Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/BMhhovXMuBpKJMmG-rBz-nuJzd4.roa
File: BMhhovXMuBpKJMmG-rBz-nuJzd4.roa (raw, json)
Hash identifier: sNEztFGkvH7v3y29OhQmoouHMsRsRH9HNC026mey6ck=
Subject key identifier: 04:C8:61:A2:F5:CC:B8:1A:4A:24:C9:86:FA:B0:73:FA:7B:89:CD:DE
Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial: 0194266B40FF0FE4D9D0067ADED02E236912
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/BMhhovXMuBpKJMmG-rBz-nuJzd4.roa
Signing time: Thu 02 Jan 2025 09:49:10 +0000
ROA not before: Thu 02 Jan 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 37.114.72.0/21 maxlen: 32
78.110.16.0/20 maxlen: 32
80.245.208.0/20 maxlen: 32
95.131.232.0/21 maxlen: 32
185.56.252.0/22 maxlen: 32
195.38.30.0/24 maxlen: 32
217.168.160.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:40:ff:0f:e4:d9:d0:06:7a:de:d0:2e:23:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
Validity
Not Before: Jan 2 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04c861a2f5ccb81a4a24c986fab073fa7b89cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:26:27:00:67:fd:38:10:ad:dd:bb:0a:1e:
e7:ee:65:01:00:ab:7a:2a:a2:87:e2:ef:1d:5b:9e:
65:3a:e7:60:22:88:d3:9d:dd:1d:4f:2c:06:41:bf:
5d:05:69:7e:d2:18:64:fc:9d:c0:4c:23:00:7a:bf:
5d:b1:17:4a:68:f3:81:ff:bd:b2:5f:a9:75:90:4d:
36:9f:07:1f:7a:d7:bb:16:94:21:c1:63:79:8b:d4:
7c:1e:48:14:b9:75:b6:7f:b3:80:e6:61:2e:d1:f8:
f0:0b:48:e6:bb:e8:0d:70:2c:d2:46:ab:2f:8e:5d:
9c:12:a8:59:12:8a:4c:f1:de:08:db:e2:b8:1a:ca:
74:1f:6a:f0:4c:59:f2:71:18:06:db:97:34:73:8d:
ea:d6:7b:5e:d6:9b:3b:1d:7c:b9:38:f0:93:e2:72:
5f:20:22:17:ef:61:0f:1f:2b:c0:c7:26:36:b4:09:
de:11:d6:7c:4a:83:53:5b:b0:dd:96:57:df:87:d6:
02:e2:ff:f7:fd:c9:dd:03:c9:75:f7:23:67:7e:f3:
52:65:2b:f1:37:0a:a4:ea:34:cb:78:a8:f1:62:8c:
77:d4:2f:15:95:8e:c6:cf:01:16:91:32:2b:72:70:
ce:14:e3:7e:11:c8:81:7c:8d:45:07:53:3f:3c:91:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:61:A2:F5:CC:B8:1A:4A:24:C9:86:FA:B0:73:FA:7B:89:CD:DE
X509v3 Authority Key Identifier:
keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/BMhhovXMuBpKJMmG-rBz-nuJzd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.72.0/21
78.110.16.0/20
80.245.208.0/20
95.131.232.0/21
185.56.252.0/22
195.38.30.0/24
217.168.160.0/20
Signature Algorithm: sha256WithRSAEncryption
65:31:4e:4c:c7:7f:55:b4:4b:ab:da:73:26:5e:30:0b:04:40:
3c:34:85:a5:05:21:3c:96:c9:93:70:a1:d6:c8:3a:e1:d7:59:
9a:44:fb:28:ad:9f:56:86:e8:f9:b4:d7:df:b0:17:92:e1:b7:
81:80:c4:63:04:ed:4f:1c:e6:67:73:47:f3:c3:8e:5f:31:90:
1a:77:f3:73:4c:2c:cd:28:0d:b2:3c:47:0b:3a:56:a0:67:5e:
f1:d6:9c:25:d1:17:34:f2:bd:b2:fc:a3:ed:b6:a7:67:17:0a:
cc:1e:e2:ba:e7:3b:f2:eb:cc:bf:c5:ee:db:6c:bf:32:48:bc:
2b:3c:07:32:66:d4:1d:69:03:91:50:4e:08:84:70:9e:aa:16:
b6:2f:b7:65:65:00:88:5c:2c:47:a3:83:90:6b:d2:e4:3b:72:
f8:c7:ac:3d:83:e6:b8:df:31:9b:4d:3c:84:67:00:da:4b:f8:
ec:1a:f2:67:b0:97:fb:bc:f4:19:13:f3:f6:06:ea:2a:83:c3:
f7:f8:cf:44:0f:58:09:e7:89:fa:1f:17:21:92:39:9c:42:ea:
b1:15:89:49:e6:0e:0e:c3:96:06:48:16:8f:1e:4a:db:b0:51:
f9:2a:61:f8:86:ee:83:72:f8:bd:0e:34:60:1a:26:0b:c6:7f:
43:af:cd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:30 2025 by rpki-client