Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/h49k52dftEdYcs2FlxUNXYPVACY.roa
File: h49k52dftEdYcs2FlxUNXYPVACY.roa (raw, json)
Hash identifier: Ar1FzO17B+jgDSmEmyKitdMwKQ5HWB/z34vscFxNZAM=
Subject key identifier: 87:8F:64:E7:67:5F:B4:47:58:72:CD:85:97:15:0D:5D:83:D5:00:26
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D8FEC2C2CA4838030E4163C6A3DD858B
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/h49k52dftEdYcs2FlxUNXYPVACY.roa
Signing time: Fri 26 Aug 2022 07:12:30 +0000
ROA not before: Fri 26 Aug 2022 07:12:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:fe:c2:c2:ca:48:38:03:0e:41:63:c6:a3:dd:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 26 07:12:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=878f64e7675fb4475872cd8597150d5d83d50026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:db:5a:80:a1:b0:fe:38:ec:a7:f3:a2:00:
d9:cb:7c:ba:90:11:55:ad:52:56:01:cb:51:ab:33:
3b:43:e6:1a:96:4a:2b:70:09:c7:c5:25:d7:c0:3d:
27:1a:86:79:fc:fa:1e:9c:2e:7c:e2:49:1a:a8:0e:
9d:04:10:0e:5b:45:16:5a:f0:35:f8:37:56:2c:29:
8c:e4:bb:0c:cd:a7:2c:55:2d:30:5f:b8:f9:bf:6a:
95:8f:cc:8e:30:ef:fe:aa:f9:6a:01:59:b9:c8:27:
64:11:a8:bb:d7:6f:9e:ad:c0:7f:fa:21:1c:32:34:
ef:fd:cb:8f:74:32:e4:c7:92:56:a4:d8:84:e1:27:
f1:7f:04:5e:b2:5a:0e:06:e2:df:37:db:b5:ba:05:
94:a7:c4:22:00:57:c6:36:77:8f:50:3f:3a:61:8e:
28:f4:0d:11:57:53:23:ba:bf:3c:ff:64:b0:c2:d1:
c1:e6:9e:09:ce:19:3f:63:7a:af:f1:f5:14:d5:79:
53:8b:48:82:01:b0:c1:95:3c:12:d7:a5:d6:0f:0b:
78:79:ef:df:6c:0b:1e:75:27:b3:8c:f9:04:d7:9e:
d2:a8:b8:f4:b1:7f:6d:2d:35:62:10:71:d7:37:2a:
1b:0e:ce:67:d0:a8:54:bb:ad:98:66:56:ca:bc:af:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:64:E7:67:5F:B4:47:58:72:CD:85:97:15:0D:5D:83:D5:00:26
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/h49k52dftEdYcs2FlxUNXYPVACY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/24
89.117.8.0/23
89.117.28.0-89.117.33.255
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.190.0/24
89.117.215.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c7:f4:be:3d:57:f2:ef:b0:49:4b:7f:6b:c6:ac:62:bc:cb:
c8:06:e3:57:48:64:00:da:ee:a4:d7:c4:a0:7d:42:d3:c3:10:
a5:30:c0:0f:6f:f8:9d:1d:da:a5:3a:16:12:d1:64:01:45:fd:
0d:26:e9:65:f5:ad:b1:f4:bf:5a:ce:3f:82:4a:b8:4a:fa:80:
23:94:91:f8:9a:99:62:97:8d:17:66:d3:31:e7:78:22:0e:07:
b4:ee:69:03:32:5a:5c:0e:5a:99:82:4d:c4:5a:e5:bb:a5:29:
32:ce:f8:fd:1b:e4:ad:0b:75:d2:5b:69:81:cd:67:d7:8c:56:
d4:2b:cc:c2:62:70:eb:30:4f:4b:db:b0:1c:9a:90:95:8e:07:
3a:54:63:83:40:e5:6c:19:bb:de:46:87:fd:61:70:2e:f7:f7:
6a:eb:f6:dd:99:49:20:50:d7:30:ca:b7:7a:d0:64:4f:8a:b8:
4a:53:6f:f0:03:48:05:9c:06:85:34:45:77:76:39:69:e5:d6:
ed:00:22:7b:e9:e7:ca:62:79:d1:ed:df:75:07:a7:09:a5:2b:
40:6f:e8:de:5a:7d:45:99:93:b3:ca:12:1b:9e:2c:05:81:e7:
93:1d:29:44:70:1a:09:3a:13:69:44:01:58:12:81:61:9c:65:
a6:ad:3d:a8
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgISAYLY/sLCykg4Aw5BY8aj3YWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODI2MDcxMjMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzhmNjRlNzY3NWZiNDQ3NTg3MmNkODU5NzE1MGQ1ZDgzZDUwMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK/bWoChsP447KfzogDZy3y6kBFV
rVJWActRqzM7Q+YalkorcAnHxSXXwD0nGoZ5/PoenC584kkaqA6dBBAOW0UWWvA1
+DdWLCmM5LsMzacsVS0wX7j5v2qVj8yOMO/+qvlqAVm5yCdkEai712+ercB/+iEc
MjTv/cuPdDLkx5JWpNiE4SfxfwResloOBuLfN9u1ugWUp8QiAFfGNnePUD86YY4o
9A0RV1Mjur88/2SwwtHB5p4Jzhk/Y3qv8fUU1XlTi0iCAbDBlTwS16XWDwt4ee/f
bAsedSezjPkE157SqLj0sX9tLTViEHHXNyobDs5n0KhUu62YZlbKvK8UYQIDAQAB
o4IDHTCCAxkwHQYDVR0OBBYEFIePZOdnX7RHWHLNhZcVDV2D1QAmMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvaDQ5azUyZGZ0RWRZY3MyRmx4VU5YWVBWQUNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMQYIKwYBBQUHAQcBAf8EggEgMIIBHDCCARgEAgABMIIB
EAMEAVQu6gMEAVYmsgMEAlYmuAMEAVYmygMEAVYm9gMEAVl0OgMEAVl0WAMEAFl0
XDAMAwQBWXRqAwQAWXRsMAwDBABZdH0DBAdZdAADBABZdIQDBABZdIcDBABZdJYD
BABZdKEDBABZdKMDBABZdKYDBAFZdKwDBABZdK8DBABZdLEwDAMEA1l0uAMEAFl0
ugMEAVl00gMEAFl02gMEAFl0/AMEAVl1CDAMAwQCWXUcAwQBWXUgAwQDWXVIAwQB
WXVUAwQCWXVYAwQBWXVeAwQBWXVmAwQAWXVtAwQBWXV0AwQAWXWBAwQCWXWEAwQB
WXWOAwQAWXW+AwQAWXXXAwQBWXXkAwQAWXX1AwQAWXX6MA0GCSqGSIb3DQEBCwUA
A4IBAQCvx/S+PVfy77BJS39rxqxivMvIBuNXSGQA2u6k18SgfULTwxClMMAPb/id
HdqlOhYS0WQBRf0NJull9a2x9L9azj+CSrhK+oAjlJH4mplil40XZtMx53giDge0
7mkDMlpcDlqZgk3EWuW7pSkyzvj9G+StC3XSW2mBzWfXjFbUK8zCYnDrME9L27Ac
mpCVjgc6VGODQOVsGbveRof9YXAu9/dq6/bdmUkgUNcwyrd60GRPirhKU2/wA0gF
nAaFNEV3djlp5dbtACJ76efKYnnR7d91B6cJpStAb+jeWn1FmZOzyhIbniwFgeeT
HSlEcBoJOhNpRAFYEoFhnGWmrT2o
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org