Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BcqiYtskvzD762tlbE8myhulOFs.roa
File: BcqiYtskvzD762tlbE8myhulOFs.roa (raw, json)
Hash identifier: IasZuu4avbeoDhEyRXPGHh+sX891GaVz9+0W6PRAvic=
Subject key identifier: 05:CA:A2:62:DB:24:BF:30:FB:EB:6B:65:6C:4F:26:CA:1B:A5:38:5B
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0193AEF26AB3D8C38009ACDFEA729E3E0D6C
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BcqiYtskvzD762tlbE8myhulOFs.roa
Signing time: Tue 10 Dec 2024 05:02:22 +0000
ROA not before: Tue 10 Dec 2024 05:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30738
IP address blocks: 188.130.182.0/24 maxlen: 24
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ae:f2:6a:b3:d8:c3:80:09:ac:df:ea:72:9e:3e:0d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Dec 10 05:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05caa262db24bf30fbeb6b656c4f26ca1ba5385b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:01:cd:b4:36:49:e3:04:5d:c8:f4:02:1a:
1c:52:7a:fa:b5:82:1e:de:cd:34:e1:92:64:dc:2e:
1f:0b:56:a5:1a:1b:d0:62:18:27:43:12:db:08:15:
e0:83:9a:5e:16:de:91:cc:a1:3b:9c:8e:c9:3d:98:
6d:69:e6:0d:8a:01:48:db:9d:be:1d:08:f0:39:1d:
25:78:f5:a0:89:4b:29:68:f2:d3:18:4c:65:78:0a:
f9:be:aa:a8:c5:db:2b:8f:5f:69:85:66:f3:72:c9:
b1:76:7b:0b:73:81:fa:2e:59:8e:ef:d8:27:8c:ad:
a9:d7:cf:33:38:32:99:82:28:a6:34:8e:cc:3a:df:
e9:ba:f9:da:6a:9b:fc:26:1b:54:f7:78:e9:93:8d:
fb:d3:00:e3:4b:16:ec:d4:12:70:46:3c:35:de:dc:
fe:e3:7c:82:0f:34:c1:bf:f2:d1:67:45:f9:50:36:
eb:01:01:50:39:e3:76:e6:1b:ce:82:86:7c:71:f8:
50:ea:07:fa:d0:e3:4f:ce:f0:81:63:74:fb:9c:21:
62:1a:8a:4d:e6:dc:f3:ab:fa:04:91:cf:22:2f:6d:
b8:48:2c:8a:34:a5:01:98:a9:65:a5:47:8a:80:a9:
7b:70:a9:29:cc:1b:a5:73:da:2a:a6:10:ca:9b:22:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CA:A2:62:DB:24:BF:30:FB:EB:6B:65:6C:4F:26:CA:1B:A5:38:5B
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BcqiYtskvzD762tlbE8myhulOFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.182.0/24
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
ab:28:e8:88:26:01:71:f6:05:47:a1:84:48:7f:fd:f5:77:e5:
bc:b5:64:ec:81:70:86:09:bb:b4:34:2f:e2:0b:d0:53:2e:dd:
24:83:10:3c:7c:12:ef:9d:ce:f4:e8:21:03:56:12:89:70:e8:
b9:f5:82:9b:4a:ed:fb:f6:23:ef:13:3d:96:0b:10:bd:23:52:
b4:45:fa:c6:3d:36:dc:5c:6a:47:2f:5a:9e:7a:17:65:9b:39:
36:af:ed:14:06:f7:33:cc:09:fd:43:ea:ed:f3:4c:e7:59:09:
e0:58:33:fa:61:32:d8:56:8d:d2:d5:ce:42:21:97:ba:be:27:
ea:61:38:78:59:68:bb:59:5d:3d:20:77:75:39:cc:0c:d1:f0:
fd:c6:75:a3:5f:08:64:a1:e1:77:98:7f:49:94:b9:80:9b:ee:
b3:b6:3c:86:17:4f:dd:36:bb:a3:ce:1d:06:58:53:81:8b:a5:
e2:6c:b7:73:53:aa:dc:98:96:1a:94:fd:ee:1f:59:bc:92:9e:
bf:57:7d:c0:f9:84:4d:ed:1c:62:3d:64:99:b8:ed:c0:83:41:
e4:a2:05:8c:0d:df:12:00:8c:e6:6d:df:a7:fb:e5:04:c5:76:
ec:a3:f0:37:fc:ca:04:6f:09:a7:0b:b8:69:67:4b:0e:70:37:
fe:fc:79:f7
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZOu8mqz2MOACazf6nKePg1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjQxMjEwMDUwMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWNhYTI2MmRiMjRiZjMwZmJlYjZiNjU2YzRmMjZjYTFiYTUzODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoABzbQ2SeMEXcj0AhocUnr6tYIe
3s004ZJk3C4fC1alGhvQYhgnQxLbCBXgg5peFt6RzKE7nI7JPZhtaeYNigFI252+
HQjwOR0lePWgiUspaPLTGExleAr5vqqoxdsrj19phWbzcsmxdnsLc4H6LlmO79gn
jK2p188zODKZgiimNI7MOt/puvnaapv8JhtU93jpk4370wDjSxbs1BJwRjw13tz+
43yCDzTBv/LRZ0X5UDbrAQFQOeN25hvOgoZ8cfhQ6gf60ONPzvCBY3T7nCFiGopN
5tzzq/oEkc8iL224SCyKNKUBmKllpUeKgKl7cKkpzBulc9oqphDKmyIi6wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAXKomLbJL8w++trZWxPJsobpThbMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvQmNxaVl0c2t2ekQ3NjJ0bGJFOG15aHVsT0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAvIK2AwQC
w9M0MA0EAgACMAcDBQAgARRoMA0GCSqGSIb3DQEBCwUAA4IBAQCrKOiIJgFx9gVH
oYRIf/31d+W8tWTsgXCGCbu0NC/iC9BTLt0kgxA8fBLvnc706CEDVhKJcOi59YKb
Su379iPvEz2WCxC9I1K0RfrGPTbcXGpHL1qeehdlmzk2r+0UBvczzAn9Q+rt80zn
WQngWDP6YTLYVo3S1c5CIZe6vifqYTh4WWi7WV09IHd1OcwM0fD9xnWjXwhkoeF3
mH9JlLmAm+6ztjyGF0/dNrujzh0GWFOBi6XibLdzU6rcmJYalP3uH1m8kp6/V33A
+YRN7RxiPWSZuO3Ag0HkogWMDd8SAIzmbd+n++UExXbso/A3/MoEbwmnC7hpZ0sO
cDf+/Hn3
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:16 2025 by rpki-client