Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/6ribQUEUmAxt2wHXJd-U7f6yaRI.roa
File: 6ribQUEUmAxt2wHXJd-U7f6yaRI.roa (raw, json)
Hash identifier: qhkI5RwGajokhxyxbM332dvPvFl03D+O4/wx5DmaCUo=
Subject key identifier: EA:B8:9B:41:41:14:98:0C:6D:DB:01:D7:25:DF:94:ED:FE:B2:69:12
Certificate issuer: /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Certificate serial: 0194214426402AC0C97F54CE1B48ECB83043
Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/6ribQUEUmAxt2wHXJd-U7f6yaRI.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204657
IP address blocks: 185.132.232.0/24 maxlen: 24
185.132.233.0/24 maxlen: 24
185.132.234.0/24 maxlen: 24
185.132.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:26:40:2a:c0:c9:7f:54:ce:1b:48:ec:b8:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab89b414114980c6ddb01d725df94edfeb26912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:14:65:ee:24:df:33:52:82:1b:5a:52:0d:
8c:c9:6a:a4:67:d4:6c:56:f3:f8:31:84:af:52:88:
6e:a0:f3:fd:02:7b:aa:63:8c:41:ee:97:69:ca:cd:
5e:f8:e6:23:b1:f9:c1:d7:57:52:d7:cd:b1:66:31:
0c:86:f7:fb:1e:e2:d5:4d:ca:49:2d:58:bd:f2:2f:
41:1b:a4:00:28:0e:16:fc:ac:20:c2:e1:cd:69:aa:
f4:46:67:70:fd:d3:9e:02:2c:c4:45:a6:d9:c1:a4:
80:e5:d3:3d:57:03:f8:31:14:80:dc:32:db:a8:5d:
dd:eb:8b:57:c8:e2:c9:3e:56:32:9d:16:c7:50:ac:
a3:fb:35:40:84:a9:6d:51:d9:c1:6d:76:e6:d7:da:
f2:81:c8:39:ee:dc:ff:c6:89:ab:30:76:40:67:71:
c3:16:cd:ae:ff:11:17:78:e9:97:f5:27:4f:f6:0f:
54:07:ec:47:17:10:ca:eb:36:ca:9a:ef:a3:22:6b:
db:e1:3a:af:cb:d5:2b:ac:d6:85:2a:3d:7b:c7:a3:
9a:3b:19:ba:c2:04:bc:06:8f:b1:c8:61:aa:2e:46:
0a:50:6a:2a:aa:c3:81:2a:df:ba:a8:ba:8e:4c:43:
07:44:38:77:d4:21:33:9b:ab:0b:66:d4:c0:92:55:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:9B:41:41:14:98:0C:6D:DB:01:D7:25:DF:94:ED:FE:B2:69:12
X509v3 Authority Key Identifier:
keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/6ribQUEUmAxt2wHXJd-U7f6yaRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.232.0/22
Signature Algorithm: sha256WithRSAEncryption
02:4b:e8:45:a6:0a:a6:d0:3d:41:0d:42:5c:f3:56:63:cb:cf:
dd:3d:c3:9b:81:00:4f:4d:28:f2:59:bf:fc:98:d3:68:3f:e6:
e4:0a:3a:de:61:50:e6:be:00:1a:d3:69:4a:88:a9:03:2b:48:
78:57:1b:f8:e0:93:32:2d:07:9f:5a:9f:3f:bc:75:cb:ba:75:
b4:50:dc:74:35:7f:43:1c:d9:47:31:c9:d1:ce:d0:71:be:de:
3f:87:a2:00:b6:01:53:a1:83:9c:8a:07:8b:9a:5f:eb:e3:80:
51:ea:b3:80:c8:f9:38:96:31:c6:93:b8:65:9c:7d:61:4c:0f:
bd:2b:dc:98:01:de:26:ab:64:26:3c:86:d7:6e:6a:16:29:5a:
96:fb:b1:a4:c0:53:92:13:5c:a4:a2:75:94:a0:c0:2b:08:d2:
54:8d:83:8c:d0:fc:ac:83:c1:bc:f0:6f:b4:87:5c:e5:6d:d3:
0d:bc:b4:66:02:a2:b9:2a:f5:c5:c6:13:d5:dc:c2:97:5d:e4:
41:2e:97:ef:bf:64:7d:22:02:b1:61:11:f6:50:fe:df:b9:a6:
90:68:f2:ae:85:c4:8b:c1:5f:b0:19:e4:ae:b8:40:34:51:eb:
99:ba:3d:99:1c:7a:0f:f2:83:ed:0d:09:ba:98:66:87:a0:2f:
6f:84:d2:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRCZAKsDJf1TOG0jsuDBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiY2FiZTY0OTBmYThiZDU3MjQ0MGZkNjYxNmE4NDMwZWU2
NmQxNTQwHhcNMjUwMTAxMDk0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWI4OWI0MTQxMTQ5ODBjNmRkYjAxZDcyNWRmOTRlZGZlYjI2OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP8UZe4k3zNSghtaUg2MyWqkZ9Rs
VvP4MYSvUohuoPP9AnuqY4xB7pdpys1e+OYjsfnB11dS182xZjEMhvf7HuLVTcpJ
LVi98i9BG6QAKA4W/KwgwuHNaar0Rmdw/dOeAizERabZwaSA5dM9VwP4MRSA3DLb
qF3d64tXyOLJPlYynRbHUKyj+zVAhKltUdnBbXbm19rygcg57tz/xomrMHZAZ3HD
Fs2u/xEXeOmX9SdP9g9UB+xHFxDK6zbKmu+jImvb4Tqvy9UrrNaFKj17x6OaOxm6
wgS8Bo+xyGGqLkYKUGoqqsOBKt+6qLqOTEMHRDh31CEzm6sLZtTAklVu0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOq4m0FBFJgMbdsB1yXflO3+smkSMB8GA1UdIwQY
MBaAFHvKvmSQ+ovVckQP1mFqhDDuZtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzkt
MWZlY2UwNTkyZTliLzEvNnJpYlFVRVVtQXh0MndIWEpkLVU3ZjZ5YVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzktMWZlY2UwNTkyZTli
LzEvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYToMA0G
CSqGSIb3DQEBCwUAA4IBAQACS+hFpgqm0D1BDUJc81Zjy8/dPcObgQBPTSjyWb/8
mNNoP+bkCjreYVDmvgAa02lKiKkDK0h4Vxv44JMyLQefWp8/vHXLunW0UNx0NX9D
HNlHMcnRztBxvt4/h6IAtgFToYOcigeLml/r44BR6rOAyPk4ljHGk7hlnH1hTA+9
K9yYAd4mq2QmPIbXbmoWKVqW+7GkwFOSE1ykonWUoMArCNJUjYOM0Pysg8G88G+0
h1zlbdMNvLRmAqK5KvXFxhPV3MKXXeRBLpfvv2R9IgKxYRH2UP7fuaaQaPKuhcSL
wV+wGeSuuEA0UeuZuj2ZHHoP8oPtDQm6mGaHoC9vhNI8
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:15 2025 by rpki-client