Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/3BusrkRCbN4laSMPn-zngE0tP9w.roa
File: 3BusrkRCbN4laSMPn-zngE0tP9w.roa (raw, json)
Hash identifier: kQGgscXvdaMfSHNXbi6/S/Yv5FjaA4c9asJoqcTlpOc=
Subject key identifier: DC:1B:AC:AE:44:42:6C:DE:25:69:23:0F:9F:EC:E7:80:4D:2D:3F:DC
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 01946AA2E08DB2D8540635E2C75D26AEB602
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/3BusrkRCbN4laSMPn-zngE0tP9w.roa
Signing time: Wed 15 Jan 2025 15:44:06 +0000
ROA not before: Wed 15 Jan 2025 15:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203217
IP address blocks: 185.112.188.0/22 maxlen: 22
185.112.188.0/23 maxlen: 23
185.112.188.0/24 maxlen: 24
185.112.190.0/23 maxlen: 23
185.112.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:a2:e0:8d:b2:d8:54:06:35:e2:c7:5d:26:ae:b6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jan 15 15:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc1bacae44426cde2569230f9fece7804d2d3fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:08:a6:96:45:1e:52:8c:3e:09:c8:6c:3d:
ba:11:a1:b5:82:ea:b8:be:8b:4d:e4:15:bc:42:00:
83:d1:21:5c:f3:08:46:dd:98:f6:8f:64:c5:72:c6:
2d:99:bb:07:b0:8f:ef:ab:93:42:7a:40:5c:c8:96:
49:80:8f:37:35:62:27:39:0b:1c:d1:f5:14:f4:16:
5a:d1:dc:57:94:c8:77:8f:f5:1d:15:57:78:89:7b:
d2:e7:da:0a:ec:05:9c:18:83:08:d6:96:d8:35:1c:
f7:7f:f8:b9:5b:d5:5f:b6:a2:8a:02:03:70:9a:8b:
51:bc:e2:30:6f:b3:f5:ab:66:28:8b:b3:0e:24:fd:
25:f1:2d:01:25:28:26:de:88:6b:bd:4e:1c:d7:cc:
65:b5:b6:f6:dd:b4:b3:0a:26:31:25:a9:25:3e:c7:
b5:fe:1c:ae:61:47:9b:e7:40:15:23:a9:0f:fe:5c:
a1:10:58:b1:57:9c:20:a6:19:0d:db:51:67:33:c0:
1c:18:d3:21:e7:c4:17:9c:5e:fa:99:08:91:a0:1e:
a6:0b:4d:58:aa:05:e0:85:a2:d2:91:be:e7:eb:75:
0e:0c:1f:fe:39:0d:06:bf:f2:e5:e1:3a:07:41:bc:
71:54:cd:1b:05:98:4d:c6:3d:1c:24:45:44:53:a5:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1B:AC:AE:44:42:6C:DE:25:69:23:0F:9F:EC:E7:80:4D:2D:3F:DC
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/3BusrkRCbN4laSMPn-zngE0tP9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.188.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:3b:cf:d9:98:5b:d4:60:3b:73:0d:06:4b:2d:46:83:8b:42:
a2:c0:87:d4:a1:d0:33:db:84:b2:c9:a2:49:55:3f:99:1a:da:
26:93:11:b5:37:45:a8:b8:fb:3c:35:18:7e:6c:f8:8d:f9:29:
dd:25:28:3e:22:06:a2:2a:33:8a:fb:52:64:d5:9c:6e:50:1f:
44:7e:ae:95:6d:9e:42:18:5a:46:72:e0:f7:c9:4f:a6:f5:f9:
d5:7b:c1:c1:a7:97:5e:76:a5:03:2c:8f:f3:ed:db:2f:f8:94:
f7:7d:0e:a6:49:4f:72:c3:9d:81:4e:83:df:29:54:b4:78:d9:
96:1b:15:1d:7e:6a:a5:8d:26:31:9c:7d:c2:9b:ef:cf:aa:41:
21:40:d4:63:34:56:20:e9:6e:eb:47:aa:db:b9:4f:54:2c:07:
25:89:d1:9f:7d:30:da:7b:f9:a2:47:22:0b:22:0b:66:5b:28:
97:d7:09:fc:8b:c4:9d:39:cf:d3:70:30:b0:32:ae:be:c9:9b:
67:f4:cf:3b:98:cb:52:e1:2a:ae:dc:4c:c1:25:31:28:c7:cb:
b1:5f:72:9b:a6:c3:29:63:20:30:ee:9b:6b:42:ba:75:9d:64:
a4:f9:06:ae:db:72:23:d5:61:85:4b:ce:76:c6:84:5a:20:d9:
bc:2c:61:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRqouCNsthUBjXix10mrrYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh
NjRkNWEwHhcNMjUwMTE1MTU0NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzFiYWNhZTQ0NDI2Y2RlMjU2OTIzMGY5ZmVjZTc4MDRkMmQzZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DgIppZFHlKMPgnIbD26EaG1guq4
votN5BW8QgCD0SFc8whG3Zj2j2TFcsYtmbsHsI/vq5NCekBcyJZJgI83NWInOQsc
0fUU9BZa0dxXlMh3j/UdFVd4iXvS59oK7AWcGIMI1pbYNRz3f/i5W9VftqKKAgNw
motRvOIwb7P1q2Yoi7MOJP0l8S0BJSgm3ohrvU4c18xltbb23bSzCiYxJaklPse1
/hyuYUeb50AVI6kP/lyhEFixV5wgphkN21FnM8AcGNMh58QXnF76mQiRoB6mC01Y
qgXghaLSkb7n63UODB/+OQ0Gv/Ll4ToHQbxxVM0bBZhNxj0cJEVEU6VYXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNwbrK5EQmzeJWkjD5/s54BNLT/cMB8GA1UdIwQY
MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt
ODhlNjgxNjI3MWY3LzEvM0J1c3JrUkNiTjRsYVNNUG4tem5nRTB0UDl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3
LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXC8MA0G
CSqGSIb3DQEBCwUAA4IBAQBrO8/ZmFvUYDtzDQZLLUaDi0KiwIfUodAz24SyyaJJ
VT+ZGtomkxG1N0WouPs8NRh+bPiN+SndJSg+IgaiKjOK+1Jk1ZxuUB9Efq6VbZ5C
GFpGcuD3yU+m9fnVe8HBp5dedqUDLI/z7dsv+JT3fQ6mSU9yw52BToPfKVS0eNmW
GxUdfmqljSYxnH3Cm+/PqkEhQNRjNFYg6W7rR6rbuU9ULAclidGffTDae/miRyIL
IgtmWyiX1wn8i8SdOc/TcDCwMq6+yZtn9M87mMtS4Squ3EzBJTEox8uxX3KbpsMp
YyAw7ptrQrp1nWSk+Qau23Ij1WGFS852xoRaINm8LGFc
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:15:58 2025 by rpki-client on console.sobornost.net