Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/rRGP7g77CCUWfqS52FkQjdILmiI.roa
File: rRGP7g77CCUWfqS52FkQjdILmiI.roa (raw, json)
Hash identifier: avfVvqDzABJFXrjRDuDMvB3TsX14DvwbKF39av9K3og=
Subject key identifier: AD:11:8F:EE:0E:FB:08:25:16:7E:A4:B9:D8:59:10:8D:D2:0B:9A:22
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0ABF68C8
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/rRGP7g77CCUWfqS52FkQjdILmiI.roa
Signing time: Tue 10 May 2022 07:09:31 +0000
ROA not before: Tue 10 May 2022 07:09:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180316360 (0xabf68c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 10 07:09:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad118fee0efb0825167ea4b9d859108dd20b9a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:8e:c4:cb:5d:cf:8e:e6:06:24:98:40:ea:
ce:7d:5b:79:9e:ed:f2:59:b2:b9:20:94:bb:23:a1:
69:cf:a4:ce:56:5e:24:8d:a7:9d:e6:70:e5:40:87:
74:cb:1a:84:1b:09:b6:32:0a:f0:46:de:55:e3:63:
48:87:47:b3:9d:4b:e0:1b:77:3c:9a:f8:1f:d3:80:
f9:71:03:5a:8e:10:79:9f:62:e8:e3:82:b5:4e:5a:
03:3b:53:9a:52:55:3e:2e:7d:a4:74:67:af:4c:b0:
9f:48:9d:92:43:8c:0c:39:2f:af:75:78:7d:45:8b:
30:b0:ea:5a:bd:5d:7d:e9:38:b9:9a:b5:88:65:39:
ac:65:13:7c:6d:01:c7:ec:13:24:92:d2:14:46:59:
c0:20:93:c3:b1:b7:e9:6b:79:26:b6:97:3d:e1:b2:
b7:e7:42:ea:85:85:9a:35:8b:35:f3:42:f1:7a:34:
f2:bd:12:3b:60:dd:8e:10:43:39:51:1e:ab:0c:5d:
ec:76:19:cf:21:a7:5a:75:98:ec:95:c9:84:39:5f:
17:78:e6:8a:82:b2:b5:ac:9d:4b:24:81:cc:ab:4c:
8f:b7:26:b1:cc:2b:7c:37:91:85:92:19:be:cb:e5:
dd:e5:e1:79:ee:5f:cb:f4:34:56:1a:ce:f5:45:7e:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:8F:EE:0E:FB:08:25:16:7E:A4:B9:D8:59:10:8D:D2:0B:9A:22
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/rRGP7g77CCUWfqS52FkQjdILmiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.182.0/23
86.38.202.0/23
89.116.54.0/24
89.116.70.0/24
89.116.88.0/23
89.116.99.0/24
89.116.103.0/24
89.116.106.0/23
89.116.112.0/23
89.116.115.0/24
89.116.126.0-89.116.128.255
89.116.130.0/23
89.116.135.0/24
89.116.141.0/24
89.116.148.0/23
89.116.156.0/24
89.116.158.0/24
89.116.161.0/24
89.116.171.0/24
89.116.175.0/24
89.116.177.0/24
89.116.193.0/24
89.116.203.0/24
89.116.208.0/22
89.116.218.0/24
89.116.220.0/23
89.116.223.0/24
89.116.233.0/24
89.116.252.0/23
89.116.255.0/24
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.68.0/24
89.117.72.0-89.117.85.255
89.117.88.0/22
89.117.96.0/22
89.117.102.0/23
89.117.109.0/24
89.117.112.0/22
89.117.129.0-89.117.130.255
89.117.132.0/22
89.117.142.0/23
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d5:e4:89:7c:bc:1a:b1:20:8d:65:97:6f:92:1d:5a:55:33:
f9:73:bf:3e:52:cb:81:48:2c:0e:6d:f8:34:ef:ad:f4:eb:52:
00:a3:83:b2:98:4c:26:ca:dc:c1:f2:22:a5:7a:5f:9e:01:0e:
82:e8:f1:5a:8c:d1:dc:2a:b3:2b:9e:86:ce:1b:c7:2a:63:18:
3a:01:20:1a:f2:9c:95:41:8b:28:d4:07:47:1b:9f:3b:6a:58:
bf:2e:41:40:71:5e:4c:f6:db:d5:b7:4f:91:6a:69:40:b6:14:
3f:f8:5e:75:d1:63:c4:6e:f7:3e:a6:73:42:bf:23:b1:08:81:
4c:0c:ab:10:49:ad:22:93:0e:91:fb:87:b9:91:04:7d:1a:ed:
c9:e4:23:4f:0c:d5:aa:55:7e:56:ab:ce:e6:23:70:d5:44:b0:
01:1f:7b:3a:d6:c4:81:a5:a7:fa:a2:30:31:d9:f9:c6:24:8e:
a2:a4:61:b1:2b:34:5f:e4:a1:1e:e4:83:bd:a5:c2:d5:51:1a:
a2:e2:28:0f:aa:51:ee:e1:e7:dd:c6:c5:86:e3:b6:d6:15:40:
03:cf:11:8a:72:15:a5:0b:cb:32:82:c8:44:84:d0:a8:2d:6f:
81:aa:d0:18:17:60:5d:7d:f6:86:72:c8:9c:16:d6:38:35:a6:
66:8a:2e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:25 2025 by rpki-client