Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wBb5IlVJk8azl48DLf9CXRPn2pc.roa
File: wBb5IlVJk8azl48DLf9CXRPn2pc.roa (raw, json)
Hash identifier: Y/aHmFiRJ5xj3DbGb6PPL4PjfCfy5YhFw8OxHozN0/Q=
Subject key identifier: C0:16:F9:22:55:49:93:C6:B3:97:8F:03:2D:FF:42:5D:13:E7:DA:97
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B47A49C
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wBb5IlVJk8azl48DLf9CXRPn2pc.roa
Signing time: Thu 09 Jun 2022 18:37:02 +0000
ROA not before: Thu 09 Jun 2022 18:37:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.102.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.106.0/23 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.126.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.148.0/23 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189244572 (0xb47a49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 9 18:37:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c016f922554993c6b3978f032dff425d13e7da97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:48:1c:2c:3b:27:5e:f1:b8:5f:60:1e:2d:
aa:0e:87:f8:32:3e:25:00:39:db:f7:83:1f:c2:f7:
0b:7e:14:d7:c8:47:a9:b9:f9:fd:6c:af:a2:9e:45:
b8:17:63:cd:21:6f:d1:07:39:d1:88:f0:a4:ed:7b:
a0:09:1c:38:b0:d8:da:8d:65:ad:cd:5e:f0:a4:8a:
3f:32:75:04:22:52:51:93:d4:98:40:f1:cb:d1:ee:
95:70:c4:a0:c1:25:7d:f6:16:57:fb:64:aa:98:68:
b1:b7:2a:19:eb:7a:ca:dc:fa:4c:4b:08:78:8f:3c:
0c:ac:88:56:9b:15:6b:5d:2e:70:a3:03:c8:5b:87:
b1:e0:1b:11:0f:02:df:49:3d:75:29:ed:87:dd:41:
81:90:08:38:1b:17:bb:9d:1c:3c:5c:75:5f:52:9f:
95:19:d0:27:65:5c:f3:93:ef:77:2f:b4:18:ce:c0:
d0:ae:67:53:6c:32:41:48:47:92:d2:70:fa:ea:04:
7f:fb:15:44:26:19:5c:36:88:29:50:00:af:0b:9e:
65:73:32:36:d6:3e:59:b8:17:d9:25:85:f3:2f:f2:
e7:35:7a:32:1a:d7:5c:d4:b1:ea:3b:01:5b:35:f2:
47:a7:66:0a:f5:f6:81:88:ba:87:1a:ca:d4:ac:8b:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:F9:22:55:49:93:C6:B3:97:8F:03:2D:FF:42:5D:13:E7:DA:97
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wBb5IlVJk8azl48DLf9CXRPn2pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.202.0/23
89.116.54.0/24
89.116.70.0/24
89.116.88.0/23
89.116.99.0/24
89.116.103.0/24
89.116.106.0/23
89.116.112.0/23
89.116.115.0/24
89.116.126.0/23
89.116.130.0/23
89.116.135.0/24
89.116.141.0/24
89.116.148.0/23
89.116.156.0/24
89.116.158.0/24
89.116.161.0/24
89.116.171.0/24
89.116.175.0/24
89.116.177.0/24
89.116.193.0/24
89.116.203.0/24
89.116.208.0/22
89.116.218.0/24
89.116.220.0/23
89.116.223.0/24
89.116.233.0/24
89.116.252.0/23
89.116.255.0/24
89.117.12.0/23
89.117.24.0/23
89.117.28.0-89.117.33.255
89.117.68.0/24
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.96.0/22
89.117.102.0/23
89.117.109.0/24
89.117.112.0/22
89.117.129.0-89.117.130.255
89.117.132.0/22
89.117.142.0/23
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
76:91:b0:32:fa:6f:3e:fc:70:21:2c:19:51:a3:b0:b8:99:16:
14:15:3e:ab:81:9b:86:df:5a:c4:fe:4a:e6:e0:c4:f6:5e:d2:
b9:4c:7e:c9:e8:62:c4:f8:6b:b5:37:b2:0a:0c:59:78:8b:71:
40:94:af:6a:53:60:86:c7:5d:98:c8:5d:18:d8:16:47:6b:1b:
dd:93:4c:fa:04:12:bf:bd:e9:f5:30:85:e3:e5:57:7b:1b:42:
85:94:39:8a:27:ab:30:96:c9:39:d2:1b:7a:2b:a1:f7:61:3d:
8a:0e:41:e0:73:9f:7d:be:0f:df:7f:5d:c3:cc:4b:d1:97:64:
dc:e1:93:1b:2b:b6:a3:b4:78:47:55:68:97:68:c1:21:82:45:
22:a6:7f:b0:66:9e:3d:0c:3e:9d:83:bf:75:01:3c:63:e2:db:
8e:b1:2a:41:1b:3f:97:b1:d8:96:e1:9b:2c:76:4e:ff:7e:65:
0d:e7:70:5e:ef:70:24:e4:99:b5:4c:2d:d5:d2:f4:a2:c7:44:
85:09:bd:2f:b7:a6:d5:12:98:42:86:e8:e5:89:fb:92:3f:5a:
5b:18:66:f2:77:ae:7a:a5:70:74:eb:b3:d3:30:cd:3d:fa:60:
79:69:b6:e0:8c:e3:79:19:82:ca:7a:5f:9e:2d:2b:1f:58:fe:
60:15:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:19:22 2025 by rpki-client