Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/y9KV_wtqPFkCIfnBjdmhSqru59Q.roa
File: y9KV_wtqPFkCIfnBjdmhSqru59Q.roa (raw, json)
Hash identifier: Wv2FatXEiO/ma8xV4KE/gfl7/lH9GjcdEyC+bSUYd80=
Subject key identifier: CB:D2:95:FF:0B:6A:3C:59:02:21:F9:C1:8D:D9:A1:4A:AA:EE:E7:D4
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182E3D037AD718F4473438F90E3654875D0
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/y9KV_wtqPFkCIfnBjdmhSqru59Q.roa
Signing time: Sun 28 Aug 2022 09:37:29 +0000
ROA not before: Sun 28 Aug 2022 09:37:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e3:d0:37:ad:71:8f:44:73:43:8f:90:e3:65:48:75:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 28 09:37:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbd295ff0b6a3c590221f9c18dd9a14aaaeee7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3a:80:03:08:ff:2e:e8:da:10:73:86:df:95:
7e:ca:35:42:dd:c0:93:4d:9c:7f:77:d9:e2:00:8b:
46:16:47:e0:73:c4:fe:1d:5a:99:e6:62:17:03:36:
6a:fa:25:a2:aa:24:d9:f0:a6:64:6f:68:09:49:d6:
63:c5:2f:59:4d:25:f9:e2:e5:d3:6e:0e:52:a1:c7:
c0:69:1d:b2:70:71:e0:06:9f:14:8b:73:40:91:74:
dc:72:1a:7d:36:47:01:8d:78:3a:4d:7f:4b:e5:97:
98:cb:a4:00:57:70:33:fa:8e:05:97:51:22:70:da:
3b:ef:43:ac:d2:f6:21:13:82:1a:0a:3d:43:5f:5e:
4b:3b:f7:a8:e2:b5:86:f9:be:d7:69:ab:86:82:53:
13:b1:d6:01:af:a6:b1:5f:33:f5:6c:fb:64:17:1c:
c2:83:e3:a3:f5:c0:e8:b4:04:31:74:0a:bf:ed:a9:
62:64:b8:66:03:02:8f:b9:86:d2:4e:39:cc:d5:eb:
2a:35:9d:71:d2:e6:33:be:7f:32:57:0b:fe:55:81:
24:3e:64:1c:63:19:64:84:ee:22:07:4b:fb:e5:29:
d1:3c:df:82:e8:82:e7:8d:ef:26:a8:09:c0:86:52:
1f:9a:ed:52:ed:50:34:11:73:28:64:f4:7f:a5:3b:
56:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D2:95:FF:0B:6A:3C:59:02:21:F9:C1:8D:D9:A1:4A:AA:EE:E7:D4
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/y9KV_wtqPFkCIfnBjdmhSqru59Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.92.0/24
89.116.108.0/24
89.116.125.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0/23
89.116.210.0/23
89.116.218.0/24
89.116.252.0/24
89.117.8.0/23
89.117.28.0-89.117.33.255
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.190.0/24
89.117.215.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:dd:81:45:62:15:a4:b0:de:c8:ba:52:70:ec:9e:9b:2f:8c:
5e:b9:cd:dc:b1:5b:b6:71:d0:3b:68:5d:9d:18:9a:02:e6:46:
94:72:42:d1:5a:86:52:61:5e:d6:a6:45:eb:9c:58:af:6f:d3:
4a:12:3f:c5:6e:91:d7:e2:3a:bc:85:23:32:7a:8d:40:be:b0:
22:4d:75:20:dd:01:f3:c2:5f:d1:a2:b4:43:ae:2d:cd:4d:79:
48:61:27:8c:9b:62:d5:63:2b:8b:dc:c1:cb:fd:b7:64:ab:9b:
4b:6a:71:5f:f4:bc:ac:13:33:14:f0:5f:64:e7:96:a7:6a:e7:
32:3e:0c:8d:21:d9:77:4a:90:de:fc:b0:6d:dc:3e:10:d9:e7:
44:64:02:cc:6f:71:ba:ad:2a:6b:cf:2f:91:ba:36:a9:07:f2:
82:79:11:e8:28:0f:53:2c:9b:62:6f:b2:e6:78:2a:1a:75:fa:
06:44:0c:ba:20:1e:44:e4:a3:4c:44:4a:db:34:1b:c6:98:da:
cf:d9:69:2c:e1:81:b8:02:60:f0:b3:7d:6e:d6:bf:8d:b9:c7:
2d:bf:5f:ae:6a:85:7f:0b:88:73:6d:e1:a8:c2:5a:9e:49:76:
98:ae:f4:6b:4b:de:84:03:04:07:89:87:ab:b2:23:3d:38:11:
64:c7:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org