Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vfvreJw3tlX2kT5fExY0D25g-dA.roa
File: vfvreJw3tlX2kT5fExY0D25g-dA.roa (raw, json)
Hash identifier: kp2wQ7VYNPX+mlospKUUwLo9e8Mc7FoH9llDNigwON8=
Subject key identifier: BD:FB:EB:78:9C:37:B6:55:F6:91:3E:5F:13:16:34:0F:6E:60:F9:D0
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B9B5D37
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vfvreJw3tlX2kT5fExY0D25g-dA.roa
Signing time: Sun 26 Jun 2022 12:37:22 +0000
ROA not before: Sun 26 Jun 2022 12:37:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194731319 (0xb9b5d37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 26 12:37:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdfbeb789c37b655f6913e5f1316340f6e60f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:fc:2f:4f:00:ef:91:a0:92:83:02:a6:4e:
27:f8:54:8a:da:d9:42:fe:57:b4:a2:ab:a0:58:4b:
3e:dd:3d:f6:26:4d:d4:18:ba:19:94:ec:f7:18:19:
50:1d:a5:9a:75:5a:b4:fc:e2:32:a1:e2:c8:a0:93:
e4:97:35:11:d5:66:1e:28:38:a9:c2:b4:83:eb:af:
fb:93:5a:46:d3:f0:3a:c7:81:f7:86:7f:2b:f4:81:
4d:8f:eb:51:b9:ad:be:4d:f6:f8:fb:29:79:ad:58:
c5:dd:b5:22:cb:33:c5:a8:c3:31:0d:68:3e:2d:7c:
df:1f:f4:af:ba:69:ef:48:a9:5a:ec:d3:65:5d:b9:
3a:cf:98:e6:2b:f1:c1:b6:a5:e0:c8:e5:a2:36:2d:
9e:e8:e5:4e:df:1b:96:e7:5d:97:6b:f1:7d:f3:b7:
73:79:eb:df:30:a5:2a:aa:55:46:d5:1e:59:c5:59:
3f:d9:e1:d0:06:af:5b:99:aa:16:b1:3d:08:c1:d2:
4e:f4:e1:21:f8:ed:24:1f:d7:55:72:ef:11:30:5a:
da:9d:c3:2c:01:ed:ba:b2:48:67:9e:3b:82:01:f8:
81:19:de:67:ff:c4:f0:24:ba:8c:aa:f9:f5:7b:16:
14:6d:41:2a:9c:14:23:3e:52:1a:c6:07:9f:ed:ad:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:EB:78:9C:37:B6:55:F6:91:3E:5F:13:16:34:0F:6E:60:F9:D0
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vfvreJw3tlX2kT5fExY0D25g-dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.141.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:09:e9:c6:18:4a:c1:21:40:b7:71:0b:3d:32:b4:6d:5a:31:
98:9d:d0:79:ee:8a:e2:65:5c:e2:38:d2:cc:63:28:82:bc:08:
c4:55:92:d0:90:91:53:41:c0:a7:2d:ff:40:bc:c6:12:2e:ca:
02:84:79:df:5e:93:5d:be:97:5e:c7:2d:ab:80:05:36:bc:00:
b6:43:3f:2d:0b:4c:c8:6e:6f:85:b7:77:31:7f:39:f0:4e:9e:
69:7e:de:9f:03:41:4b:41:40:d8:fe:9e:47:61:b6:dc:3c:2a:
d2:9f:9a:28:35:6e:18:b4:cd:30:fc:13:4f:8d:b7:81:f6:78:
