Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/x5BcxByiZpVNAIlZM7Ls67DF_VI.roa
File: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (raw, json)
Hash identifier: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=
Subject key identifier: C7:90:5C:C4:1C:A2:66:95:4D:00:89:59:33:B2:EC:EB:B0:C5:FD:52
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 0195FB98CC816900C28EBFAAFA0B17CC2A19
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/x5BcxByiZpVNAIlZM7Ls67DF_VI.roa
Signing time: Thu 03 Apr 2025 12:20:49 +0000
ROA not before: Thu 03 Apr 2025 12:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207040
IP address blocks: 185.163.132.0/22 maxlen: 24
185.163.134.0/24 maxlen: 24
185.163.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:98:cc:81:69:00:c2:8e:bf:aa:fa:0b:17:cc:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Apr 3 12:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7905cc41ca266954d00895933b2ecebb0c5fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:79:0e:0d:87:dc:2c:a0:8d:7b:a2:0e:df:
09:2b:b7:3a:be:99:e5:53:f0:d8:96:83:00:e4:27:
8c:40:77:61:3e:9c:6f:ad:23:24:97:09:d7:04:01:
a8:f2:b5:84:32:06:9e:55:0d:66:62:95:4d:d7:60:
f3:51:27:1a:b0:be:31:e8:3f:de:8e:83:1b:d3:c9:
10:10:3f:32:de:d5:2a:1e:de:da:9a:f0:e7:0b:75:
cd:01:c9:1b:54:5b:63:75:58:35:a6:a5:d2:e5:31:
a5:be:97:93:00:c8:a0:b3:58:ae:6f:ac:75:7d:ee:
a3:80:79:a2:13:e6:24:75:60:bf:3f:b2:f6:be:ce:
8a:70:09:b8:5a:72:be:57:b3:fc:04:a6:b7:35:33:
ce:27:63:b9:59:b2:bb:51:81:0f:7f:a4:d2:99:7c:
80:f1:df:cf:ce:bf:5f:2e:ff:6d:bc:94:b3:ba:8e:
9b:65:3b:fd:34:53:2e:86:df:8b:ae:a6:b2:62:a5:
3c:b3:89:5f:36:e1:b3:d4:c9:4f:bb:11:03:48:37:
de:ed:c9:af:b2:0c:2a:ad:83:ad:9f:07:a1:a7:e0:
75:cf:b6:c3:50:c1:e0:8d:ce:c4:d0:e3:e7:93:16:
e9:f8:bc:b5:43:ba:c6:f0:24:2c:5c:5d:01:9b:79:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:5C:C4:1C:A2:66:95:4D:00:89:59:33:B2:EC:EB:B0:C5:FD:52
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/x5BcxByiZpVNAIlZM7Ls67DF_VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.132.0/22
Signature Algorithm: sha256WithRSAEncryption
63:68:fe:c4:1a:19:3e:60:bf:0e:14:8c:b7:be:03:97:c9:3b:
fc:11:98:85:44:55:6d:f8:11:9a:ac:ef:33:3b:ba:cc:d7:64:
5c:61:a6:6f:f2:cb:65:e1:50:ba:43:bc:70:a2:5d:ab:7a:92:
79:bf:2d:24:1e:0c:f5:fe:dd:27:fc:ea:92:fd:0b:7b:7c:28:
71:6e:17:bf:11:e5:12:15:0e:46:51:8e:10:19:11:b1:4c:df:
8a:0f:0c:16:1f:5e:08:c9:37:db:18:aa:90:15:8b:a8:3b:bb:
41:fa:60:91:b4:dd:d8:ee:12:cd:8a:a6:76:6a:f5:1b:61:bf:
39:ec:1d:4a:96:3c:25:6b:7e:97:a0:2d:9d:b4:ea:3a:ab:30:
b6:a2:9c:12:7d:ad:c0:e5:68:5a:db:1c:f9:5f:4a:62:5f:25:
88:40:be:6f:30:b6:9f:5d:42:71:32:12:59:d2:48:7a:db:fb:
43:3f:57:f5:1a:22:c6:c3:81:ff:17:a4:da:a9:88:f9:2a:14:
04:ae:ad:2e:c6:1e:c5:e3:78:29:4e:17:7a:b1:f2:b8:6d:b3:
49:c4:b3:ee:84:f8:50:e4:0d:07:eb:93:4f:60:9d:d0:73:08:
a2:0f:ce:aa:25:d4:33:22:8f:b5:08:a9:21:42:bc:53:d2:81:
6f:78:44:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX7mMyBaQDCjr+q+gsXzCoZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWEyNzQ0NDU4MjZlM2Q3OTVjM2VkMThjMjc3MDBlZWFj
MWNhNjIwHhcNMjUwNDAzMTIyMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzkwNWNjNDFjYTI2Njk1NGQwMDg5NTkzM2IyZWNlYmIwYzVmZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE95Dg2H3CygjXuiDt8JK7c6vpnl
U/DYloMA5CeMQHdhPpxvrSMklwnXBAGo8rWEMgaeVQ1mYpVN12DzUScasL4x6D/e
joMb08kQED8y3tUqHt7amvDnC3XNAckbVFtjdVg1pqXS5TGlvpeTAMigs1iub6x1
fe6jgHmiE+YkdWC/P7L2vs6KcAm4WnK+V7P8BKa3NTPOJ2O5WbK7UYEPf6TSmXyA
8d/Pzr9fLv9tvJSzuo6bZTv9NFMuht+LrqayYqU8s4lfNuGz1MlPuxEDSDfe7cmv
sgwqrYOtnwehp+B1z7bDUMHgjc7E0OPnkxbp+Ly1Q7rG8CQsXF0Bm3n0twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMeQXMQcomaVTQCJWTOy7Ouwxf1SMB8GA1UdIwQY
MBaAFNyqJ0RFgm49eVw+0YwncA7qwcpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTIt
OWE4MjQzZTg0ZTU0LzEveDVCY3hCeWlacFZOQUlsWk03THM2N0RGX1ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xODgyMTgtOWVlNy00MGNjLThkMTItOWE4MjQzZTg0ZTU0
LzEvM0tvblJFV0NiajE1WEQ3UmpDZHdEdXJCeW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaOEMA0G
CSqGSIb3DQEBCwUAA4IBAQBjaP7EGhk+YL8OFIy3vgOXyTv8EZiFRFVt+BGarO8z
O7rM12RcYaZv8stl4VC6Q7xwol2repJ5vy0kHgz1/t0n/OqS/Qt7fChxbhe/EeUS
FQ5GUY4QGRGxTN+KDwwWH14IyTfbGKqQFYuoO7tB+mCRtN3Y7hLNiqZ2avUbYb85
7B1Kljwla36XoC2dtOo6qzC2opwSfa3A5Wha2xz5X0piXyWIQL5vMLafXUJxMhJZ
0kh62/tDP1f1GiLGw4H/F6TaqYj5KhQErq0uxh7F43gpThd6sfK4bbNJxLPuhPhQ
5A0H65NPYJ3QcwiiD86qJdQzIo+1CKkhQrxT0oFveES5
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net