Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ulIbaCJIKbfo7V4d0s0bDJY3CZ8.roa
File: ulIbaCJIKbfo7V4d0s0bDJY3CZ8.roa (raw, json)
Hash identifier: 3V6GAEE5ThJAx0z6txFT4gCKbwtgAgMq7p+aV6zO8xs=
Subject key identifier: BA:52:1B:68:22:48:29:B7:E8:ED:5E:1D:D2:CD:1B:0C:96:37:09:9F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0181E40234527D944051701557D2EA1DBC3E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ulIbaCJIKbfo7V4d0s0bDJY3CZ8.roa
Signing time: Sat 09 Jul 2022 17:29:18 +0000
ROA not before: Sat 09 Jul 2022 17:29:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e4:02:34:52:7d:94:40:51:70:15:57:d2:ea:1d:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 9 17:29:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba521b68224829b7e8ed5e1dd2cd1b0c9637099f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:71:ac:17:65:e5:44:b9:d3:ad:b5:8e:c1:
7c:c5:78:9d:3e:04:48:93:12:00:2b:b7:6b:53:6c:
c7:cc:02:15:a5:2b:06:02:d9:f6:8f:a6:7c:01:3c:
1b:f3:77:1e:8c:e2:f1:39:33:1c:51:c6:19:b9:47:
2f:60:cf:0c:f6:6b:ad:fd:f4:f5:91:a7:64:8d:ad:
59:de:96:f2:a4:9d:e8:d9:14:b7:94:1f:73:7b:62:
3f:b7:a7:cb:3f:a9:88:3f:7d:58:f2:52:32:8d:32:
1a:96:f5:47:78:ca:d8:75:ef:c1:7a:49:55:11:90:
f3:11:a2:dc:ef:4c:79:f2:33:6f:ec:5e:49:cc:99:
69:98:c7:a0:68:df:34:c4:80:f0:15:eb:fc:37:ce:
b8:cd:76:17:bc:1e:22:0b:d4:17:22:f3:e6:aa:fe:
da:a1:19:66:ca:3a:10:8e:81:3f:a5:e9:61:88:5c:
57:42:65:4f:c8:fb:c3:65:fd:be:49:98:5c:7d:5b:
27:1e:57:4e:46:ae:ed:02:8e:c4:66:d5:67:92:36:
d7:a9:cc:85:fd:31:2f:b5:97:de:02:df:8b:64:b8:
de:47:38:56:74:22:59:d0:59:f3:e3:85:ee:18:12:
d9:66:df:7e:2d:68:fa:80:91:b7:60:3b:a2:0d:f8:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:52:1B:68:22:48:29:B7:E8:ED:5E:1D:D2:CD:1B:0C:96:37:09:9F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ulIbaCJIKbfo7V4d0s0bDJY3CZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:89:b5:ca:f0:44:33:6d:97:c9:f7:89:34:a7:5d:0c:6b:4d:
8a:28:c4:56:d3:7d:7d:e0:6e:03:f5:32:b4:c2:06:51:16:af:
06:78:90:af:b3:d0:c7:c6:0f:b9:ee:bf:dd:0b:82:69:3b:a9:
ce:5a:41:88:82:a1:53:b2:3e:08:ed:8c:0f:63:7b:f6:2f:11:
1e:a2:bb:50:1a:d2:25:f5:49:bb:e1:9b:5f:89:01:26:da:08:
24:83:07:b9:a1:12:d9:a6:f1:d7:2a:c5:7b:9c:ce:64:78:90:
2c:80:d2:fa:40:58:3c:d5:8e:09:bc:95:30:3e:d6:48:0f:30:
