Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xtNL2-HhzlevQjaRao_Zpjz8NC8.roa
File: xtNL2-HhzlevQjaRao_Zpjz8NC8.roa (raw, json)
Hash identifier: ZnWOsNQs+mZGl1hWDKKVKvaaQS9SrXf1EP1+tzuZcQg=
Subject key identifier: C6:D3:4B:DB:E1:E1:CE:57:AF:42:36:91:6A:8F:D9:A6:3C:FC:34:2F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D5B6976E5BB5FC4938FEE28F8798606C
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xtNL2-HhzlevQjaRao_Zpjz8NC8.roa
Signing time: Fri 14 Oct 2022 08:57:36 +0000
ROA not before: Fri 14 Oct 2022 08:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 84.46.171.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
84.46.240.0/20 maxlen: 20
84.46.234.0/23 maxlen: 23
84.46.236.0/22 maxlen: 22
86.38.246.0/23 maxlen: 23
86.38.242.0/23 maxlen: 23
86.38.241.0/24 maxlen: 24
86.38.248.0/21 maxlen: 21
86.38.189.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
86.38.204.0/23 maxlen: 23
86.38.214.0/24 maxlen: 24
86.38.225.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.32.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.24.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
86.38.178.0/23 maxlen: 23
86.38.184.0/23 maxlen: 23
86.38.186.0/23 maxlen: 23
86.38.180.0/23 maxlen: 23
86.38.182.0/23 maxlen: 23
89.117.228.0/23 maxlen: 23
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
89.117.68.0/24 maxlen: 24
89.117.70.0/23 maxlen: 23
89.117.72.0/21 maxlen: 21
89.117.80.0/22 maxlen: 22
89.117.84.0/23 maxlen: 23
89.117.87.0/24 maxlen: 24
89.117.88.0/22 maxlen: 22
89.117.94.0/23 maxlen: 23
89.117.96.0/22 maxlen: 22
89.117.101.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.116.0/23 maxlen: 23
89.117.118.0/24 maxlen: 24
89.117.16.0/21 maxlen: 21
89.117.12.0/23 maxlen: 23
89.117.24.0/23 maxlen: 23
89.117.28.0/22 maxlen: 22
89.117.27.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
89.117.36.0/23 maxlen: 23
89.117.32.0/23 maxlen: 23
89.117.40.0/21 maxlen: 21
89.117.48.0/20 maxlen: 20
89.117.64.0/22 maxlen: 22
89.117.188.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.216.0/23 maxlen: 23
89.117.222.0/24 maxlen: 24
89.117.226.0/23 maxlen: 23
89.117.124.0/24 maxlen: 24
89.117.120.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.117.132.0/22 maxlen: 22
89.117.139.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
89.117.142.0/23 maxlen: 23
89.117.144.0/21 maxlen: 21
89.117.158.0/23 maxlen: 23
89.117.157.0/24 maxlen: 24
89.117.160.0/22 maxlen: 22
89.117.164.0/24 maxlen: 24
89.117.168.0/23 maxlen: 23
89.117.167.0/24 maxlen: 24
89.117.171.0/24 maxlen: 24
89.117.172.0/22 maxlen: 22
89.116.108.0/24 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 23
89.116.115.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.130.0/23 maxlen: 23
89.116.126.0/23 maxlen: 23
89.116.132.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.144.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.146.0/23 maxlen: 23
89.116.148.0/23 maxlen: 23
89.116.150.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.52.0/23 maxlen: 23
89.116.58.0/23 maxlen: 23
89.116.64.0/22 maxlen: 22
89.116.70.0/24 maxlen: 24
89.116.68.0/23 maxlen: 23
89.116.80.0/21 maxlen: 21
89.116.88.0/23 maxlen: 23
89.116.92.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.224.0/21 maxlen: 21
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.237.0/24 maxlen: 24
89.116.239.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.5.0/24 maxlen: 24
89.117.11.0/24 maxlen: 24
89.117.6.0/23 maxlen: 23
89.117.8.0/23 maxlen: 23
89.116.163.0/24 maxlen: 24
89.116.164.0/23 maxlen: 23
89.116.166.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.169.0/24 maxlen: 24
89.116.172.0/23 maxlen: 23
89.116.168.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.184.0/23 maxlen: 23
89.116.186.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.116.198.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.210.0/23 maxlen: 23
