Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/v0rEvfpfjmp8-CYq8DuWV1rvIXE.roa
File: v0rEvfpfjmp8-CYq8DuWV1rvIXE.roa (raw, json)
Hash identifier: rnXYgaGqc5EwMd2A5rCYXRF6SuSstxMZ/IwiIKV9neQ=
Subject key identifier: BF:4A:C4:BD:FA:5F:8E:6A:7C:F8:26:2A:F0:3B:96:57:5A:EF:21:71
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018287B7730E918D22B29D418D49139AA2A5
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/v0rEvfpfjmp8-CYq8DuWV1rvIXE.roa
Signing time: Wed 10 Aug 2022 12:25:22 +0000
ROA not before: Wed 10 Aug 2022 12:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:b7:73:0e:91:8d:22:b2:9d:41:8d:49:13:9a:a2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 10 12:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf4ac4bdfa5f8e6a7cf8262af03b96575aef2171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:76:bf:40:a1:58:60:f1:7e:cc:4e:0c:1f:
45:fa:2e:82:65:4f:18:65:8d:41:00:f3:18:54:2c:
36:d8:55:40:cf:ce:04:e6:d4:59:b2:48:44:99:4a:
71:03:1a:d7:7b:f1:aa:72:8c:76:d3:15:9c:1b:c8:
64:f3:41:38:7e:c1:74:c7:1d:01:df:58:5f:23:f5:
2d:49:7d:bd:39:64:be:6a:55:a8:42:30:d7:30:56:
a4:d7:92:ea:33:f9:dc:1b:15:72:84:43:6a:07:71:
ae:47:1e:71:18:ec:85:97:16:0b:74:eb:73:ba:37:
1b:d7:a8:58:f5:87:01:c1:4f:98:fd:62:57:5a:86:
c0:8e:5b:6a:be:36:b5:31:38:6f:cc:48:34:b3:ab:
a8:d3:9a:6b:64:18:ab:47:e8:b8:5c:bb:2d:cc:ec:
af:2d:5e:ed:df:de:28:96:44:65:25:f8:71:9b:33:
10:5a:c2:36:06:89:52:70:6b:10:c2:06:7a:e5:3d:
17:3f:7e:6a:f9:d9:35:1a:6f:a7:ad:2b:c4:a7:33:
1b:af:ef:7e:4d:19:14:23:47:17:44:35:5b:75:3c:
45:d1:17:e5:cb:67:4d:be:d1:6c:2c:25:a5:c8:0e:
74:05:fc:1e:c8:ef:5d:c7:1f:92:d9:1d:ba:60:ac:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4A:C4:BD:FA:5F:8E:6A:7C:F8:26:2A:F0:3B:96:57:5A:EF:21:71
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/v0rEvfpfjmp8-CYq8DuWV1rvIXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1c:3f:e1:67:83:4d:ad:e2:74:e4:2e:f5:a6:bb:80:af:c7:
1c:b6:83:08:27:10:cb:36:6b:14:20:66:ad:e3:40:4d:48:3e:
76:9c:3e:c4:41:94:37:3e:9d:89:f3:48:de:a4:97:53:b7:16:
01:09:20:69:b8:c4:79:ea:e6:86:dc:98:28:02:e3:e4:ba:34:
5c:36:ae:1d:91:a0:4f:81:61:40:28:dd:09:5c:af:ef:fb:76:
0a:ae:04:da:53:ec:c6:e1:21:07:f5:ac:86:d7:38:63:9d:f1:
bd:9e:31:d1:01:03:aa:a7:ff:03:c5:51:05:9d:ec:87:9e:0f:
1c:3b:2f:07:5c:7e:d4:27:40:e1:2a:29:7f:4c:c6:21:be:65:
e6:51:e5:a4:9b:b6:5f:33:f7:09:d3:4f:2c:56:e5:85:47:eb:
c3:e6:6d:c2:ed:4c:e9:6c:64:b7:30:a6:01:e5:51:ba:0d:56:
c5:f5:71:11:04:e2:2a:7a:1d:ee:a0:9d:bb:62:ef:d8:73:eb:
19:3b:9d:94:d9:0d:69:b8:fb:b1:af:5d:d3:27:62:b9:dd:8c:
d9:52:44:35:2f:33:43:6b:7b:3d:e6:d9:f8:fc:af:89:2d:9a:
b9:af:b1:a4:f7:72:db:54:96:99:64:fb:98:d0:3b:f3:dd:6a:
6f:c4:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org