Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/BREbZFN6Rhj85h57UryeZAHjLKk.roa
File: BREbZFN6Rhj85h57UryeZAHjLKk.roa (raw, json)
Hash identifier: tLB1oKUW+Dho1hfNPpoz6yfVQeh4dvXZuSRcojuXxOA=
Subject key identifier: 05:11:1B:64:53:7A:46:18:FC:E6:1E:7B:52:BC:9E:64:01:E3:2C:A9
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 01942521C499BF8A2D34FA86A936D5F33898
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/BREbZFN6Rhj85h57UryeZAHjLKk.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34343
IP address blocks: 85.12.56.0/24 maxlen: 24
91.148.192.0/24 maxlen: 24
91.148.224.0/22 maxlen: 24
91.148.228.0/22 maxlen: 24
91.148.232.0/22 maxlen: 24
91.148.236.0/22 maxlen: 24
91.148.240.0/22 maxlen: 24
91.148.244.0/22 maxlen: 24
176.124.71.0/24 maxlen: 24
185.91.29.0/24 maxlen: 24
193.138.220.0/24 maxlen: 24
195.200.84.0/24 maxlen: 24
195.200.85.0/24 maxlen: 24
2a01:788:aaaa::/48 maxlen: 48
2a01:788:aaab::/48 maxlen: 48
2a01:788:aaac::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c4:99:bf:8a:2d:34:fa:86:a9:36:d5:f3:38:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05111b64537a4618fce61e7b52bc9e6401e32ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:05:31:f4:48:36:47:ac:32:9d:72:16:5f:
8f:14:19:60:27:2e:ad:9a:3b:93:b9:b9:83:3f:37:
62:e4:ba:07:4f:2e:e6:e3:1b:f6:63:68:05:5f:3e:
17:d7:8a:ff:19:50:11:7c:a1:d1:71:7f:8a:ba:fa:
18:91:59:b7:ee:df:b5:9d:4c:11:43:c6:f7:49:5b:
00:31:b3:ca:38:64:fe:0a:7f:c7:e9:6c:6b:54:f9:
4e:45:f2:42:12:22:07:9e:2e:3a:a1:dc:21:dd:7b:
b6:7a:13:00:a6:8a:41:5a:bd:dc:5a:bb:8a:17:8e:
ea:4f:a5:83:0a:83:fa:67:81:8a:67:c5:83:17:51:
3a:b6:3c:84:1e:d9:52:14:df:24:e7:42:ab:4a:41:
63:c7:b8:d2:cc:4e:bd:4b:30:8c:ad:83:09:85:28:
01:77:61:c0:12:7d:ca:7b:07:04:09:b0:c5:f0:ff:
d0:56:07:39:14:e6:52:8c:b8:c9:13:c5:1d:bb:c5:
3c:6f:99:e5:b4:41:53:f2:fb:ab:1c:71:68:b1:ae:
10:13:35:a0:26:99:92:0e:ba:39:10:b2:80:85:c5:
3f:31:55:11:1e:4e:13:03:68:89:d0:11:b0:0c:88:
55:f1:91:3f:a5:af:b1:55:be:57:5f:e9:7e:c7:0c:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:11:1B:64:53:7A:46:18:FC:E6:1E:7B:52:BC:9E:64:01:E3:2C:A9
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/BREbZFN6Rhj85h57UryeZAHjLKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.12.56.0/24
91.148.192.0/24
91.148.224.0-91.148.247.255
176.124.71.0/24
185.91.29.0/24
193.138.220.0/24
195.200.84.0/23
IPv6:
2a01:788:aaaa::-2a01:788:aaac:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
76:b3:ac:1c:a9:b0:35:bc:66:7d:9c:ee:74:68:09:3a:03:2f:
72:a9:df:29:a9:83:4e:08:c8:fa:e6:d2:d2:80:61:69:bf:f9:
5f:53:e3:30:ef:9f:84:a6:0a:c3:47:5a:d6:48:de:44:10:8f:
77:a7:b2:52:4c:c9:c7:f0:71:61:42:79:29:85:8d:9d:e9:1d:
96:28:da:e8:01:15:08:b8:98:b8:a5:80:43:44:07:1d:34:31:
22:1d:83:27:eb:e7:15:49:be:ec:0c:b7:9e:f4:61:6f:c4:83:
7c:11:9e:ae:43:37:6e:f8:46:e7:ef:3a:cf:dd:b7:8c:cb:83:
0e:69:87:d8:a7:eb:17:7e:48:e5:17:c3:a5:4f:06:60:24:81:
40:70:e4:93:31:dc:84:73:60:92:d2:59:9e:1d:25:20:de:6b:
70:e0:35:44:50:c5:57:b2:a1:51:8c:95:8c:d6:38:b5:f8:36:
b1:7d:3c:64:79:b6:1d:26:3d:9b:1f:70:a0:83:05:8b:34:48:
f0:6a:0d:76:87:a3:29:20:cd:aa:af:a3:63:26:36:5f:37:63:
6d:06:4c:bf:ee:8c:b3:39:23:6f:c6:09:5c:fc:e3:0f:1f:54:
4b:ee:48:b8:db:79:6d:ca:cc:e3:64:a2:0a:2f:bc:ae:cf:1f:
f2:a6:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:23:40 2025 by rpki-client on console.sobornost.net