af:95:ce:89:c0:7d:cb:ac:12:28:73:0a:71:ce:a5:
62:bb:12:e4:96:0c:bd:0d:4f:c2:f1:ba:f6:ab:3a:
a4:72:0d:a8:5a:9a:15:14:5b:07:ad:dc:87:04:1f:
52:7c:be:c9:ef:70:34:ef:53:5f:86:ae:7d:81:9f:
99:e2:4f:c2:3e:58:00:3c:8f:0c:fb:e3:1b:94:3f:
9f:84:63:02:bf:40:c8:aa:c2:a8:b5:9d:00:6f:1c:
96:20:07:55:39:f7:32:c5:ef:50:c4:cc:f8:93:a8:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A4:A6:9D:24:5B:FC:02:68:91:7D:50:DA:77:7C:B6:47:9D:F0:1E
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ZqSmnSRb_AJokX1Q2nd8tked8B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.4.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.220.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.202.0/24
89.116.210.0/23
89.116.218.0/24
89.116.239.0/24
89.116.242.0/23
89.116.246.0/23
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.167.0-89.117.169.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
39:07:09:e1:c1:10:15:c4:49:da:38:3a:92:40:87:b0:b7:01:
4d:0d:25:39:54:a2:69:ac:c4:6f:f5:61:65:1d:c6:2b:2f:04:
15:89:19:fc:a8:ae:77:90:db:22:82:72:73:23:0b:87:fb:d8:
97:94:1f:20:30:43:4e:69:05:24:99:0d:3f:05:6c:ed:18:52:
ba:61:70:c8:05:aa:d8:ed:e4:ee:c8:87:2e:34:e2:a6:e7:ff:
b2:a3:17:53:2d:c6:be:6b:77:b9:ee:d2:77:71:4d:76:f3:2c:
12:e4:cc:fa:20:4c:54:68:24:06:70:ab:50:fe:64:b4:51:a6:
6a:2f:47:69:62:3c:66:a4:10:dc:09:37:59:3e:d5:93:ea:98:
69:b2:8a:32:37:f1:ba:c7:cb:4a:53:75:4c:2a:37:4f:d4:b6:
2d:61:65:f5:71:00:fd:c9:5c:e4:a6:f8:3a:85:ed:f8:08:a7:
e4:74:11:6b:71:ee:74:ab:e4:83:3a:91:19:28:da:4b:3c:a9:
f6:4f:de:12:c5:d0:26:74:a1:33:04:38:2a:d6:9e:17:b6:e0:
f8:a4:6c:9e:ac:2b:d0:65:f6:7f:c2:82:e1:ab:30:cc:e4:dd:
65:7b:fd:a1:c2:56:fe:e8:13:03:42:bd:de:91:1d:73:b4:af:
c5:9a:16:bf
-----BEGIN CERTIFICATE-----
MIIHJzCCBg+gAwIBAgIECdZo7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDMw
NTEwNTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjZhNGE2OWQyNDVi
ZmMwMjY4OTE3ZDUwZGE3NzdjYjY0NzlkZjAxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI94gkBBkbM/X7T9WF4Q0Ax2C7WSJz3ubtHoAOu3SECYZlbk
q+pZIMxiWh15/HiNy4Yf30Uu6Xi8RzgaoHLN6B41++oFjDBeU8jGGUfVxJXXFZe8
PCaV9+78TA2HJYxLovEdAqErtlpMyKtRfn6zZwHVCEcG45ldKdwGTMN3Nf7mTprq
E2war+/XFkSiTbA/HDGN9Xdur5XOicB9y6wSKHMKcc6lYrsS5JYMvQ1PwvG69qs6
pHINqFqaFRRbB63chwQfUny+ye9wNO9TX4aufYGfmeJPwj5YADyPDPvjG5Q/n4Rj
Ar9AyKrCqLWdAG8cliAHVTn3MsXvUMTM+JOo2gkCAwEAAaOCBEEwggQ9MB0GA1Ud
DgQWBBRmpKadJFv8AmiRfVDad3y2R53wHjAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1pxU21uU1JiX0FKb2tYMVEybmQ4dGtlZDhCNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AlUGCCsGAQUFBwEHAQH/BIICRDCCAkAwggI8BAIAATCCAjQDBAFULuoDBAFWJgQD
BAFWJrIwDAMEAVYmtgMEAlYmuAMEAVYmygMEAVYm3AMEAVYm9gMEAVl0NAMEAVl0
OjAMAwQCWXREAwQAWXRGAwQAWXRMAwQBWXRYMAwDBABZdFsDBABZdFwwDAMEAVl0
agMEAFl0bDAMAwQAWXR9AwQAWXSAMAwDBAFZdIIDBABZdIQDBABZdIcDBABZdIkD
BABZdI0wDAMEAVl0kgMEAFl0ljAMAwQAWXSZAwQAWXSaAwQAWXSeAwQAWXShMAwD
BABZdKMDBABZdKYDBAFZdKwDBABZdK8DBABZdLEDBABZdLMwDAMEA1l0uAMEAFl0
ujAMAwQAWXS9AwQAWXS+AwQAWXTBAwQAWXTKAwQBWXTSAwQAWXTaAwQAWXTvAwQB
WXTyAwQBWXT2AwQAWXT6AwQBWXT8AwQAWXT/MAwDBAFZdQYDBAFZdQgDBAFZdQwD
BAFZdRgwDAMEAll1HAMEAVl1IAMEAVl1JDAMAwQGWXVAAwQAWXVEMAwDBAFZdUYD
BAFZdVQDBAJZdVgwDAMEAVl1XgMEAll1YAMEAVl1ZgMEAFl1bTAMAwQEWXVwAwQB
WXV0AwQAWXWBAwQCWXWEAwQAWXWLAwQBWXWOMAwDBAFZdZ4DBAJZdaAwDAMEAFl1
pwMEAVl1qAMEAFl1vAMEAFl1vjAMAwQAWXXXAwQAWXXaAwQAWXXeMAwDBAFZdeID
BAFZdeQDBABZdfUDBABZdfoDBABZdf4wDQYJKoZIhvcNAQELBQADggEBADkHCeHB
EBXESdo4OpJAh7C3AU0NJTlUommsxG/1YWUdxisvBBWJGfyorneQ2yKCcnMjC4f7
2JeUHyAwQ05pBSSZDT8FbO0YUrphcMgFqtjt5O7Ihy404qbn/7KjF1Mtxr5rd7nu
0ndxTXbzLBLkzPogTFRoJAZwq1D+ZLRRpmovR2liPGakENwJN1k+1ZPqmGmyijI3
8brHy0pTdUwqN0/Uti1hZfVxAP3JXOSm+DqF7fgIp+R0EWtx7nSr5IM6kRko2ks8
qfZP3hLF0CZ0oTMEOCrWnhe24PikbJ6sK9Bl9n/CguGrMMzk3WV7/aHCVv7oEwNC
vd6RHXO0r8WaFr8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org