Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/kcBbi1qd2almn_1GpUD1vtC33eg.roa
File: kcBbi1qd2almn_1GpUD1vtC33eg.roa (raw, json)
Hash identifier: UHr5vMZPMun701fGRznRJgy80mqmFmcqMbhrjVi0PAQ=
Subject key identifier: 91:C0:5B:8B:5A:9D:D9:A9:66:9F:FD:46:A5:40:F5:BE:D0:B7:DD:E8
Certificate issuer: /CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Certificate serial: 018CC86F6CD8B6D2EFD0C808CB3D4E1E4A22
Authority key identifier: 18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/kcBbi1qd2almn_1GpUD1vtC33eg.roa
Signing time: Tue 02 Jan 2024 04:29:54 +0000
ROA not before: Tue 02 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29182
IP address blocks: 37.46.134.0/23 maxlen: 23
91.240.84.0/23 maxlen: 23
91.240.86.0/23 maxlen: 23
185.43.4.0/23 maxlen: 23
185.43.6.0/23 maxlen: 23
37.46.132.0/23 maxlen: 23
37.46.130.0/23 maxlen: 23
37.46.128.0/23 maxlen: 23
213.159.208.0/23 maxlen: 23
213.159.212.0/23 maxlen: 23
213.159.210.0/23 maxlen: 23
213.159.214.0/23 maxlen: 23
185.63.188.0/22 maxlen: 22
80.87.202.0/24 maxlen: 24
80.87.200.0/23 maxlen: 23
80.87.203.0/24 maxlen: 24
212.109.192.0/22 maxlen: 22
212.109.196.0/23 maxlen: 23
212.109.198.0/23 maxlen: 23
212.109.216.0/23 maxlen: 23
212.109.218.0/23 maxlen: 23
212.109.223.0/24 maxlen: 24
212.109.222.0/24 maxlen: 24
212.109.222.0/23 maxlen: 23
212.109.220.0/23 maxlen: 23
83.220.170.0/23 maxlen: 23
83.220.168.0/23 maxlen: 23
83.220.172.0/23 maxlen: 23
83.220.174.0/23 maxlen: 23
185.146.156.0/23 maxlen: 23
185.146.158.0/23 maxlen: 23
80.87.192.0/23 maxlen: 23
80.87.194.0/23 maxlen: 23
80.87.198.0/23 maxlen: 23
80.87.196.0/23 maxlen: 23
77.246.158.0/23 maxlen: 23
77.246.156.0/22 maxlen: 22
77.246.156.0/23 maxlen: 23
82.202.160.0/23 maxlen: 23
82.202.164.0/24 maxlen: 24
82.202.162.0/23 maxlen: 23
82.202.165.0/24 maxlen: 24
82.202.170.0/23 maxlen: 23
82.202.168.0/23 maxlen: 23
82.202.172.0/23 maxlen: 23
82.202.166.0/23 maxlen: 23
82.202.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:6c:d8:b6:d2:ef:d0:c8:08:cb:3d:4e:1e:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185d46b7c9d321c9ba189e66b1933c1324197cec
Validity
Not Before: Jan 2 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91c05b8b5a9dd9a9669ffd46a540f5bed0b7dde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:98:81:20:ed:c9:ad:d0:41:31:ab:9d:47:
ec:61:46:26:88:2e:96:06:77:4a:34:18:77:d6:5d:
a4:f4:df:00:6f:56:f7:21:12:d9:49:57:bb:18:65:
0f:27:db:70:56:42:d2:60:cb:0a:95:96:ed:af:52:
cc:21:fd:6d:cc:07:8d:b1:5b:a4:1d:b5:c9:72:a4:
0a:99:28:a4:54:ab:4d:b7:0d:a2:d8:ae:3b:9c:34:
bb:07:ec:dc:7e:a5:82:03:c7:10:a8:c6:2d:d0:9a:
7a:26:a5:1d:87:0c:64:fa:bd:2f:49:30:e8:21:57:
0d:1a:99:11:09:0e:e2:04:55:84:52:0d:35:9d:8c:
cd:3d:59:be:8f:a7:48:71:07:40:91:ce:ee:f9:8b:
f3:3b:77:70:d5:ca:c7:43:40:ff:ec:96:9f:40:98:
4b:bc:6a:17:31:3d:fd:bd:f5:8f:9d:9c:61:b1:12:
20:95:15:78:1c:e5:be:40:c1:28:a8:6d:c4:91:ee:
02:da:14:db:0d:3b:7d:e6:70:ef:d0:17:e8:10:63:
d8:4f:f7:29:8a:b8:16:6e:2f:ab:a6:17:35:79:26:
91:ed:97:2e:d7:77:97:19:e6:09:a9:09:2a:dd:d5:
c9:57:30:9c:16:01:34:be:64:84:57:97:3f:19:b2:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:5B:8B:5A:9D:D9:A9:66:9F:FD:46:A5:40:F5:BE:D0:B7:DD:E8
