Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/tf9AjKu4xpnALH0VvC6mAmoS4c8.roa
File: tf9AjKu4xpnALH0VvC6mAmoS4c8.roa (raw, json)
Hash identifier: hvJYXNg9v3PMftG2+Tc5dCFfkWI+uvDcWd5GznY3JCA=
Subject key identifier: B5:FF:40:8C:AB:B8:C6:99:C0:2C:7D:15:BC:2E:A6:02:6A:12:E1:CF
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B4C2333
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/tf9AjKu4xpnALH0VvC6mAmoS4c8.roa
Signing time: Thu 09 Jun 2022 18:38:03 +0000
ROA not before: Thu 09 Jun 2022 18:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189539123 (0xb4c2333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 9 18:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5ff408cabb8c699c02c7d15bc2ea6026a12e1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:63:52:e4:4b:db:c2:6e:62:1e:70:07:b6:40:
2f:4e:07:da:49:83:c6:c2:4f:f1:db:ea:06:fe:24:
20:ce:61:ff:d2:1f:ed:4d:e6:2a:37:0e:17:36:d9:
88:75:bf:c4:16:36:c6:03:2c:ed:90:c0:7a:7d:d1:
95:b6:da:aa:c0:82:a3:e9:07:41:0f:e5:43:6c:56:
51:87:08:75:6f:5a:62:f7:f3:63:4d:81:7e:1f:75:
d6:bd:86:d2:a3:58:3d:b5:20:4f:4a:16:b5:8d:e1:
97:87:66:07:99:ad:b9:3c:30:1e:f9:35:98:6b:7c:
78:d9:8c:c8:1b:95:c6:60:a0:66:bd:ad:73:88:23:
46:93:d9:2c:c5:bb:a1:4a:47:73:23:f9:e3:cf:4f:
01:7b:35:44:5c:a5:aa:c9:08:e9:a5:be:c3:ed:ea:
e2:56:7b:39:12:25:a8:a6:39:cc:3e:51:ae:fd:90:
e8:f4:f2:4d:89:30:4c:17:1a:48:7f:8b:d3:85:7f:
e5:c1:87:91:3d:f6:79:02:0a:35:a5:c7:cb:e5:36:
d0:2d:8c:11:f1:fa:35:0b:f3:9a:42:f5:ec:95:ba:
a2:1d:26:f3:ad:44:05:bd:4b:71:91:fa:4b:24:8d:
c6:67:e8:60:e0:a3:de:e1:25:e7:a1:21:48:29:28:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:40:8C:AB:B8:C6:99:C0:2C:7D:15:BC:2E:A6:02:6A:12:E1:CF
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/tf9AjKu4xpnALH0VvC6mAmoS4c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.153.0/24
89.116.158.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0/22
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a4:5f:23:73:d6:17:2c:93:6d:20:e4:e6:63:bf:2a:32:f9:
c4:da:ab:ec:97:1f:b3:dd:c1:e3:f7:31:b9:89:2d:51:6a:b2:
5f:04:e0:d6:ae:09:6c:77:86:29:7c:e6:11:b0:21:13:9c:fc:
ff:34:54:43:fc:dc:fd:cf:d9:5a:4f:bd:92:82:25:4f:bb:67:
d1:e6:79:a2:d2:8e:50:9d:24:08:52:3b:ab:8d:74:33:ec:b5:
ad:75:5d:24:50:d9:4c:83:79:02:35:05:83:ca:81:19:9a:70:
6e:94:94:18:b0:01:49:4c:d4:fc:59:49:75:72:50:47:56:7b:
d2:df:c7:9b:3c:39:83:5d:10:44:67:a9:51:95:1d:6c:27:8d:
5b:7e:54:12:5b:1e:c2:aa:b2:19:d3:27:4f:15:fb:ad:d2:62:
69:99:3e:7d:42:c9:8c:e7:2a:c4:bb:a9:36:a1:7f:21:fb:b3:
a3:ba:82:97:8d:e7:42:23:e8:fa:01:10:d2:a4:47:fd:ff:c2:
79:8c:22:6c:a3:1c:2d:c6:77:38:cb:a9:9f:51:f0:f8:61:87:
f6:7b:de:fd:46:96:c3:04:8b:12:45:ed:5d:69:db:94:f4:f1:
b0:0d:c7:6c:10:17:e5:a3:82:33:57:09:db:b3:e7:da:30:87:
5a:bb:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org