72:08:e6:f6:3a:08:58:ac:1e:ac:09:02:03:cf:49:01:00:ad:
a8:0d:f6:6c:72:fe:b6:dc:22:50:ed:a6:9a:e9:59:56:2c:29:
eb:4f:c8:25:ce:40:4b:4d:ea:9c:10:7d:80:80:ea:54:b0:19:
40:e5:19:51:05:19:d4:db:b3:c8:a6:f2:11:d1:2c:74:c8:5f:
17:e1:76:37:31:0a:30:7c:c4:ab:98:8a:6c:23:20:5e:24:a9:
b9:93:17:67:b2:29:0f:b2:3f:8d:58:bd:76:df:8c:8a:a0:9b:
c1:ee:f2:f7:ee:5c:09:d7:c5:36:83:e3:d6:9f:05:1c:96:8b:
61:c2:f6:4a
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgISAYHkAjRSfZRAUXAVV9LqHbw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwNzA5MTcyOTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTUyMWI2ODIyNDgyOWI3ZThlZDVlMWRkMmNkMWIwYzk2MzcwOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbNxrBdl5US50621jsF8xXidPgRI
kxIAK7drU2zHzAIVpSsGAtn2j6Z8ATwb83cejOLxOTMcUcYZuUcvYM8M9mut/fT1
kadkja1Z3pbypJ3o2RS3lB9ze2I/t6fLP6mIP31Y8lIyjTIalvVHeMrYde/BeklV
EZDzEaLc70x58jNv7F5JzJlpmMegaN80xIDwFev8N864zXYXvB4iC9QXIvPmqv7a
oRlmyjoQjoE/pelhiFxXQmVPyPvDZf2+SZhcfVsnHldORq7tAo7EZtVnkjbXqcyF
/TEvtZfeAt+LZLjeRzhWdCJZ0Fnz44XuGBLZZt9+LWj6gJG3YDuiDfhAtQIDAQAB
o4IDeTCCA3UwHQYDVR0OBBYEFLpSG2giSCm36O1eHdLNGwyWNwmfMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvdWxJYmFDSklLYmZvN1Y0ZDBzMGJESlkzQ1o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBjQYIKwYBBQUHAQcBAf8EggF8MIIBeDCCAXQEAgABMIIB
bAMEAVQu6gMEAVYmsgMEAlYmuAMEAVYmygMEAVYm9gMEAVl0OgMEAVl0WAMEAFl0
XDAMAwQBWXRqAwQAWXRsMAwDBABZdH0DBAdZdAAwDAMEAVl0ggMEAFl0hAMEAFl0
hwMEAFl0iQMEAFl0jTAMAwQCWXSUAwQAWXSWAwQAWXShAwQAWXSjAwQAWXSmAwQB
WXSsAwQAWXSvAwQAWXSxAwQAWXSzMAwDBANZdLgDBABZdLoDBABZdMEDBAFZdNID
BABZdNoDBAFZdPwDBABZdP8DBAFZdQgDBAFZdQwDBAFZdRgwDAMEAll1HAMEAVl1
IAMEAVl1JDAMAwQBWXVGAwQEWXVAAwQBWXVUAwQCWXVYAwQBWXVeAwQBWXVmAwQA
WXVtMAwDBARZdXADBAFZdXQDBABZdYEDBAJZdYQDBAFZdY4DBAFZdZ4DBABZdb4D
BABZddcDBABZdd4DBAFZdeQDBABZdfUDBABZdfowDQYJKoZIhvcNAQELBQADggEB
AG+JtcrwRDNtl8n3iTSnXQxrTYooxFbTfX3gbgP1MrTCBlEWrwZ4kK+z0MfGD7nu
v90Lgmk7qc5aQYiCoVOyPgjtjA9je/YvER6iu1Aa0iX1Sbvhm1+JASbaCCSDB7mh
Etmm8dcqxXuczmR4kCyA0vpAWDzVjgm8lTA+1kgPMHII5vY6CFisHqwJAgPPSQEA
ragN9mxy/rbcIlDtpprpWVYsKetPyCXOQEtN6pwQfYCA6lSwGUDlGVEFGdTbs8im
8hHRLHTIXxfhdjcxCjB8xKuYimwjIF4kqbmTF2eyKQ+yP41YvXbfjIqgm8Hu8vfu
XAnXxTaD49afBRyWi2HC9ko=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org