Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/qXqDe2LdemAgcTJGnIrX5Pp0vck.roa
File: qXqDe2LdemAgcTJGnIrX5Pp0vck.roa (raw, json)
Hash identifier: MCQdc1tYHZlN9Z1OZrpIALSNS3nAqaMb/dEqhle9PDc=
Subject key identifier: A9:7A:83:7B:62:DD:7A:60:20:71:32:46:9C:8A:D7:E4:FA:74:BD:C9
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 092AF885
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/qXqDe2LdemAgcTJGnIrX5Pp0vck.roa
Signing time: Sun 30 Jan 2022 11:24:38 +0000
ROA not before: Sun 30 Jan 2022 11:24:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.64.0/22 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.72.0/22 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.212.0/22 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153811077 (0x92af885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 30 11:24:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a97a837b62dd7a60207132469c8ad7e4fa74bdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:15:2d:d1:24:4f:c3:0d:2f:bd:20:51:cb:
b3:6c:f9:5c:ec:2c:89:c5:5a:24:07:6c:b7:8e:b5:
59:27:b2:60:4f:d7:10:aa:b4:72:aa:09:3e:7d:3e:
b5:2d:96:9d:97:e5:96:80:f0:4a:fd:21:c6:5a:1c:
92:20:5f:b9:c2:69:ac:a7:8d:3f:02:0a:d0:6c:f1:
1f:7c:8f:1f:8c:05:1e:fb:d6:6a:48:10:7c:16:da:
4c:0b:e7:29:79:f2:0f:62:6d:07:b2:d7:ba:55:58:
58:ea:5e:4f:39:3d:8c:0f:3a:d0:ee:e3:25:6d:a3:
de:fb:b2:40:02:26:7b:47:9d:5c:a5:1e:bd:a8:25:
1e:1b:fc:e3:3d:8b:06:7e:2e:32:29:41:a0:b4:56:
b8:69:fa:67:e6:90:1f:a4:d3:9e:53:9d:9e:01:b4:
78:db:1e:88:20:72:99:8c:0b:a3:e5:f3:1f:e2:5c:
6c:2d:a0:26:8f:f1:07:ea:03:30:d6:64:55:62:9b:
bf:28:98:1a:e7:fa:26:b3:45:3a:01:80:e5:28:fc:
cd:56:c3:18:fe:e1:26:1b:2c:36:c9:01:ff:12:4d:
d3:9b:52:40:c6:05:bc:76:09:35:d3:ea:5c:4a:fe:
29:ed:89:f2:e9:94:50:a6:2f:69:3b:27:a4:29:42:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7A:83:7B:62:DD:7A:60:20:71:32:46:9C:8A:D7:E4:FA:74:BD:C9
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/qXqDe2LdemAgcTJGnIrX5Pp0vck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.182.0/23
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.72.0/22
89.116.88.0/23
89.116.148.0/23
89.116.164.0/23
89.116.180.0-89.116.185.255
89.116.210.0-89.116.215.255
89.116.242.0/23
89.117.24.0/23
89.117.28.0/22
89.117.64.0/22
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.96.0/22
89.117.112.0/22
89.117.132.0/22
89.117.142.0/23
89.117.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:ac:e1:b5:0d:49:c6:77:d7:17:ab:cf:69:40:09:16:ed:cf:
c2:08:b1:55:ad:3c:8e:21:13:86:78:02:d0:bd:d9:69:6d:26:
fa:5a:73:5a:a1:6b:0a:5c:ef:e4:44:ac:04:c8:e9:15:fd:f0:
5e:ae:00:0d:00:1c:a2:ec:69:63:b8:2c:3e:01:6d:98:73:72:
a4:32:9b:d5:80:61:4d:46:a4:68:f0:f5:4b:72:e3:8f:e1:1c:
ec:fb:e1:89:f9:7c:63:99:18:73:30:eb:09:80:81:2d:b3:f5:
47:54:08:3c:4f:ae:68:97:9d:31:65:e5:95:0b:75:98:3e:fe:
0b:d1:a9:f8:9f:83:e1:02:af:c1:b9:a7:99:3f:1e:35:c4:09:
e2:12:6c:97:5c:f3:d7:00:70:c1:19:2f:26:66:74:2f:49:eb:
78:6b:99:b1:88:26:1f:e5:de:59:d8:5e:7e:e7:95:25:b3:52:
ff:9f:d2:07:65:14:9b:29:13:5e:83:69:43:ee:96:b9:23:48:
9b:15:b9:cc:bf:50:61:29:95:3c:9c:a1:cd:4a:2a:5b:d2:6c:
f4:73:23:52:b8:d1:8b:cc:3d:58:47:1a:9a:e1:40:47:2f:87:
8e:ed:29:6c:d0:57:25:c7:d9:45:15:84:e7:8c:49:67:cf:73:
32:d3:15:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org