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.24.0/21 maxlen: 24
89.116.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:b6:97:6e:5b:b5:fc:49:38:fe:e2:8f:87:98:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 14 08:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6d34bdbe1e1ce57af4236916a8fd9a63cfc342f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:be:77:f8:09:ac:10:8b:86:78:33:7a:a8:
d0:81:d0:57:66:07:0a:a6:a6:81:c7:aa:97:6e:d0:
b7:83:46:2b:b9:bb:e8:2a:07:36:28:a5:41:5b:83:
9c:ef:37:c9:13:f0:96:2d:08:6f:44:b3:8a:4f:94:
ed:1d:10:9d:3d:8a:21:bb:5b:d4:c8:3c:9e:74:52:
27:45:5c:cf:3a:5b:e6:2b:e5:2b:6c:26:fe:e9:df:
99:15:37:d9:43:8b:6c:4a:c7:f7:d1:f3:1c:72:b5:
72:ca:95:81:64:38:54:9a:dc:1f:5c:cb:07:14:e3:
4c:e0:80:b3:73:c4:15:42:bd:56:78:9e:b9:4a:9f:
bf:69:0a:42:91:07:47:4b:d2:58:6f:51:b7:1b:00:
97:bf:26:69:e0:30:ed:74:af:7f:40:2e:06:89:db:
9d:ac:f8:16:58:af:60:d3:6d:e0:51:14:29:aa:c8:
97:b5:88:20:67:19:86:fd:c8:29:e0:25:98:0f:92:
ef:04:4b:3e:e9:e1:e4:02:3f:f6:57:53:95:b0:7e:
ea:9d:46:4e:f1:25:94:67:eb:19:e5:84:de:fa:fc:
df:cf:d4:ad:0d:3c:cf:79:9d:dd:8c:c9:c9:c5:02:
f5:c5:0b:9f:18:95:ac:61:ea:4a:ea:1a:2b:8f:64:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D3:4B:DB:E1:E1:CE:57:AF:42:36:91:6A:8F:D9:A6:3C:FC:34:2F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xtNL2-HhzlevQjaRao_Zpjz8NC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.183.0/24
84.46.171.0/24
84.46.234.0-84.46.255.255
86.38.7.0/24
86.38.24.0/24
86.38.32.0/24
86.38.37.0/24
86.38.151.0/24
86.38.156.0/24
86.38.175.0/24
86.38.177.0-86.38.187.255
86.38.189.0-86.38.190.255
86.38.202.0-86.38.205.255
86.38.214.0/24
86.38.225.0/24
86.38.241.0-86.38.243.255
86.38.246.0-86.38.255.255
89.116.24.0-89.116.39.255
89.116.52.0-89.116.54.255
89.116.58.0/23
89.116.64.0-89.116.70.255
89.116.80.0-89.116.89.255
89.116.92.0/24
89.116.99.0-89.116.100.255
89.116.103.0/24
89.116.106.0-89.116.108.255
89.116.112.0/23
89.116.115.0/24
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.140.0/23
89.116.144.0/24
89.116.146.0-89.116.150.255
89.116.154.0/24
89.116.163.0-89.116.166.255
89.116.168.0/23
89.116.171.0-89.116.173.255
89.116.179.0/24
89.116.184.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.198.0/24
89.116.203.0/24
89.116.208.0/22
89.116.220.0/23
89.116.223.0-89.116.231.255
89.116.233.0/24
89.116.237.0/24
89.116.239.0/24
89.116.248.0/24
89.116.250.0/24
89.116.252.0/23
89.116.255.0/24
89.117.5.0-89.117.9.255
89.117.11.0-89.117.13.255
89.117.16.0-89.117.25.255
89.117.27.0-89.117.33.255
89.117.36.0-89.117.38.255
89.117.40.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.87.0-89.117.91.255
89.117.94.0-89.117.99.255
89.117.101.0/24
89.117.111.0-89.117.118.255
89.117.120.0-89.117.124.255
89.117.126.0/24
89.117.129.0-89.117.130.255
89.117.132.0-89.117.136.255
89.117.139.0/24
89.117.142.0-89.117.151.255
89.117.157.0-89.117.164.255
89.117.167.0-89.117.169.255
89.117.171.0-89.117.175.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b4:55:f3:53:35:2a:dc:70:c4:d5:08:2c:02:57:32:a7:d0:
b5:c2:5e:77:9b:79:bc:0f:12:7a:74:58:53:18:63:28:ed:8e:
83:be:5a:23:f5:74:5d:54:d8:d0:d2:4d:b7:9e:2e:a6:8e:3b:
96:67:dc:8b:59:a0:a7:f4:0a:b4:09:94:2c:e6:7a:c7:95:a3:
f6:51:de:ae:2a:f3:2d:e8:15:c3:96:d9:cc:3d:10:52:4e:3c:
2c:71:91:75:8b:db:5b:d2:24:4f:c1:26:ab:ff:ad:f9:a4:f9:
18:5a:a2:c5:6c:a2:ed:a6:f2:d9:2f:8a:01:7a:9e:d4:a4:53:
64:00:ad:4f:f5:7c:af:f3:b3:10:de:b0:73:20:2f:7a:c7:e2:
b8:ce:27:cf:2a:c4:b2:ed:9b:40:83:60:eb:73:0f:f0:94:6d:
da:6f:b6:91:49:28:f4:f0:84:30:27:f1:5e:91:e2:b1:7d:e6:
b9:64:2c:4a:4a:18:a3:58:52:0e:8d:92:9e:e9:42:e2:6e:eb:
3f:17:30:9b:ba:a3:47:27:84:da:31:0b:05:cc:bb:a5:76:25:
87:47:f1:d5:73:a0:6e:91:de:19:e4:5e:9b:1d:78:de:10:e2:
db:1b:4e:4a:f8:4c:17:7a:b7:b6:ff:95:d3:58:4a:d5:29:4f:
ec:9c:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org