Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/hmL1JsaVDMesfhW52ZCYKMkyeYA.roa
File: hmL1JsaVDMesfhW52ZCYKMkyeYA.roa (raw, json)
Hash identifier: UOFGY6+wp/lJGdTnagfFxgYN4USjx1S+OsaN4tJHrjc=
Subject key identifier: 86:62:F5:26:C6:95:0C:C7:AC:7E:15:B9:D9:90:98:28:C9:32:79:80
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A28C288
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/hmL1JsaVDMesfhW52ZCYKMkyeYA.roa
Signing time: Wed 06 Apr 2022 05:22:42 +0000
ROA not before: Wed 06 Apr 2022 05:22:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.216.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.117.168.0/23 maxlen: 24
89.117.167.0/24 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170443400 (0xa28c288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 6 05:22:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8662f526c6950cc7ac7e15b9d9909828c9327980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:8d:d8:44:67:33:72:09:95:e8:f1:c4:fc:
34:03:cd:78:b6:ec:47:32:da:fc:13:83:65:57:7f:
84:68:2d:b5:d6:00:8b:9a:bf:62:fd:5f:60:84:b8:
57:f8:8c:cc:a3:e4:f4:14:6b:8d:e8:9b:77:bc:cd:
a7:fb:3a:47:f0:73:5a:da:27:65:31:72:a0:d1:ae:
35:dc:1a:12:8f:48:d6:18:c7:89:9e:d0:14:4c:51:
a4:7b:11:dc:43:a0:8a:d2:8c:12:03:36:db:76:98:
5b:3d:c7:aa:8d:dd:39:6d:f2:00:c8:3e:4b:d1:ce:
88:f4:80:b3:d2:73:8c:64:c2:0a:aa:bf:57:ee:94:
88:af:98:8d:be:70:96:8b:3b:55:ae:54:9a:0e:39:
98:de:b4:72:4a:85:4c:bd:7d:29:00:5d:2c:f0:c9:
96:66:fc:35:13:81:f4:98:e6:ac:56:85:58:b1:f9:
ed:8d:89:d0:a3:e4:96:6f:c1:01:a9:19:9e:d3:6a:
95:f1:a7:24:10:3b:f3:a2:30:09:94:28:3b:80:5d:
3b:99:90:31:71:0e:ef:71:6f:34:09:68:45:d4:54:
bc:a3:d6:a3:88:61:20:d8:bf:5a:e3:98:f1:d7:85:
2d:5d:67:a2:bd:21:38:7a:14:b1:8b:7c:85:e8:66:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:62:F5:26:C6:95:0C:C7:AC:7E:15:B9:D9:90:98:28:C9:32:79:80
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/hmL1JsaVDMesfhW52ZCYKMkyeYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.76.0/24
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.202.0/24
89.116.210.0/23
89.116.218.0/24
89.116.239.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.167.0-89.117.169.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ce:ae:eb:f6:4f:76:d7:15:2b:c6:4e:a4:a0:fe:91:da:a3:
3f:b7:29:4f:1c:16:12:fb:2b:47:3b:30:67:14:1b:a0:8f:3a:
0f:9c:0a:3b:15:83:dd:af:7c:52:76:e6:55:23:4a:32:60:0a:
83:09:52:0d:07:f1:dd:19:31:08:a5:8a:c7:8f:06:85:05:5b:
91:ae:c9:81:f6:66:24:c0:6e:dd:ac:ca:3d:2a:cd:a6:38:5a:
c4:e2:8f:9e:4e:82:27:b4:89:b3:5e:b2:a5:21:c2:16:d8:5f:
9e:0e:c9:7a:15:82:b9:2c:2a:53:7e:fa:f5:35:11:a8:29:f1:
88:54:43:60:63:89:7d:61:1e:13:d5:1c:5a:45:e4:57:80:5f:
25:88:9a:95:f0:29:92:62:4b:77:45:ec:6e:57:f3:90:3c:7d:
78:be:c9:79:a8:69:7d:c9:05:9a:16:db:6f:04:3d:37:fa:ff:
bd:e4:4c:28:0f:8b:5a:8c:4d:1a:f4:b2:c4:fb:66:19:00:5e:
a7:f6:10:2e:48:cc:f6:ad:33:e6:dd:0e:69:d5:23:49:5b:85:
fc:e2:58:48:20:dd:3d:62:48:ff:7b:6d:47:a3:1a:66:3e:7a:
69:1e:b5:6b:b5:90:17:0d:6b:47:35:16:e2:dd:2d:22:c4:2b:
16:a5:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org