Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/gNPaXwSTRI_CS-_iqQizw2IrAQA.roa
File: gNPaXwSTRI_CS-_iqQizw2IrAQA.roa (raw, json)
Hash identifier: 0HleRpzdq5Su9eOgIU6VWkTGbAUVoz0GPyL/3KLjnFQ=
Subject key identifier: 80:D3:DA:5F:04:93:44:8F:C2:4B:EF:E2:A9:08:B3:C3:62:2B:01:00
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182A668B347308BFD28C99AE46BCB591293
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/gNPaXwSTRI_CS-_iqQizw2IrAQA.roa
Signing time: Tue 16 Aug 2022 11:27:35 +0000
ROA not before: Tue 16 Aug 2022 11:27:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:68:b3:47:30:8b:fd:28:c9:9a:e4:6b:cb:59:12:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 16 11:27:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80d3da5f0493448fc24befe2a908b3c3622b0100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:71:cd:c7:ce:08:dd:a4:ac:61:84:d3:3e:
5b:1d:96:bc:7f:dd:02:8f:69:1e:31:3a:ae:28:71:
48:63:3a:e4:c1:44:1c:c7:ed:93:fd:eb:59:f9:a2:
77:90:42:73:18:e0:4b:82:b0:12:67:74:7b:d5:02:
b8:30:d9:77:25:e5:cc:f8:b4:42:84:85:c0:9a:2a:
a5:82:e8:21:ac:6d:9b:8b:06:81:d8:76:68:e8:35:
1c:e1:16:a8:ef:22:43:f8:fa:fd:39:27:1d:0a:3b:
63:c7:f1:1c:16:fb:4b:96:69:d0:29:98:4f:1b:ab:
1b:34:65:d2:02:f4:33:23:a6:90:8c:1f:d0:86:8a:
9a:b8:16:50:b4:c6:b6:a9:61:b0:0f:2d:a8:26:2d:
40:4d:33:11:a8:0a:45:07:1b:bc:64:df:ee:be:1f:
4a:d6:d1:13:10:71:9b:25:9b:c9:95:9c:fc:e9:3d:
37:41:99:4f:f1:6f:ad:35:89:42:77:f9:f8:65:7f:
3e:61:01:ff:20:d6:b4:61:e2:a2:02:8f:ed:01:d4:
dd:12:26:ac:6c:01:51:cf:4c:8d:c1:28:47:ab:4d:
ef:59:89:3e:1c:b8:c1:8f:08:80:67:ed:22:c5:81:
c2:4c:6b:58:9c:19:3a:f8:75:2f:e1:e3:7d:ea:7c:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:DA:5F:04:93:44:8F:C2:4B:EF:E2:A9:08:B3:C3:62:2B:01:00
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/gNPaXwSTRI_CS-_iqQizw2IrAQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0-89.116.186.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:88:7e:27:a8:98:c9:e1:25:64:60:8c:ac:86:02:d9:72:25:
7d:b7:38:64:c9:4f:2e:2e:30:47:72:87:5c:49:81:60:8f:e8:
bc:15:63:25:5e:79:c3:72:dd:43:7b:33:8e:b3:39:af:21:0c:
67:7e:3e:33:c3:5b:67:8f:ad:64:1a:dc:3c:68:a7:6f:b7:29:
49:95:3b:6e:c1:90:39:b4:00:47:05:af:09:de:ca:c7:f9:6a:
a4:9e:49:f5:41:ab:d3:21:45:6f:0e:01:f6:c3:e5:cb:32:bb:
b7:fe:66:5a:d8:aa:4a:7f:66:c1:12:57:1b:fe:96:d8:01:63:
5c:cb:49:57:88:54:f5:c2:ea:44:f7:39:0c:ac:40:0d:a5:45:
18:89:d8:7a:2f:5e:a6:4f:42:e4:63:39:c4:23:9c:b7:6b:97:
db:cb:13:cc:1a:40:07:cc:6a:2c:e1:ac:fb:22:3a:00:8e:a3:
84:ac:5b:93:6b:4f:a7:9c:6e:7b:2b:d8:05:18:5e:96:33:b0:
08:ab:3b:72:80:c0:b0:35:a8:7b:53:0e:4f:cb:20:66:76:d8:
b8:ec:f9:fe:85:03:e9:7e:00:14:0c:3e:ef:2f:57:a0:13:f5:
18:16:51:32:0e:cc:d8:e9:b4:67:8f:2d:1d:46:0e:04:37:46:
22:1e:d2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org