Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/bvpAWI3imyZje-_MOSm6L6sG9Js.roa
File: bvpAWI3imyZje-_MOSm6L6sG9Js.roa (raw, json)
Hash identifier: WmThU3JtNLszASgCiPaxM1/V3NrOKkNHqfgWPLLslxo=
Subject key identifier: 6E:FA:40:58:8D:E2:9B:26:63:7B:EF:CC:39:29:BA:2F:AB:06:F4:9B
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 0193F33F319957CD6FB3CC60DE80962FAD3B
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/bvpAWI3imyZje-_MOSm6L6sG9Js.roa
Signing time: Mon 23 Dec 2024 11:20:25 +0000
ROA not before: Mon 23 Dec 2024 11:20:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212318
IP address blocks: 88.218.112.0/24 maxlen: 24
88.218.113.0/24 maxlen: 24
88.218.115.0/24 maxlen: 24
93.179.90.0/23 maxlen: 24
178.57.65.0/24 maxlen: 24
178.57.66.0/23 maxlen: 24
178.57.68.0/24 maxlen: 24
185.217.37.0/24 maxlen: 24
2a0f:52c1::/46 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:3f:31:99:57:cd:6f:b3:cc:60:de:80:96:2f:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Dec 23 11:20:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6efa40588de29b26637befcc3929ba2fab06f49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:0a:03:3b:ed:99:79:aa:9a:05:c1:22:f4:
3b:f8:ca:56:94:88:c8:11:00:40:c9:99:12:47:5c:
25:e4:94:b8:fa:0a:85:be:c5:8f:a4:64:ef:c8:47:
90:9d:95:bf:f3:23:b6:f0:c7:99:21:0c:f9:94:57:
5e:f3:1c:f7:30:cd:e7:2c:82:85:38:8d:fd:bb:fd:
1b:d2:f8:c0:55:db:29:6d:0c:76:20:4f:2b:23:c6:
e8:e6:15:b5:ac:53:5c:a4:04:15:96:bc:16:c9:25:
2f:0c:7a:f1:d9:af:ea:d5:70:14:c9:99:1b:1c:25:
c4:d5:51:ad:00:7c:34:11:70:1d:1b:08:b1:5d:c0:
ae:b3:55:31:e1:f2:bf:d3:55:d3:3a:ee:98:b0:95:
e6:72:74:72:bb:06:50:23:e7:f7:c6:f4:b5:e8:bd:
c6:78:6d:23:42:61:87:dd:7a:7d:7e:c1:af:04:e7:
0e:53:23:66:b8:bc:6c:63:4c:8b:0e:e7:2f:c4:dc:
2b:5a:3c:c4:00:f2:91:2f:6e:c8:02:07:1f:f6:7d:
7a:22:c2:cd:32:d5:95:a2:7b:dd:32:dd:1d:f6:3f:
92:83:e1:b7:59:73:d5:52:d7:21:23:50:d8:f5:e2:
d4:3a:77:bd:a4:03:71:5c:13:17:f9:cb:07:2a:02:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:40:58:8D:E2:9B:26:63:7B:EF:CC:39:29:BA:2F:AB:06:F4:9B
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/bvpAWI3imyZje-_MOSm6L6sG9Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.112.0/23
88.218.115.0/24
93.179.90.0/23
178.57.65.0-178.57.68.255
185.217.37.0/24
IPv6:
2a0f:52c1::/46
Signature Algorithm: sha256WithRSAEncryption
97:94:0e:8c:7b:ac:e8:43:45:17:f0:ae:cd:0d:d4:0a:de:87:
a8:45:df:3c:a1:ea:e5:57:e3:f8:0f:6a:3b:25:04:d4:a4:a9:
75:2c:97:5e:bc:89:36:5c:4c:1f:ca:2d:7d:8e:83:4c:c5:79:
03:cb:c7:ec:01:6e:e2:c0:c9:7a:84:52:8c:7d:3a:c5:d5:49:
13:5e:84:35:09:73:e4:bf:e5:a4:1b:c8:5d:ed:d3:6d:02:fc:
9c:ab:2d:94:b7:ac:ba:42:88:2d:f7:6f:79:71:f4:a0:90:ca:
6a:d3:6f:f1:ef:af:2a:f6:87:2f:b3:5e:36:e6:90:43:81:44:
ca:d3:c9:39:ee:d9:e5:db:5d:f1:97:49:bc:74:f8:17:43:6d:
ff:8f:f7:ef:be:3b:55:78:46:c9:86:f9:a2:48:a0:68:4d:08:
cd:bc:b4:d0:87:c0:29:50:07:0f:9a:b7:42:5d:49:e8:41:bb:
3f:7a:33:b5:84:04:00:fa:a5:29:e2:86:26:83:5e:82:a5:1d:
b7:a0:3d:92:3d:61:64:61:a9:f9:48:86:c2:fc:e9:eb:c3:97:
b9:a8:fc:70:4a:0c:65:6c:00:5d:24:69:29:c0:e2:b5:08:a5:
26:bc:e9:5b:86:f2:25:5d:16:b8:d0:9e:30:3f:47:f5:bd:60:
dd:1c:2c:b6
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZPzPzGZV81vs8xg3oCWL607MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk
NWI1NjYwHhcNMjQxMjIzMTEyMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWZhNDA1ODhkZTI5YjI2NjM3YmVmY2MzOTI5YmEyZmFiMDZmNDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG0KAzvtmXmqmgXBIvQ7+MpWlIjI
EQBAyZkSR1wl5JS4+gqFvsWPpGTvyEeQnZW/8yO28MeZIQz5lFde8xz3MM3nLIKF
OI39u/0b0vjAVdspbQx2IE8rI8bo5hW1rFNcpAQVlrwWySUvDHrx2a/q1XAUyZkb
HCXE1VGtAHw0EXAdGwixXcCus1Ux4fK/01XTOu6YsJXmcnRyuwZQI+f3xvS16L3G
eG0jQmGH3Xp9fsGvBOcOUyNmuLxsY0yLDucvxNwrWjzEAPKRL27IAgcf9n16IsLN
MtWVonvdMt0d9j+Sg+G3WXPVUtchI1DY9eLUOne9pANxXBMX+csHKgK/3QIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFG76QFiN4psmY3vvzDkpui+rBvSbMB8GA1UdIwQY
MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt
OWVhZDgxZGEyZTQ0LzEvYnZwQVdJM2lteVpqZS1fTU9TbTZMNnNHOUpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0
LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAsBAIAATAmAwQBWNpwAwQA
WNpzAwQBXbNaMAwDBACyOUEDBACyOUQDBAC52SUwDwQCAAIwCQMHAioPUsEAADAN
BgkqhkiG9w0BAQsFAAOCAQEAl5QOjHus6ENFF/CuzQ3UCt6HqEXfPKHq5Vfj+A9q
OyUE1KSpdSyXXryJNlxMH8otfY6DTMV5A8vH7AFu4sDJeoRSjH06xdVJE16ENQlz
5L/lpBvIXe3TbQL8nKstlLesukKILfdveXH0oJDKatNv8e+vKvaHL7NeNuaQQ4FE
ytPJOe7Z5dtd8ZdJvHT4F0Nt/4/37747VXhGyYb5okigaE0Izby00IfAKVAHD5q3
Ql1J6EG7P3oztYQEAPqlKeKGJoNegqUdt6A9kj1hZGGp+UiGwvzp68OXuaj8cEoM
ZWwAXSRpKcDitQilJrzpW4byJV0WuNCeMD9H9b1g3Rwstg==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net