Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bEbAvEuEOP3uH3gNs9a7HCXmKeA.roa
File: bEbAvEuEOP3uH3gNs9a7HCXmKeA.roa (raw, json)
Hash identifier: kcbGolOEJMwjwapXU7DWCoiYuaBFsTK2hbl24r5VbI0=
Subject key identifier: 6C:46:C0:BC:4B:84:38:FD:EE:1F:78:0D:B3:D6:BB:1C:25:E6:29:E0
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018287B77396BEE5946ADDEFC96B3BB7FB31
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bEbAvEuEOP3uH3gNs9a7HCXmKeA.roa
Signing time: Wed 10 Aug 2022 12:25:22 +0000
ROA not before: Wed 10 Aug 2022 12:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:b7:73:96:be:e5:94:6a:dd:ef:c9:6b:3b:b7:fb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 10 12:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c46c0bc4b8438fdee1f780db3d6bb1c25e629e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:6c:00:80:de:83:47:c2:d9:68:70:da:44:
d3:81:6f:fd:6d:e8:7e:17:94:da:ba:e3:12:a8:a7:
56:e6:ff:06:42:bb:e5:1f:cd:df:db:bf:59:2b:fe:
9b:36:33:8a:2e:6c:73:72:fe:2f:d8:04:f8:78:bf:
f0:1e:85:9a:26:88:c4:d9:07:b9:ca:0f:4f:82:1f:
a7:fd:d6:5a:38:4b:e7:1a:92:6b:f1:6c:98:b3:b3:
ec:89:c0:a6:59:1a:3a:01:f2:ba:13:38:94:11:ff:
12:9f:56:f3:ae:c0:6d:5d:5f:0b:67:0a:00:66:23:
e2:4f:00:36:45:89:1f:7b:b7:d6:ff:46:8d:17:4d:
6c:52:5d:88:97:75:ff:e2:fc:b3:65:d1:1d:9a:7f:
80:c4:94:93:ec:f3:8d:80:a1:00:4e:21:29:1d:c4:
82:53:44:e8:99:a2:17:5d:2d:61:bb:40:3e:f2:ad:
e0:b7:cf:88:e6:47:c2:3b:2e:42:3e:19:5b:73:e3:
31:f5:f9:0b:be:91:1d:08:c0:30:a2:3d:af:32:5f:
56:d8:bf:07:75:08:1b:ab:c1:4d:c6:4e:98:53:62:
b0:4e:5d:c0:96:68:a2:99:3b:a4:64:8f:61:c6:53:
db:83:2c:87:3d:92:cc:9d:28:c1:ad:a5:24:bd:1f:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:46:C0:BC:4B:84:38:FD:EE:1F:78:0D:B3:D6:BB:1C:25:E6:29:E0
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bEbAvEuEOP3uH3gNs9a7HCXmKeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.32.0/23
89.117.36.0/23
89.117.70.0/23
89.117.94.0/23
89.117.102.0/23
89.117.116.0/23
89.117.158.0/23
89.117.190.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:21:49:7a:09:4d:f5:20:ee:4d:43:87:9b:1f:8b:1d:13:f9:
e0:f9:aa:05:2b:27:9c:c5:c2:ca:2d:65:ed:37:e2:5f:22:3b:
db:5b:a7:ee:4f:f5:5c:09:96:6c:80:0a:e0:b6:4b:50:30:47:
4d:83:41:b4:82:bf:0a:1b:3c:b7:af:4f:55:d5:ff:b1:8f:86:
6d:83:e7:45:c8:75:e6:24:37:e4:9b:54:fd:50:fc:c5:b2:27:
ba:cb:50:37:54:bb:28:ff:8a:c0:0f:41:3a:32:90:1b:28:85:
80:7d:64:af:9f:0e:90:97:54:d4:7e:46:95:45:9d:52:d6:72:
2a:bf:4e:d9:88:c1:de:36:33:27:30:6a:29:d0:9a:28:dd:ab:
5c:14:47:04:73:b3:4a:a9:b9:b9:4d:69:4d:08:7e:44:c0:e1:
ab:7d:f2:7f:fa:78:f2:ac:5f:58:f3:df:77:60:71:68:1d:e9:
8c:42:56:88:60:37:47:6c:ca:dd:11:a1:e5:1d:63:39:ca:7d:
8f:a4:3d:93:8f:5c:07:7d:28:94:6f:5c:a8:f8:16:34:bf:86:
73:f0:36:f4:cb:ac:e4:b3:47:cc:0b:18:04:fb:91:5e:3b:c2:
27:72:9c:4c:15:4a:53:4a:96:27:45:1e:8b:01:0b:63:e9:22:
73:9c:53:de
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAYKHt3OWvuWUat3vyWs7t/sxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODEwMTIyNTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzQ2YzBiYzRiODQzOGZkZWUxZjc4MGRiM2Q2YmIxYzI1ZTYyOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYlsAIDeg0fC2Whw2kTTgW/9beh+
F5TauuMSqKdW5v8GQrvlH83f279ZK/6bNjOKLmxzcv4v2AT4eL/wHoWaJojE2Qe5
yg9Pgh+n/dZaOEvnGpJr8WyYs7PsicCmWRo6AfK6EziUEf8Sn1bzrsBtXV8LZwoA
ZiPiTwA2RYkfe7fW/0aNF01sUl2Il3X/4vyzZdEdmn+AxJST7PONgKEATiEpHcSC
U0TomaIXXS1hu0A+8q3gt8+I5kfCOy5CPhlbc+Mx9fkLvpEdCMAwoj2vMl9W2L8H
dQgbq8FNxk6YU2KwTl3AlmiimTukZI9hxlPbgyyHPZLMnSjBraUkvR9rEwIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFGxGwLxLhDj97h94DbPWuxwl5ingMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvYkViQXZFdUVPUDN1SDNnTnM5YTdIQ1htS2VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAATCB9AME
AVYmsgMEAlYmuAMEAVYmygMEAVYm9gMEAVl0OgMEAVl0WAMEAFl0XDAMAwQBWXRq
AwQAWXRsMAwDBABZdH0DBAdZdAAwDAMEAVl0ggMEAFl0hAMEAFl0hzAMAwQCWXSU
AwQAWXSWAwQAWXShAwQAWXSjAwQAWXSmAwQAWXSzMAwDBANZdLgDBABZdLoDBAFZ
dNIDBAFZdPwDBABZdP8DBAFZdQgDBAFZdQwDBAFZdSADBAFZdSQDBAFZdUYDBAFZ
dV4DBAFZdWYDBAFZdXQDBAFZdZ4DBABZdb4DBABZdd4DBAFZdeQDBABZdfUDBABZ
dfowDQYJKoZIhvcNAQELBQADggEBAIshSXoJTfUg7k1Dh5sfix0T+eD5qgUrJ5zF
wsotZe034l8iO9tbp+5P9VwJlmyACuC2S1AwR02DQbSCvwobPLevT1XV/7GPhm2D
50XIdeYkN+SbVP1Q/MWyJ7rLUDdUuyj/isAPQToykBsohYB9ZK+fDpCXVNR+RpVF
nVLWciq/TtmIwd42MycwainQmijdq1wURwRzs0qpublNaU0IfkTA4at98n/6ePKs
X1jz33dgcWgd6YxCVohgN0dsyt0RoeUdYznKfY+kPZOPXAd9KJRvXKj4FjS/hnPw
NvTLrOSzR8wLGAT7kV47widynEwVSlNKlidFHosBC2PpInOcU94=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org