20:71:e8:ac:65:40:93:86:ab:99:aa:4e:7c:93:dd:f2:02:93:
da:5b:f8:9a:d1:43:79:8a:fb:04:62:73:8a:56:5b:e0:07:bd:
ec:5b:21:1a:dc:d6:a9:61:a5:94:e8:6b:99:7d:a6:77:fe:f9:
0a:09:f5:ff:b6:0c:7e:29:e1:1c:ed:6b:70:da:c2:ce:fa:03:
c5:94:b6:06:14:8c:99:7f:12:b5:b8:ea:10:01:cf:76:62:74:
a1:a0:16:ba:f1:02:51:d1:37:e0:7e:08:73:fc:f1:e5:d6:40:
6a:ec:75:2c:c7:f9:37:d0:66:0c:b2:31:f5:79:78:2f:f9:80:
df:d8:81:f8
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIEC5tdNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDYy
NjEyMzcyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmRmYmViNzg5YzM3
YjY1NWY2OTEzZTVmMTMxNjM0MGY2ZTYwZjlkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJL4/C9PAO+RoJKDAqZOJ/hUitrZQv5XtKKroFhLPt099iZN
1Bi6GZTs9xgZUB2lmnVatPziMqHiyKCT5Jc1EdVmHig4qcK0g+uv+5NaRtPwOseB
94Z/K/SBTY/rUbmtvk32+Pspea1Yxd21IsszxajDMQ1oPi183x/0r7pp70ipWuzT
ZV25Os+Y5ivxwbal4MjlojYtnujlTt8bluddl2vxffO3c3nr3zClKqpVRtUeWcVZ
P9nh0AavW5mqFrE9CMHSTvThIfjtJB/XVXLvETBa2p3DLAHturJIZ547ggH4gRne
Z//E8CS6jKr59XsWFG1BKpwUIz5SGsYHn+2thwsCAwEAAaOCA48wggOLMB0GA1Ud
DgQWBBS9++t4nDe2VfaRPl8TFjQPbmD50DAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L3ZmdnJlSnczdGxYMmtUNWZFeFkwRDI1Zy1kQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AaMGCCsGAQUFBwEHAQH/BIIBkjCCAY4wggGKBAIAATCCAYIDBAFULuoDBAFWJrID
BAJWJrgDBAFWJsoDBAFWJvYDBAFZdDoDBAFZdEQDBAFZdFgDBABZdFwwDAMEAVl0
agMEAFl0bDAMAwQAWXR9AwQHWXQAMAwDBAFZdIIDBABZdIQDBABZdIcDBABZdIkD
BABZdI0wDAMEAll0lAMEAFl0lgMEAFl0oQMEAFl0owMEAFl0pgMEAVl0rAMEAFl0
rwMEAFl0sQMEAFl0szAMAwQDWXS4AwQAWXS6AwQAWXTBAwQBWXTSAwQAWXTaAwQB
WXT8AwQAWXT/AwQBWXUIAwQBWXUMAwQBWXUYMAwDBAJZdRwDBAFZdSADBAFZdSQw
DAMEAVl1RgMEBFl1QAMEAVl1VAMEAll1WDAMAwQBWXVeAwQCWXVgAwQBWXVmAwQA
WXVtMAwDBARZdXADBAFZdXQDBABZdYEDBAJZdYQDBAFZdY4wDAMEAVl1ngMEAll1
oAMEAFl1vgMEAFl11wMEAFl13gMEAVl15AMEAFl19QMEAFl1+jANBgkqhkiG9w0B
AQsFAAOCAQEAGgnpxhhKwSFAt3ELPTK0bVoxmJ3Qee6K4mVc4jjSzGMogrwIxFWS
0JCRU0HApy3/QLzGEi7KAoR5316TXb6XXsctq4AFNrwAtkM/LQtMyG5vhbd3MX85
8E6eaX7enwNBS0FA2P6eR2G23Dwq0p+aKDVuGLTNMPwTT423gfZ4IHHorGVAk4ar
mapOfJPd8gKT2lv4mtFDeYr7BGJzilZb4Ae97FshGtzWqWGllOhrmX2md/75Cgn1
/7YMfinhHO1rcNrCzvoDxZS2BhSMmX8StbjqEAHPdmJ0oaAWuvECUdE34H4Ic/zx
5dZAaux1LMf5N9BmDLIx9Xl4L/mA39iB+A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org