Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/bp7wOLoR7KHYyMpRk1AVcymuiZM.roa
File: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (raw, json)
Hash identifier: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=
Subject key identifier: 6E:9E:F0:38:BA:11:EC:A1:D8:C8:CA:51:93:50:15:73:29:AE:89:93
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 01942143F5B83C8867C2B4A6456A99261BA0
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/bp7wOLoR7KHYyMpRk1AVcymuiZM.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205015
IP address blocks: 185.189.88.0/24 maxlen: 24
185.189.89.0/24 maxlen: 24
185.189.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f5:b8:3c:88:67:c2:b4:a6:45:6a:99:26:1b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e9ef038ba11eca1d8c8ca519350157329ae8993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:c6:9e:6d:3a:69:35:da:f7:19:9e:7d:17:
da:2c:31:9a:4f:0a:0c:06:26:44:05:cc:bd:73:9b:
8c:8b:f2:1d:dd:16:8f:f7:bd:c5:3f:8f:b0:0b:f0:
dc:53:3c:f5:48:9c:90:1c:66:77:5c:44:78:e4:6f:
32:21:2b:b5:2a:47:a9:af:ac:d1:5b:4c:43:e9:2f:
f1:d5:f2:7d:61:27:74:ba:c4:39:f1:6a:5d:3c:41:
42:2e:dd:eb:08:74:d5:32:ba:2b:a1:16:16:8e:66:
1c:ec:d0:31:12:0b:21:c8:17:e9:ec:c1:69:06:c1:
08:c9:4a:13:6d:b7:f9:79:16:b6:f0:0b:67:6f:81:
18:55:24:17:49:d6:4d:bd:f8:a0:a0:c6:72:04:aa:
2c:9f:bb:0a:06:d6:a0:90:6b:13:94:37:7b:01:df:
e8:ba:2b:6b:51:42:4b:cc:0a:6b:fd:cc:4e:88:e0:
69:f6:29:da:45:5b:e3:76:b4:17:ff:31:c0:8c:e0:
e6:f4:f9:08:87:9a:39:51:8b:f7:9e:3d:b7:02:09:
b4:de:1d:a7:43:e1:51:90:e3:1d:eb:0e:45:53:32:
5a:64:51:99:dc:e0:77:d4:39:f8:69:46:f6:4c:3a:
40:67:68:62:d8:07:b5:59:1c:60:30:5a:04:51:2b:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:F0:38:BA:11:EC:A1:D8:C8:CA:51:93:50:15:73:29:AE:89:93
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/bp7wOLoR7KHYyMpRk1AVcymuiZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.88.0/23
185.189.91.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c1:ff:64:29:98:d9:94:61:4c:e4:77:45:19:0b:4d:0c:54:
ce:82:7e:01:6b:3f:2f:2a:5e:3f:29:92:0f:90:d5:82:10:97:
16:52:ec:51:f3:bd:fd:dd:4d:9b:bc:8a:67:21:ca:83:a4:f1:
fc:f5:aa:62:b8:51:ea:83:63:30:8a:e6:c2:c7:c1:ee:b2:b5:
8f:ef:0e:8d:5c:c8:68:3f:5a:a3:90:8e:ef:90:4d:a0:1e:e5:
f8:71:a5:9a:ab:70:51:91:7e:24:ec:bb:9e:41:8b:3a:12:38:
d8:8b:58:e9:79:09:7a:bc:56:a1:b2:0b:b4:0a:de:d6:8a:ff:
e7:94:5c:6f:4d:6c:5f:c1:bf:44:98:04:26:d4:40:fc:b4:a4:
d8:e6:13:88:cf:3b:36:40:d0:6e:46:c3:54:d6:e3:fb:83:32:
c3:df:bb:a4:98:7f:89:0d:3c:80:55:ec:d7:d3:49:75:c3:7a:
8c:bc:c8:32:d3:b0:ce:fd:67:36:59:1a:f3:a3:c6:01:dc:81:
db:13:e8:eb:bf:4e:02:b7:2f:ce:6c:fe:d6:47:8f:f7:71:21:
b9:7b:44:26:a3:75:35:d7:a5:ce:e6:79:ea:bd:a0:d6:c3:45:
fd:67:f1:f2:94:bf:5c:a7:3e:74:25:b2:84:1e:aa:b3:84:2c:
fd:f5:26:a0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ/W4PIhnwrSmRWqZJhugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYmVjZTAzODM3NzY3YWI1OTBjMjQ3NTBiNTYwNzIwM2Nm
YTE5NTkwHhcNMjUwMTAxMDk0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTllZjAzOGJhMTFlY2ExZDhjOGNhNTE5MzUwMTU3MzI5YWU4OTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9PGnm06aTXa9xmefRfaLDGaTwoM
BiZEBcy9c5uMi/Id3RaP973FP4+wC/DcUzz1SJyQHGZ3XER45G8yISu1Kkepr6zR
W0xD6S/x1fJ9YSd0usQ58WpdPEFCLt3rCHTVMroroRYWjmYc7NAxEgshyBfp7MFp
BsEIyUoTbbf5eRa28Atnb4EYVSQXSdZNvfigoMZyBKosn7sKBtagkGsTlDd7Ad/o
uitrUUJLzApr/cxOiOBp9inaRVvjdrQX/zHAjODm9PkIh5o5UYv3nj23Agm03h2n
Q+FRkOMd6w5FUzJaZFGZ3OB31Dn4aUb2TDpAZ2hi2Ae1WRxgMFoEUSumsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG6e8Di6Eeyh2MjKUZNQFXMpromTMB8GA1UdIwQY
MBaAFMy+zgODd2erWQwkdQtWByA8+hlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekw3T0E0TjNaNnRaRENSMUMxWUhJRHo2R1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYjE1ZDktMDQzMy00YmQwLTllYWQt
NjQ0ZDk4MzBmMGUyLzEvYnA3d09Mb1I3S0hZeU1wUmsxQVZjeW11aVpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jYjE1ZDktMDQzMy00YmQwLTllYWQtNjQ0ZDk4MzBmMGUy
LzEvekw3T0E0TjNaNnRaRENSMUMxWUhJRHo2R1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBub1YAwQA
ub1bMA0GCSqGSIb3DQEBCwUAA4IBAQAXwf9kKZjZlGFM5HdFGQtNDFTOgn4Baz8v
Kl4/KZIPkNWCEJcWUuxR87393U2bvIpnIcqDpPH89apiuFHqg2MwiubCx8HusrWP
7w6NXMhoP1qjkI7vkE2gHuX4caWaq3BRkX4k7LueQYs6EjjYi1jpeQl6vFahsgu0
Ct7Wiv/nlFxvTWxfwb9EmAQm1ED8tKTY5hOIzzs2QNBuRsNU1uP7gzLD37ukmH+J
DTyAVezX00l1w3qMvMgy07DO/Wc2WRrzo8YB3IHbE+jrv04Cty/ObP7WR4/3cSG5
e0Qmo3U116XO5nnqvaDWw0X9Z/HylL9cpz50JbKEHqqzhCz99Sag
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net