X509v3 Authority Key Identifier:
keyid:18:5D:46:B7:C9:D3:21:C9:BA:18:9E:66:B1:93:3C:13:24:19:7C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/kcBbi1qd2almn_1GpUD1vtC33eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bcabb9-fbdb-4311-a29c-c17de50fd5fb/1/GF1Gt8nTIcm6GJ5msZM8EyQZfOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.128.0/21
77.246.156.0/22
80.87.192.0-80.87.203.255
82.202.160.0/20
83.220.168.0/21
91.240.84.0/22
185.43.4.0/22
185.63.188.0/22
185.146.156.0/22
212.109.192.0/21
212.109.216.0/21
213.159.208.0/21
Signature Algorithm: sha256WithRSAEncryption
72:8b:4c:07:8e:eb:1b:30:f9:19:c0:b2:13:ff:4c:90:ac:0d:
04:fd:c3:cd:71:f2:23:fd:85:5c:c0:18:ac:77:a3:af:8b:3b:
08:b9:3c:49:0c:88:d4:e9:e4:f6:17:f3:ac:f3:cb:ab:45:27:
28:d8:c1:b7:56:fc:fc:a4:25:c2:33:85:52:6a:e0:f0:14:1a:
61:41:98:fc:46:72:20:c6:b1:88:a7:3f:0a:d0:10:72:ea:6c:
3d:fc:65:dc:8d:13:4d:b2:60:15:69:ec:ed:bb:ac:16:77:5c:
83:66:61:62:7c:ac:d9:bf:03:b4:f4:2c:8a:11:d7:2a:21:10:
62:98:ec:fe:3b:3d:c2:27:ab:d5:e4:e4:27:2e:93:1f:b8:18:
f6:55:bb:f4:ab:4a:f4:ce:3c:e3:78:90:c6:40:5c:7c:c8:d3:
4b:4d:43:86:6c:e2:07:01:81:7b:b2:73:7f:5d:07:1e:0c:aa:
a8:f6:bd:a6:6e:cc:27:7e:f4:ed:fe:0a:3b:e3:c9:54:67:fe:
5e:7c:0a:53:eb:f2:05:8d:c3:b0:7e:26:63:3d:a1:ba:46:6a:
19:ab:80:29:b2:58:c3:f6:9c:ef:76:3c:f7:26:35:2f:7f:d4:
17:13:c7:b9:98:c0:4c:e1:e3:30:fe:d1:4f:47:2e:b6:50:ea:
2c:1a:0d:61
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYzIb2zYttLv0MgIyz1OHkoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWQ0NmI3YzlkMzIxYzliYTE4OWU2NmIxOTMzYzEzMjQx
OTdjZWMwHhcNMjQwMTAyMDQyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWMwNWI4YjVhOWRkOWE5NjY5ZmZkNDZhNTQwZjViZWQwYjdkZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvaYgSDtya3QQTGrnUfsYUYmiC6W
BndKNBh31l2k9N8Ab1b3IRLZSVe7GGUPJ9twVkLSYMsKlZbtr1LMIf1tzAeNsVuk
HbXJcqQKmSikVKtNtw2i2K47nDS7B+zcfqWCA8cQqMYt0Jp6JqUdhwxk+r0vSTDo
IVcNGpkRCQ7iBFWEUg01nYzNPVm+j6dIcQdAkc7u+YvzO3dw1crHQ0D/7JafQJhL
vGoXMT39vfWPnZxhsRIglRV4HOW+QMEoqG3Eke4C2hTbDTt95nDv0BfoEGPYT/cp
irgWbi+rphc1eSaR7Zcu13eXGeYJqQkq3dXJVzCcFgE0vmSEV5c/GbJKMwIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFJHAW4tandmpZp/9RqVA9b7Qt93oMB8GA1UdIwQY
MBaAFBhdRrfJ0yHJuhieZrGTPBMkGXzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0YxR3Q4blRJY202R0o1bXNaTThFeVFaZk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iY2FiYjktZmJkYi00MzExLWEyOWMt
YzE3ZGU1MGZkNWZiLzEva2NCYmkxcWQyYWxtbl8xR3BVRDF2dEMzM2VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iY2FiYjktZmJkYi00MzExLWEyOWMtYzE3ZGU1MGZkNWZi
LzEvR0YxR3Q4blRJY202R0o1bXNaTThFeVFaZk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQDJS6AAwQC
TfacMAwDBAZQV8ADBAJQV8gDBARSyqADBANT3KgDBAJb8FQDBAK5KwQDBAK5P7wD
BAK5kpwDBAPUbcADBAPUbdgDBAPVn9AwDQYJKoZIhvcNAQELBQADggEBAHKLTAeO
6xsw+RnAshP/TJCsDQT9w81x8iP9hVzAGKx3o6+LOwi5PEkMiNTp5PYX86zzy6tF
JyjYwbdW/PykJcIzhVJq4PAUGmFBmPxGciDGsYinPwrQEHLqbD38ZdyNE02yYBVp
7O27rBZ3XINmYWJ8rNm/A7T0LIoR1yohEGKY7P47PcInq9Xk5Ccukx+4GPZVu/Sr
SvTOPON4kMZAXHzI00tNQ4Zs4gcBgXuyc39dBx4Mqqj2vaZuzCd+9O3+CjvjyVRn
/l58ClPr8gWNw7B+JmM9obpGahmrgCmyWMP2nO92PPcmNS9/1BcTx7mYwEzh4zD+
0U9HLrZQ6iwaDWE=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:22 2025 by rpki-client