Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/bmmsoMxYv54D3Mc8ZLTs5VomINo.roa
File: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (raw, json)
Hash identifier: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=
Subject key identifier: 6E:69:AC:A0:CC:58:BF:9E:03:DC:C7:3C:64:B4:EC:E5:5A:26:20:DA
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019422FB01098881F9E01C8FC8A6E92684AE
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/bmmsoMxYv54D3Mc8ZLTs5VomINo.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39232
IP address blocks: 46.18.64.0/21 maxlen: 21
46.18.64.0/22 maxlen: 22
46.18.64.0/24 maxlen: 24
46.18.65.0/24 maxlen: 24
46.18.66.0/24 maxlen: 24
46.18.67.0/24 maxlen: 24
46.18.68.0/22 maxlen: 22
46.18.68.0/24 maxlen: 24
46.18.69.0/24 maxlen: 24
46.18.70.0/24 maxlen: 24
46.18.71.0/24 maxlen: 24
89.219.36.0/22 maxlen: 22
89.219.36.0/23 maxlen: 23
89.219.38.0/23 maxlen: 23
89.219.40.0/21 maxlen: 21
89.219.40.0/22 maxlen: 22
89.219.44.0/22 maxlen: 22
89.219.48.0/20 maxlen: 20
89.219.48.0/21 maxlen: 21
89.219.56.0/21 maxlen: 21
89.219.132.0/23 maxlen: 23
89.219.132.0/24 maxlen: 24
89.219.133.0/24 maxlen: 24
89.219.155.0/24 maxlen: 24
89.219.156.0/22 maxlen: 22
89.219.156.0/23 maxlen: 23
89.219.158.0/23 maxlen: 23
89.219.160.0/24 maxlen: 24
89.219.163.0/24 maxlen: 24
89.219.164.0/22 maxlen: 22
89.219.164.0/23 maxlen: 23
89.219.166.0/23 maxlen: 23
89.219.169.0/24 maxlen: 24
89.219.170.0/23 maxlen: 23
89.219.170.0/24 maxlen: 24
89.219.171.0/24 maxlen: 24
89.219.172.0/22 maxlen: 22
89.219.172.0/23 maxlen: 23
89.219.174.0/23 maxlen: 23
89.219.176.0/20 maxlen: 20
89.219.176.0/21 maxlen: 21
89.219.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:01:09:88:81:f9:e0:1c:8f:c8:a6:e9:26:84:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e69aca0cc58bf9e03dcc73c64b4ece55a2620da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:6c:b5:f7:95:67:d8:68:24:b3:26:c9:56:
92:59:c2:d7:b3:cc:d4:41:30:34:88:31:24:f9:be:
b6:57:2d:0f:8f:6f:0b:d4:9c:82:30:af:ca:f0:8a:
0c:6a:ca:f0:52:d1:6c:6d:63:da:48:09:4e:49:36:
0f:0a:b3:e3:b9:e0:a8:49:e4:5c:34:d3:45:dd:9c:
7a:64:ad:34:e2:34:93:ab:77:29:4a:14:92:3a:cb:
24:a0:90:f5:4a:da:29:2e:a4:fe:da:1f:08:45:65:
01:dc:05:43:c3:f5:27:b7:29:03:18:e6:6e:87:dc:
99:c4:70:7b:80:58:b2:da:3b:26:c7:ba:0a:64:e4:
aa:ef:7e:26:af:ec:65:29:32:85:c5:66:90:02:64:
af:28:aa:0d:bd:a8:75:54:c1:64:21:08:9d:91:14:
5a:9f:39:45:e6:82:b8:2a:e2:30:55:9f:5a:04:74:
a5:16:d3:0f:22:9d:ed:82:7b:68:26:da:10:0b:03:
72:d0:42:40:cf:32:2a:3b:76:29:f6:f6:81:e0:4c:
cc:f8:7b:b7:b8:4b:3c:4b:f9:78:8c:52:6f:94:cf:
78:fd:cb:86:c3:e2:ad:5e:80:15:d9:10:c5:9a:b3:
0a:ed:c1:8e:b7:46:e0:e4:0e:ae:97:9a:b5:bc:11:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:69:AC:A0:CC:58:BF:9E:03:DC:C7:3C:64:B4:EC:E5:5A:26:20:DA
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/bmmsoMxYv54D3Mc8ZLTs5VomINo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.64.0/21
89.219.36.0-89.219.63.255
89.219.132.0/23
89.219.155.0-89.219.160.255
89.219.163.0-89.219.167.255
89.219.169.0-89.219.191.255
Signature Algorithm: sha256WithRSAEncryption
31:04:03:97:bb:e5:0c:7f:17:cf:32:e8:e7:0d:28:91:10:7b:
d0:38:56:32:42:20:ae:bf:d2:7b:a7:47:5e:61:ff:83:79:d1:
f9:90:d1:75:2c:51:c8:23:2d:e1:83:7f:b5:65:65:3d:7b:9f:
50:82:ef:25:84:1b:31:fb:69:04:fe:c2:5e:37:03:39:51:43:
d0:4a:9e:47:bb:c2:d6:56:f2:11:48:74:6b:63:03:5d:c2:be:
d9:6b:2a:b2:b4:bf:77:ee:6f:98:07:3c:52:1b:95:32:ab:71:
cd:b4:80:9a:38:94:74:ee:45:91:02:67:33:fc:c7:48:e7:c4:
a6:a3:3b:d0:8a:ef:ef:eb:bb:7d:56:60:88:5a:0b:43:45:7e:
39:ae:ab:00:f3:f5:60:24:e4:ca:40:23:48:93:04:4e:90:94:
30:bb:53:f1:eb:e3:f2:d9:6e:c1:0f:e2:20:63:89:5c:74:7f:
68:a9:85:41:52:b1:63:3d:8c:c7:5e:d4:ce:b4:cf:11:1d:f9:
78:6d:b6:a6:44:c4:a5:ca:c2:78:81:ce:99:be:39:be:f3:33:
1f:d1:e8:c2:24:7d:94:26:48:c9:ec:9a:22:3e:97:ec:5a:aa:
b8:c5:fd:d6:86:6f:8e:3e:d2:cd:45:6c:ee:10:2c:bf:d4:f8:
a4:e8:e4:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:25 2025 by rpki-client