Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/s6e15Licb5OCQjvJRa6yPz_f4NA.roa
File: s6e15Licb5OCQjvJRa6yPz_f4NA.roa (raw, json)
Hash identifier: CoIhYCNbeBLSGV4/bu8XPCQ+PCUyF/0dKqCarOpDroI=
Subject key identifier: B3:A7:B5:E4:B8:9C:6F:93:82:42:3B:C9:45:AE:B2:3F:3F:DF:E0:D0
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182CF52F1EB1BAEFCCD60E354D25CB196B5
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/s6e15Licb5OCQjvJRa6yPz_f4NA.roa
Signing time: Wed 24 Aug 2022 10:08:15 +0000
ROA not before: Wed 24 Aug 2022 10:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:52:f1:eb:1b:ae:fc:cd:60:e3:54:d2:5c:b1:96:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 24 10:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3a7b5e4b89c6f9382423bc945aeb23f3fdfe0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:dd:f1:e2:1d:1a:2e:d2:2c:ef:52:c4:72:
aa:d4:3f:20:99:e0:39:1e:0b:01:7c:90:92:82:4c:
db:38:57:6e:7b:7c:eb:08:6e:0b:0e:7b:20:92:a6:
ad:25:11:99:3a:dd:72:77:1e:87:c2:e9:dd:9c:14:
a5:7f:d6:e5:10:f5:99:67:92:4e:45:52:bf:42:92:
66:60:19:5a:70:76:7c:cc:90:18:29:92:ce:ce:eb:
66:2b:c2:52:9e:62:e3:c6:e1:bc:8c:46:c6:46:e3:
46:5c:ef:23:c6:05:d6:1b:69:e0:2d:90:39:f3:22:
87:83:8a:80:8c:ff:b8:98:af:4e:93:48:50:d8:67:
1e:9b:13:b9:80:78:70:bf:82:a9:2e:5f:aa:d6:62:
bb:50:98:f6:92:8e:07:4a:bb:81:d6:95:33:13:42:
91:20:84:be:d0:86:e3:16:1a:64:b7:4a:43:8e:d3:
42:95:39:f8:e6:46:fa:42:f5:c7:bd:90:98:0b:b6:
03:97:1a:57:7b:bd:02:f1:30:2a:fe:bf:d2:33:71:
5d:2a:52:04:d4:42:ff:fd:c5:b7:28:df:a8:d2:ea:
fb:39:28:2e:4e:36:da:ef:4d:71:05:01:51:2c:13:
60:97:0f:92:8c:a6:17:f0:7e:b3:85:47:ee:c1:37:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A7:B5:E4:B8:9C:6F:93:82:42:3B:C9:45:AE:B2:3F:3F:DF:E0:D0
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/s6e15Licb5OCQjvJRa6yPz_f4NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.202.0/23
89.116.54.0/24
89.116.70.0/24
89.116.88.0/23
89.116.99.0/24
89.116.103.0/24
89.116.106.0/23
89.116.112.0/23
89.116.115.0/24
89.116.126.0/23
89.116.135.0/24
89.116.148.0/23
89.116.156.0/24
89.116.161.0/24
89.116.171.0/24
89.116.175.0/24
89.116.177.0/24
89.116.193.0/24
89.116.203.0/24
89.116.208.0/22
89.116.218.0/24
89.116.220.0/23
89.116.223.0/24
89.116.233.0/24
89.116.252.0/24
89.117.12.0/23
89.117.28.0-89.117.33.255
89.117.68.0/24
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.102.0/23
89.117.109.0/24
89.117.112.0/22
89.117.129.0-89.117.130.255
89.117.132.0/22
89.117.142.0/23
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f1:84:aa:d2:f5:dc:32:2c:b4:39:fe:3f:65:17:4e:a6:37:
bd:38:e7:55:16:b0:b9:82:7e:92:d0:d2:9a:56:0d:50:6c:27:
9e:79:97:96:ad:eb:57:70:39:db:aa:a1:5f:c5:a6:b6:b6:f3:
ba:6a:54:ef:9b:e2:96:b5:09:72:d2:96:dc:9a:c7:be:03:c9:
e8:c8:c8:0c:d0:b9:fc:e6:d5:61:ed:95:b2:71:be:e7:64:5c:
97:da:fb:df:5d:4c:54:a2:64:46:5f:3a:78:1f:aa:4d:f1:da:
f6:6d:1d:f9:39:80:d4:4c:d0:03:11:67:ea:49:19:b5:d8:f3:
b0:00:3a:05:7b:7b:39:e9:96:1c:da:3d:4f:34:76:bc:88:85:
5c:2f:0b:cf:b0:e6:74:88:00:d0:c8:13:f6:f3:1f:35:4c:4c:
75:73:8f:ad:ad:a6:d2:ac:f2:6c:df:f8:1b:f3:2d:fe:3a:aa:
6a:14:8a:8d:d7:b1:c5:f1:0e:82:cb:1e:c5:55:d2:93:65:fa:
89:e2:d5:5d:ec:51:70:30:29:7f:a9:5e:57:56:90:15:b7:11:
d8:a6:b6:fc:c4:04:03:13:3b:ad:23:b8:5a:54:e7:85:b1:21:
f9:a4:50:93:2e:a7:53:91:1e:5f:43:72:70:8e:3c:89:79:23:
5f:19:35:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org