Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/uzFAPdAqbYQTu9wETcphsUVMtyE.roa
File: uzFAPdAqbYQTu9wETcphsUVMtyE.roa (raw, json)
Hash identifier: 0+Z3KDJw6qpd6/+AA42kh6xrqwoPpXXgYQoA8vSevA4=
Subject key identifier: BB:31:40:3D:D0:2A:6D:84:13:BB:DC:04:4D:CA:61:B1:45:4C:B7:21
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0181DA65595C98456CFD918650B7C5DCCC5A
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/uzFAPdAqbYQTu9wETcphsUVMtyE.roa
Signing time: Thu 07 Jul 2022 20:41:23 +0000
ROA not before: Thu 07 Jul 2022 20:41:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:65:59:5c:98:45:6c:fd:91:86:50:b7:c5:dc:cc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 7 20:41:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb31403dd02a6d8413bbdc044dca61b1454cb721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:70:2a:9b:84:83:ea:86:5e:bd:8e:bd:bc:
77:77:53:0b:0b:f5:80:f3:60:fe:a1:b7:9a:37:e0:
9c:2d:cf:ca:82:70:a1:b1:69:cd:c4:0b:9d:05:90:
c7:9a:1f:32:42:93:66:a9:17:40:68:79:47:4f:1a:
ff:01:f8:a1:03:56:fb:f3:e0:5f:b5:59:60:f4:44:
4f:86:08:a2:c5:13:e7:33:52:c2:45:76:8d:85:48:
7f:79:2e:22:a3:81:8d:1c:79:de:4a:ab:a3:61:28:
29:48:16:42:0a:00:5a:9d:f2:25:34:42:d3:b2:f5:
62:ab:0d:60:ef:84:9d:49:ee:e3:37:3e:b7:85:2c:
6a:1a:84:86:4a:a5:71:54:35:6a:75:20:46:ef:b8:
31:a0:41:69:d3:36:35:bd:42:c3:c7:a7:aa:ff:86:
c6:f8:0f:f2:75:4f:cb:7b:d5:19:2f:d2:df:ef:d1:
17:27:6c:37:9a:98:fb:33:08:73:a4:09:60:73:08:
42:ea:2b:c0:c8:ab:12:8b:18:bc:ad:e7:ac:0a:51:
95:e2:d7:a2:87:fe:6c:67:b8:70:f6:66:82:2c:ab:
f1:af:15:83:67:95:65:b2:66:11:b6:cb:38:1e:32:
ca:04:40:83:bf:88:cb:47:34:85:41:a3:b6:9d:09:
3e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:40:3D:D0:2A:6D:84:13:BB:DC:04:4D:CA:61:B1:45:4C:B7:21
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/uzFAPdAqbYQTu9wETcphsUVMtyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:39:2b:f8:f8:ae:77:80:bf:60:22:0a:82:00:32:6b:45:c2:
06:23:f5:5d:1d:db:d8:44:0d:8a:03:3b:30:02:3c:46:ce:95:
d0:45:41:8d:fb:29:ff:be:18:fd:e6:f0:b4:f8:84:90:ac:19:
0f:47:99:e8:5c:af:c5:18:24:83:4f:9f:01:db:c4:fe:6c:7a:
0f:b0:80:18:58:c7:05:92:ab:c3:1d:a6:8b:be:db:24:a2:5e:
87:c6:2d:b1:64:20:f8:d4:14:de:cf:9c:86:4b:88:96:49:8e:
98:6d:23:eb:7f:72:df:b9:89:a5:e7:b4:6e:ad:d5:6d:c2:79:
03:ea:a1:dd:7e:72:5d:15:3a:15:e5:40:54:18:8f:1d:22:b9:
f5:d4:af:d1:ed:1b:16:2d:9b:58:00:62:33:0d:3d:4f:8a:56:
39:35:c6:39:fe:18:52:0b:69:e4:ca:98:e1:39:f4:cd:0b:30:
7e:47:ce:46:3f:2c:13:91:40:cf:e4:e7:55:24:4d:1c:66:ac:
50:b7:63:c0:1e:b2:a7:f8:df:5b:b5:89:6a:d9:77:c4:4a:8f:
49:72:52:16:64:73:98:62:02:72:ab:f3:76:63:c0:21:d4:dd:
d6:fa:fd:2f:17:3e:16:5d:69:68:f8:84:4d:18:cc:91:90:25:
12:35:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org