Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wLEcPLKsczoi7HYn3dq2wnB-iMo.roa
File: wLEcPLKsczoi7HYn3dq2wnB-iMo.roa (raw, json)
Hash identifier: WPcVuH1akRm5uPxPAhn+Xcu2e4+OlbGTtUKM8dd+oto=
Subject key identifier: C0:B1:1C:3C:B2:AC:73:3A:22:EC:76:27:DD:DA:B6:C2:70:7E:88:CA
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182EEBD0CDD8B24FEDA4A73FB5D921B31C8
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wLEcPLKsczoi7HYn3dq2wnB-iMo.roa
Signing time: Tue 30 Aug 2022 12:32:23 +0000
ROA not before: Tue 30 Aug 2022 12:32:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:bd:0c:dd:8b:24:fe:da:4a:73:fb:5d:92:1b:31:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 30 12:32:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0b11c3cb2ac733a22ec7627dddab6c2707e88ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:49:bc:f5:7b:b1:6a:2d:a7:67:9d:d8:b4:
78:1d:b1:85:7e:7c:33:de:39:56:81:d3:c1:5f:f3:
88:95:2d:c9:f3:71:c7:3a:35:a3:20:eb:26:43:c1:
59:c3:ad:8a:00:00:ad:e8:89:c3:8e:de:85:22:1d:
28:d5:f4:4f:2d:dc:9c:8b:92:28:35:aa:44:ca:2f:
02:f2:11:9f:27:b3:ce:a8:14:fa:97:a9:04:98:d5:
89:f3:9c:7d:ae:90:62:c8:41:75:c4:48:f2:69:d9:
f3:3f:9a:27:e1:c8:83:76:39:53:c0:37:7a:6b:8d:
19:6c:20:96:7e:18:93:52:3b:aa:e9:5b:c0:0f:65:
9e:07:69:2c:e1:4b:e4:70:6a:44:88:57:a0:0b:0b:
0e:24:6e:4d:9d:1f:21:e1:4b:0a:04:75:b1:af:54:
4e:8c:f1:36:a6:96:00:07:d6:36:c8:96:b5:2e:ac:
84:06:31:85:95:0f:46:ca:83:45:cd:ec:64:ed:cc:
b4:eb:c1:56:26:00:68:87:43:6d:05:09:4d:56:30:
b4:f0:6b:d6:5d:98:41:f4:fc:87:a9:d4:1a:8f:3e:
74:09:0d:99:e7:f7:a9:a0:c7:d3:d5:2e:9b:b8:10:
83:eb:86:01:ce:b5:22:a2:e9:db:8e:0d:6a:df:c7:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B1:1C:3C:B2:AC:73:3A:22:EC:76:27:DD:DA:B6:C2:70:7E:88:CA
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wLEcPLKsczoi7HYn3dq2wnB-iMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.108.0/24
89.116.125.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0/23
89.116.210.0/23
89.116.218.0/24
89.117.8.0/23
89.117.28.0-89.117.33.255
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.190.0/24
89.117.215.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8e:eb:07:5d:ff:1e:37:39:64:08:5e:ec:ab:d9:12:27:a8:
fe:22:2f:44:44:e5:97:bf:a7:66:c4:97:b4:0b:d3:b7:fd:ae:
fd:4a:1f:4a:68:09:43:6f:be:ce:58:17:54:d5:0a:7d:a0:70:
20:b3:d5:ef:65:c7:1b:26:ad:eb:c2:30:4d:d6:50:70:be:f9:
84:54:59:6a:fa:0f:a7:4e:8b:56:c5:ff:e8:18:d6:67:eb:f7:
e4:47:ee:9e:18:c4:ec:bd:90:ac:ad:f1:45:be:c0:ee:36:7e:
bb:49:b2:e4:cb:9e:54:74:88:d4:cc:89:32:8f:8c:19:1e:a0:
ee:27:2d:8a:af:6b:ef:2d:0d:0e:d0:81:c5:18:6b:c7:d4:1e:
5d:7e:95:15:ad:51:e3:eb:c2:cd:7a:7d:3d:ad:6f:74:f6:7a:
71:a1:87:f2:11:1f:87:be:79:26:8b:a4:1d:02:6f:06:8b:8c:
49:16:8f:a8:13:2e:cf:4a:df:3e:22:4b:68:d6:93:10:b4:9b:
69:b4:d8:30:69:ef:e8:85:fd:cf:30:1d:09:fa:ec:58:b9:9c:
4f:ab:22:21:de:61:a7:af:f9:84:b0:d8:36:e3:40:6a:20:50:
c5:1f:36:04:0c:c8:c5:3b:1a:f7:73:85:a6:f4:82:32:ef:04:
5c:9f:31:1b
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAYLuvQzdiyT+2kpz+12SGzHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODMwMTIzMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGIxMWMzY2IyYWM3MzNhMjJlYzc2MjdkZGRhYjZjMjcwN2U4OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ItJvPV7sWotp2ed2LR4HbGFfnwz
3jlWgdPBX/OIlS3J83HHOjWjIOsmQ8FZw62KAACt6InDjt6FIh0o1fRPLdyci5Io
NapEyi8C8hGfJ7POqBT6l6kEmNWJ85x9rpBiyEF1xEjyadnzP5on4ciDdjlTwDd6
a40ZbCCWfhiTUjuq6VvAD2WeB2ks4UvkcGpEiFegCwsOJG5NnR8h4UsKBHWxr1RO
jPE2ppYAB9Y2yJa1LqyEBjGFlQ9GyoNFzexk7cy068FWJgBoh0NtBQlNVjC08GvW
XZhB9PyHqdQajz50CQ2Z5/epoMfT1S6buBCD64YBzrUiounbjg1q38cIywIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFMCxHDyyrHM6Iux2J93atsJwfojKMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvd0xFY1BMS3Njem9pN0hZbjNkcTJ3bkItaU1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAFU
LuoDBAFWJrIDBAJWJrgDBAFWJsoDBAFWJvYDBAFZdDoDBABZdGwDBABZdH0DBABZ
dIQDBABZdIcDBABZdJYDBABZdKEDBABZdKMDBABZdKYDBAFZdKwDBABZdK8DBABZ
dLEDBAFZdLgDBAFZdNIDBABZdNoDBAFZdQgwDAMEAll1HAMEAVl1IAMEA1l1SAME
AVl1VAMEAll1WAMEAVl1XgMEAFl1bQMEAVl1dAMEAFl1gQMEAll1hAMEAVl1jgME
AFl1vgMEAFl11wMEAVl15AMEAFl19QMEAFl1+jANBgkqhkiG9w0BAQsFAAOCAQEA
KI7rB13/Hjc5ZAhe7KvZEieo/iIvRETll7+nZsSXtAvTt/2u/UofSmgJQ2++zlgX
VNUKfaBwILPV72XHGyat68IwTdZQcL75hFRZavoPp06LVsX/6BjWZ+v35EfunhjE
7L2QrK3xRb7A7jZ+u0my5MueVHSI1MyJMo+MGR6g7ictiq9r7y0NDtCBxRhrx9Qe
XX6VFa1R4+vCzXp9Pa1vdPZ6caGH8hEfh755JoukHQJvBouMSRaPqBMuz0rfPiJL
aNaTELSbabTYMGnv6IX9zzAdCfrsWLmcT6siId5hp6/5hLDYNuNAaiBQxR82BAzI
xTsa93OFpvSCMu8EXJ8xGw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org