Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/O_KCzwVMWWFZcOERuZfC4YWn9FY.roa
File: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (raw, json)
Hash identifier: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=
Subject key identifier: 3B:F2:82:CF:05:4C:59:61:59:70:E1:11:B9:97:C2:E1:85:A7:F4:56
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 01942143F566C6DDFD8CB5C4A5C427C0DDE6
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/O_KCzwVMWWFZcOERuZfC4YWn9FY.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42183
IP address blocks: 185.189.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f5:66:c6:dd:fd:8c:b5:c4:a5:c4:27:c0:dd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bf282cf054c59615970e111b997c2e185a7f456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:53:02:95:2b:df:57:7b:16:1f:66:bd:6c:
e9:75:46:4f:09:44:f0:64:aa:c5:ca:f9:e3:95:51:
34:a6:f4:e6:ea:af:f0:75:e3:c4:7d:99:1e:fd:aa:
08:f8:1f:59:fb:13:2b:da:48:87:ed:65:7e:9a:bd:
f8:c7:3d:75:fd:b8:1b:67:ea:05:14:8d:ad:33:77:
41:4c:3f:0d:bb:10:41:51:e4:ad:d5:c8:14:f9:0f:
1c:8e:17:aa:31:7a:38:80:96:e9:54:22:a7:ec:d0:
10:60:db:95:73:92:f0:a5:f0:5b:36:4d:37:6e:a2:
80:b9:fa:4a:20:a3:44:5e:6f:eb:0d:0b:90:cd:77:
19:1f:3d:bd:24:32:49:02:88:ce:56:72:dd:ac:c8:
e2:d5:6e:b9:84:6d:e4:62:d1:65:39:ff:12:71:f4:
ad:1d:7c:07:5e:d4:c7:fa:4e:2c:61:34:3c:14:c1:
97:5d:65:44:52:ef:ea:38:51:7d:d5:a2:c0:ce:d3:
b6:01:77:88:f9:36:e5:9a:ed:b4:87:32:eb:3c:cb:
16:e1:fa:6e:54:25:ec:c4:44:2f:04:ea:5d:64:03:
36:12:af:20:da:7d:bb:ef:fd:df:34:dc:eb:7e:eb:
c2:09:1f:d1:ca:92:e2:7c:88:51:08:b5:33:46:46:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:82:CF:05:4C:59:61:59:70:E1:11:B9:97:C2:E1:85:A7:F4:56
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/O_KCzwVMWWFZcOERuZfC4YWn9FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1b:ae:a7:bf:95:73:b9:97:90:bb:5f:c8:eb:b8:b1:15:38:
9c:de:61:f2:f7:42:85:c7:69:aa:80:8b:b0:8f:29:ac:a3:58:
bc:76:62:c8:ca:8c:9f:b5:22:ac:4f:51:ce:94:55:bd:17:ff:
4e:b3:10:87:ac:70:8a:3d:03:eb:a3:97:01:8e:18:fa:ae:f9:
a6:2b:6d:e3:9b:3b:d0:3c:4e:8c:7e:05:a7:2e:bc:15:4a:8b:
e5:d4:9b:c8:dc:5c:bc:55:1f:f1:23:20:69:42:3f:cb:2f:08:
03:57:4e:9e:87:ee:31:e1:a7:32:75:b6:4a:63:35:00:e7:09:
aa:e3:dc:00:c9:d8:ba:48:91:e1:6d:83:4a:d4:28:1f:c0:57:
e9:7e:e3:46:09:b6:31:5b:b6:17:f9:24:e7:a0:2d:50:b0:43:
9a:c1:8b:13:39:1a:a0:09:f4:40:e5:fe:07:f7:1f:8f:19:4c:
8b:3a:68:29:56:ee:98:bd:67:ec:60:62:bd:fe:ef:6f:1a:48:
c1:9d:3e:36:47:20:90:02:30:76:64:f2:30:f7:f8:31:c3:d3:
cd:f9:7f:81:f4:bc:a9:52:a9:0d:c6:77:fb:9f:96:03:fc:ed:
e3:f2:de:1b:ee:14:8f:4e:e1:20:4e:a2:a4:95:5a:3e:0b:07:
da:11:2d:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ/Vmxt39jLXEpcQnwN3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYmVjZTAzODM3NzY3YWI1OTBjMjQ3NTBiNTYwNzIwM2Nm
YTE5NTkwHhcNMjUwMTAxMDk0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmYyODJjZjA1NGM1OTYxNTk3MGUxMTFiOTk3YzJlMTg1YTdmNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIFTApUr31d7Fh9mvWzpdUZPCUTw
ZKrFyvnjlVE0pvTm6q/wdePEfZke/aoI+B9Z+xMr2kiH7WV+mr34xz11/bgbZ+oF
FI2tM3dBTD8NuxBBUeSt1cgU+Q8cjheqMXo4gJbpVCKn7NAQYNuVc5LwpfBbNk03
bqKAufpKIKNEXm/rDQuQzXcZHz29JDJJAojOVnLdrMji1W65hG3kYtFlOf8ScfSt
HXwHXtTH+k4sYTQ8FMGXXWVEUu/qOFF91aLAztO2AXeI+Tblmu20hzLrPMsW4fpu
VCXsxEQvBOpdZAM2Eq8g2n277/3fNNzrfuvCCR/RypLifIhRCLUzRkbipQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDvygs8FTFlhWXDhEbmXwuGFp/RWMB8GA1UdIwQY
MBaAFMy+zgODd2erWQwkdQtWByA8+hlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekw3T0E0TjNaNnRaRENSMUMxWUhJRHo2R1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYjE1ZDktMDQzMy00YmQwLTllYWQt
NjQ0ZDk4MzBmMGUyLzEvT19LQ3p3Vk1XV0ZaY09FUnVaZkM0WVduOUZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jYjE1ZDktMDQzMy00YmQwLTllYWQtNjQ0ZDk4MzBmMGUy
LzEvekw3T0E0TjNaNnRaRENSMUMxWUhJRHo2R1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub1aMA0G
CSqGSIb3DQEBCwUAA4IBAQA+G66nv5VzuZeQu1/I67ixFTic3mHy90KFx2mqgIuw
jymso1i8dmLIyoyftSKsT1HOlFW9F/9OsxCHrHCKPQPro5cBjhj6rvmmK23jmzvQ
PE6MfgWnLrwVSovl1JvI3Fy8VR/xIyBpQj/LLwgDV06eh+4x4acydbZKYzUA5wmq
49wAydi6SJHhbYNK1CgfwFfpfuNGCbYxW7YX+STnoC1QsEOawYsTORqgCfRA5f4H
9x+PGUyLOmgpVu6YvWfsYGK9/u9vGkjBnT42RyCQAjB2ZPIw9/gxw9PN+X+B9Lyp
UqkNxnf7n5YD/O3j8t4b7hSPTuEgTqKklVo+CwfaES2P
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net