Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/w2GPLr_v-b_2tNZyAo3vfZazWB8.roa
File: w2GPLr_v-b_2tNZyAo3vfZazWB8.roa (raw, json)
Hash identifier: pdY6FyDU7U4fIJmX25Bg8IaOv8ofLKNz98rqEtsm/sQ=
Subject key identifier: C3:61:8F:2E:BF:EF:F9:BF:F6:B4:D6:72:02:8D:EF:7D:96:B3:58:1F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09458A50
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/w2GPLr_v-b_2tNZyAo3vfZazWB8.roa
Signing time: Tue 01 Feb 2022 07:03:14 +0000
ROA not before: Tue 01 Feb 2022 07:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
89.117.216.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.117.168.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.72.0/22 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.212.0/22 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155552336 (0x9458a50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 1 07:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3618f2ebfeff9bff6b4d672028def7d96b3581f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:c1:6b:27:be:b9:d0:b0:13:a0:6d:fe:8f:
75:c2:af:c5:73:05:ab:17:cd:39:46:4d:d5:1d:d0:
b0:60:35:f8:59:d6:92:0f:aa:2c:55:3f:65:e3:2e:
0c:75:38:1f:00:f7:4c:47:1d:0b:4a:f7:2f:ba:c9:
70:34:58:5a:6b:a2:f7:2d:f9:6f:f3:3e:26:dc:3d:
4c:6b:19:ff:b5:67:7c:9a:45:d3:3b:f1:40:df:42:
6b:31:9a:8a:c7:d8:a5:42:9a:01:f8:a0:ee:38:1e:
ed:e8:63:cd:e5:be:70:be:61:fa:fa:cb:f0:9c:fa:
d5:1f:71:a6:d5:81:ad:cd:77:84:9d:db:9d:5c:2b:
d6:49:d0:23:23:7a:5c:db:10:86:9e:71:6d:b4:fb:
9a:91:40:f7:7a:5d:e6:d9:dc:0f:b3:4a:96:5d:9c:
cc:3e:99:41:5b:1c:29:3a:78:3c:3e:de:93:c1:b3:
be:0c:26:98:e6:18:96:7e:d0:25:57:dd:6b:e3:0c:
79:80:b6:49:ff:b0:d1:00:cc:d1:39:46:e4:0e:6e:
5b:c1:fd:c6:56:46:11:b1:e5:9b:b2:37:69:42:a3:
c4:9a:db:1d:f4:41:12:1c:f6:fd:d5:a9:c6:25:ce:
60:40:aa:20:11:a4:8f:ac:03:58:5e:aa:dc:b3:f8:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:8F:2E:BF:EF:F9:BF:F6:B4:D6:72:02:8D:EF:7D:96:B3:58:1F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/w2GPLr_v-b_2tNZyAo3vfZazWB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.182.0/23
86.38.202.0/23
86.38.246.0/23
89.116.52.0/23
89.116.58.0/23
89.116.68.0/23
89.116.72.0/22
89.116.88.0/23
89.116.106.0/23
89.116.126.0/23
89.116.130.0/23
89.116.146.0-89.116.149.255
89.116.164.0/23
89.116.172.0/23
89.116.180.0-89.116.185.255
89.116.210.0-89.116.215.255
89.116.242.0/23
89.116.246.0/23
89.117.6.0-89.117.9.255
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.64.0/22
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.94.0-89.117.99.255
89.117.102.0/23
89.117.112.0-89.117.117.255
89.117.132.0/22
89.117.142.0/23
89.117.158.0-89.117.163.255
89.117.168.0/23
89.117.216.0/23
89.117.226.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:a4:52:bd:d0:80:48:a6:33:b0:e5:c1:a8:74:0b:4f:2b:20:
1f:14:09:94:e1:2a:61:74:03:c4:4b:f0:f3:70:2f:09:b3:52:
22:e9:1f:20:ed:ca:dc:a0:1e:8d:65:7c:58:c8:ed:38:a5:61:
1f:17:ac:16:40:fb:fd:7c:92:00:68:31:6e:81:86:84:f7:c4:
fe:84:0d:7b:62:99:35:87:80:1e:1e:b6:d0:7b:47:b8:40:5b:
c4:b8:a0:89:9a:63:20:ce:13:71:b1:5c:63:f1:00:f0:4f:ec:
3e:16:d5:7d:1e:8c:0a:54:ec:fa:c2:a1:53:8d:4c:97:d4:9a:
d0:9f:cc:76:71:8c:9a:75:93:5f:6b:07:eb:46:13:9d:f8:ea:
2d:2a:56:ac:ff:77:0b:b6:ab:f7:3a:30:3a:e0:76:39:47:85:
ee:0b:5c:07:03:db:6e:4e:55:f9:1d:f0:fe:04:41:a5:f6:5e:
80:ad:d9:b7:f2:90:1e:31:4e:9b:49:e9:d3:56:99:45:8c:18:
9d:28:19:3c:0a:1a:57:d0:bc:0d:5a:c8:84:6b:ed:11:d8:4d:
f7:5d:56:32:c6:d8:10:16:12:d7:74:15:16:3a:de:e1:c3:50:
a1:a4:f1:d8:43:f8:b8:00:78:91:b2:0d:fd:f9:46:44:ae:e7:
da:64:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org