Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pyQfhKmtUoxbEIotEzuGZVAPqFs.roa
File: pyQfhKmtUoxbEIotEzuGZVAPqFs.roa (raw, json)
Hash identifier: yiEglzaT9pI1Qp4jPHa5JlWZHZBvmSxSXmGD0BMirQQ=
Subject key identifier: A7:24:1F:84:A9:AD:52:8C:5B:10:8A:2D:13:3B:86:65:50:0F:A8:5B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182CF52F2EB6E4A37ACC2557E22648E701E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pyQfhKmtUoxbEIotEzuGZVAPqFs.roa
Signing time: Wed 24 Aug 2022 10:08:16 +0000
ROA not before: Wed 24 Aug 2022 10:08:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:52:f2:eb:6e:4a:37:ac:c2:55:7e:22:64:8e:70:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 24 10:08:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7241f84a9ad528c5b108a2d133b8665500fa85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9a:08:b2:77:a6:ad:da:ff:20:2d:1b:57:92:
62:be:68:14:aa:46:2c:15:f7:c2:f7:2b:cd:ef:d6:
5e:43:c6:f5:27:15:7e:11:f3:c2:90:88:fb:01:84:
83:c4:a2:89:02:d5:b0:9b:b7:56:f5:68:cb:15:51:
d0:39:2d:87:86:04:93:5e:a9:1d:84:95:14:31:fa:
cb:8f:44:5b:80:e7:e5:15:b9:aa:e1:ad:e9:de:3f:
ef:a1:74:ab:2b:7a:24:57:73:28:bc:95:c1:5b:23:
26:6e:aa:ea:51:5d:8b:b6:75:9e:42:09:77:66:3a:
6e:12:fd:d5:a1:9e:5b:f3:80:e0:bf:f2:54:f7:a3:
75:1d:4b:22:f1:5f:31:66:26:dc:f3:65:9e:d0:79:
1a:d2:4c:0a:0e:28:32:a7:93:e5:fc:11:42:c0:7e:
ef:9f:65:51:06:b8:78:71:91:09:ca:93:96:0f:9f:
fc:a8:c0:58:62:3e:d3:4d:e6:2a:e7:c4:24:6e:cd:
97:11:2e:67:84:c4:fc:0c:b5:70:7a:58:04:aa:aa:
72:53:c4:8a:4c:2f:c7:c2:ad:78:d8:17:ef:21:dc:
ad:0f:85:ac:bf:e1:d3:2d:a6:9e:32:76:9e:27:14:
de:1c:ba:2e:cb:2b:94:bc:ed:3d:fd:51:13:9d:78:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:24:1F:84:A9:AD:52:8C:5B:10:8A:2D:13:3B:86:65:50:0F:A8:5B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pyQfhKmtUoxbEIotEzuGZVAPqFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.132.0/24
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0-89.116.186.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/24
89.117.8.0/23
89.117.12.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
92:82:b0:3b:3d:e5:37:59:0f:3c:47:97:7e:ae:b0:6b:1b:0c:
fd:94:20:9d:73:99:d5:03:67:b1:b0:a2:bd:32:18:62:8e:90:
0c:ee:0d:15:41:47:dd:59:64:85:06:32:58:4b:74:e6:c4:d3:
62:2a:c7:9f:46:5b:c2:30:5f:df:d9:82:32:12:a9:4e:66:2a:
32:1f:0b:c0:d7:7b:2a:44:d9:2f:6b:be:d7:4f:2f:30:2a:a6:
4e:d1:8d:ad:b3:7c:38:34:3b:14:fa:61:39:e5:20:ab:3c:a7:
81:60:0e:25:c9:4f:0a:34:be:a1:05:2f:08:8e:44:fe:a0:e3:
0f:fc:2d:1b:d3:da:56:a8:50:ca:45:3a:c5:57:64:b6:d8:d7:
0c:bf:f9:b9:d0:35:d3:dd:9b:ee:e2:13:c7:f1:6a:14:97:2c:
4e:5c:fe:3d:e1:d2:77:64:11:8b:a3:de:94:02:aa:6c:15:9d:
d3:3b:e6:16:f2:51:f1:a5:35:23:ba:64:f4:b5:0e:10:89:fb:
25:3c:f2:54:97:73:dd:ef:0b:f8:88:21:f2:8b:61:e4:25:8d:
f0:97:1b:3e:5e:0a:fa:60:74:d6:28:d7:2a:ed:08:37:65:d1:
41:fc:af:1f:cf:46:1d:95:ce:b4:7a:77:33:0a:1e:dd:7d:46:
ea:f9:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org