Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mQzVIBULrvgcCol6PUTpM36lJKg.roa
File: mQzVIBULrvgcCol6PUTpM36lJKg.roa (raw, json)
Hash identifier: RwIhrAHFDA5NJUCSt/TK0+Tj/bv1KOrZp4GBtIvhrak=
Subject key identifier: 99:0C:D5:20:15:0B:AE:F8:1C:0A:89:7A:3D:44:E9:33:7E:A5:24:A8
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09759718
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mQzVIBULrvgcCol6PUTpM36lJKg.roa
Signing time: Thu 10 Feb 2022 07:06:37 +0000
ROA not before: Thu 10 Feb 2022 07:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.216.0/23 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.139.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.117.168.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.72.0/22 maxlen: 24
89.116.88.0/23 maxlen: 24
86.38.220.0/23 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.246.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.250.0/24 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.212.0/22 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158701336 (0x9759718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 10 07:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=990cd520150baef81c0a897a3d44e9337ea524a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:f8:dc:1c:75:7e:09:8d:92:fd:5c:9f:9e:
c7:a5:41:aa:15:35:87:cf:bb:1d:03:14:bb:c3:98:
28:35:c2:26:e4:2b:74:69:d7:e5:59:1f:3c:f7:14:
0b:81:cf:f1:96:f8:c3:fd:8a:a6:31:e9:81:73:7d:
36:d8:01:d7:e8:11:4a:e0:96:26:0c:ca:da:4f:2b:
9a:e9:d1:f7:af:b9:3f:97:5a:20:15:c2:ff:61:ca:
bd:95:85:7f:d6:0f:19:cc:f5:ae:e4:5e:c2:43:60:
15:75:37:40:d4:30:fd:11:68:c7:b8:60:f7:f7:ad:
a2:a1:ce:ad:db:9c:6f:b3:5c:88:69:60:2d:cd:97:
0a:8b:0a:ad:9d:15:1a:b2:ee:a0:fe:7f:fd:01:1d:
f0:e9:ad:ef:13:74:02:c2:40:dc:de:82:5c:f4:0a:
56:b3:70:05:37:0a:49:eb:d1:43:7d:72:26:d6:48:
3c:3d:68:ce:60:50:02:f2:db:a0:75:b0:bd:08:e8:
0c:6d:ee:c9:69:41:b9:d6:ca:70:cd:06:21:a7:a0:
f4:93:72:47:50:00:63:66:33:06:d9:88:80:a9:b3:
58:14:77:9f:0a:e8:ef:f8:b2:bf:14:6b:e4:6c:2e:
8b:92:90:11:ee:08:30:8a:5c:87:58:f3:8f:1f:78:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:D5:20:15:0B:AE:F8:1C:0A:89:7A:3D:44:E9:33:7E:A5:24:A8
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mQzVIBULrvgcCol6PUTpM36lJKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.4.0/23
86.38.178.0/23
86.38.182.0-86.38.187.255
86.38.202.0/23
86.38.220.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0-89.116.70.255
89.116.72.0-89.116.76.255
89.116.88.0/23
89.116.91.0-89.116.92.255
89.116.106.0-89.116.108.255
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.210.0-89.116.215.255
89.116.218.0/24
89.116.239.0/24
89.116.242.0/23
89.116.246.0/23
89.116.250.0/24
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0/22
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.132.0/22
89.117.139.0/24
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.168.0/23
89.117.188.0/24
89.117.190.0/24
89.117.216.0/23
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
52:62:15:29:d1:bf:d9:ba:c2:e2:ec:8c:d7:40:0c:2f:6d:69:
ed:bc:83:62:77:33:6a:da:01:65:56:c1:5f:27:a1:b1:82:40:
f2:bb:ab:75:2f:04:a2:be:f7:50:b3:f7:41:68:7f:bf:66:b8:
b8:cb:9e:a1:5f:7a:25:e4:1a:3d:49:11:ff:ee:d1:01:13:97:
19:fa:69:89:95:68:2d:05:a3:d0:81:60:ec:c0:12:31:de:a5:
28:4f:6b:6e:61:da:60:f3:6f:f9:9e:2d:ba:ad:96:e0:8f:04:
65:c8:0b:b7:64:d0:72:5d:9d:ca:ac:ab:df:7c:1d:87:46:d6:
10:38:ff:92:75:8c:c1:28:58:09:5a:7f:11:60:54:23:2d:01:
78:86:ea:9d:8c:8f:be:b3:fa:19:ea:2a:61:07:47:4a:1e:a8:
6c:c5:29:28:33:a8:c8:e3:20:57:a6:ab:6e:d8:42:ec:7a:84:
58:71:10:53:e8:91:9f:fa:0f:60:c1:56:8f:fc:f6:77:7f:b2:
34:38:74:6c:90:3f:31:b4:09:42:b9:7b:b4:05:33:23:f6:d3:
96:22:21:87:66:f7:4c:b8:f8:24:7f:31:66:7f:da:ba:e6:d3:
00:14:a1:3c:fc:61:55:f5:f3:66:32:de:af:ec:5a:d7:5b:3b:
5b:fe:9a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org