Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/yQDzF6ghrLGDx2CFOUcmcy0E14Y.roa
File: yQDzF6ghrLGDx2CFOUcmcy0E14Y.roa (raw, json)
Hash identifier: VjV+S71g1Jw1dlq4D0R/Q922Hd9WQLwIFxP7LH8Da5M=
Subject key identifier: C9:00:F3:17:A8:21:AC:B1:83:C7:60:85:39:47:26:73:2D:04:D7:86
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182A598E9B420219EB7224AD07EC8FD45AD
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/yQDzF6ghrLGDx2CFOUcmcy0E14Y.roa
Signing time: Tue 16 Aug 2022 07:40:38 +0000
ROA not before: Tue 16 Aug 2022 07:40:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.106.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:98:e9:b4:20:21:9e:b7:22:4a:d0:7e:c8:fd:45:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 16 07:40:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c900f317a821acb183c76085394726732d04d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:e0:6b:a5:64:76:e2:e5:2c:dd:84:66:a5:
3b:52:c1:ee:6f:8b:88:c1:67:c0:4e:58:a6:44:1a:
c1:49:3d:73:6b:aa:30:80:e0:cc:d2:0d:b9:95:27:
31:8c:32:b5:32:c9:96:1e:5f:c9:a8:0b:8f:98:bf:
4c:dc:07:64:35:a8:4e:4c:c0:86:ea:01:79:d7:6d:
f1:44:43:65:d5:9e:24:c1:65:65:6a:d4:f6:6b:b0:
5f:53:0a:3e:d0:f5:4b:a4:3e:cc:a8:d1:f2:c3:50:
b7:fe:50:68:13:cc:f6:0e:9f:f8:4b:f7:1f:bd:af:
3f:b0:60:2f:60:6f:97:3f:3a:f8:53:78:c0:d8:73:
0f:6e:db:50:67:47:93:c5:e5:ac:28:8e:91:29:75:
8b:31:36:ef:72:b4:3e:75:ef:44:c8:ab:b3:2e:76:
97:78:06:27:93:ee:e3:39:d7:31:2d:70:22:98:76:
f6:0c:0a:d8:6c:cd:88:73:53:ee:88:19:13:f1:79:
b0:95:44:14:f7:f8:99:49:f3:e0:26:70:6b:a6:56:
97:24:b3:48:23:2f:58:5f:d7:66:99:13:9a:0f:e7:
ba:c3:c6:3a:db:a3:ea:77:bf:d0:1a:80:ce:92:ca:
5c:b9:38:75:e9:cb:f8:a2:67:f1:ab:11:4f:5e:e0:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:00:F3:17:A8:21:AC:B1:83:C7:60:85:39:47:26:73:2D:04:D7:86
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/yQDzF6ghrLGDx2CFOUcmcy0E14Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.88.0/23
89.116.92.0/24
89.116.106.0-89.116.108.255
89.116.125.0-89.116.127.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.148.0-89.116.150.255
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.184.0-89.116.186.255
89.116.210.0/23
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.8.0/23
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.36.0/23
89.117.70.0-89.117.79.255
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.102.0/23
89.117.109.0/24
89.117.112.0-89.117.117.255
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.158.0/23
89.117.190.0/24
89.117.215.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
37:62:6d:da:0f:d9:4f:63:c8:44:54:ef:2f:e4:df:9e:7c:8d:
7b:7e:2c:1a:26:c3:bb:2d:33:7e:29:dd:b2:8e:85:df:9d:db:
cd:c6:3d:92:b3:63:40:ce:4c:a7:71:c2:84:fa:a3:d0:2d:c6:
7d:13:e1:e5:35:db:3e:a9:fe:83:2e:c2:a5:fd:3d:dc:10:29:
6c:0f:2c:44:e6:04:a5:8b:f7:15:70:dd:35:89:7a:f9:16:b7:
15:42:59:2e:29:5b:99:25:ea:1e:40:41:9a:63:5e:87:d4:db:
58:6d:53:24:b4:6f:0e:1f:a5:12:48:b5:df:46:e8:57:27:c2:
87:19:02:f5:b5:f8:59:77:b1:93:2a:6c:19:d7:c7:89:f3:42:
3e:89:5e:50:eb:99:2b:42:db:b8:d2:c1:0d:35:f5:63:bd:f5:
12:9f:48:43:b9:c9:d1:8f:cf:e5:4b:ac:19:f8:0f:f8:59:bb:
ce:4c:c3:10:a8:2b:f3:da:1f:90:9d:4a:c2:60:13:ba:65:23:
55:5b:66:dc:d3:f0:c2:bf:7c:fa:b7:c4:10:6d:8f:27:da:71:
8e:62:5d:af:6b:8b:8b:91:25:57:73:f4:35:62:07:44:6d:6b:
ef:04:b7:7e:b2:f7:f3:44:35:41:42:f6:70:c8:10:5a:31:e4:
01:be:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org