Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/BzvUzHnovBo7nbKCDh0scDdCP1E.roa
File: BzvUzHnovBo7nbKCDh0scDdCP1E.roa (raw, json)
Hash identifier: XCMbu5qQUTLpP7fneXdNrRlDCpPbQNcvgmAEextNWVg=
Subject key identifier: 07:3B:D4:CC:79:E8:BC:1A:3B:9D:B2:82:0E:1D:2C:70:37:42:3F:51
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 0195F163E1C76B204F7F919480A2D6A30BC9
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/BzvUzHnovBo7nbKCDh0scDdCP1E.roa
Signing time: Tue 01 Apr 2025 12:46:49 +0000
ROA not before: Tue 01 Apr 2025 12:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44914
IP address blocks: 78.28.0.0/19 maxlen: 19
78.28.32.0/19 maxlen: 19
78.28.32.0/21 maxlen: 21
78.28.40.0/21 maxlen: 21
78.28.48.0/21 maxlen: 21
78.28.48.0/24 maxlen: 24
78.28.56.0/21 maxlen: 21
78.28.56.0/23 maxlen: 23
78.28.58.0/23 maxlen: 23
78.28.60.0/22 maxlen: 22
78.28.62.0/23 maxlen: 23
188.125.128.0/20 maxlen: 20
188.125.144.0/22 maxlen: 22
188.125.148.0/22 maxlen: 22
188.125.152.0/22 maxlen: 22
188.125.157.0/24 maxlen: 24
188.125.158.0/24 maxlen: 24
188.125.159.0/24 maxlen: 24
2a02:e88:8000::/48 maxlen: 48
2a02:e88:8100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f1:63:e1:c7:6b:20:4f:7f:91:94:80:a2:d6:a3:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: Apr 1 12:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=073bd4cc79e8bc1a3b9db2820e1d2c7037423f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:0f:33:f0:0e:74:a4:aa:45:8f:0a:9a:c5:
e3:ba:8c:7b:97:f6:57:be:49:43:bd:df:5d:b0:4b:
b1:b8:ed:4c:50:df:86:c1:40:34:9f:36:05:aa:4f:
46:29:5b:f4:75:3d:f8:e7:e5:76:fc:d0:e1:f3:32:
f3:de:02:a9:d5:2c:2e:fd:25:d2:7a:89:66:4d:c1:
7b:7e:1e:2d:2b:01:94:6f:13:68:b3:8d:f9:dd:7f:
3f:a0:f6:03:51:8c:55:c2:d3:6f:52:6b:31:67:ff:
eb:c2:97:a7:75:38:13:99:88:d3:2e:f5:36:46:f0:
5e:34:2d:1b:50:14:00:09:b8:c9:13:2a:4e:46:d1:
73:b6:e2:1b:3f:c7:ea:2b:b9:8f:11:5b:aa:3f:a5:
85:2e:53:50:fb:21:79:6b:d4:46:33:0a:4e:6c:66:
8e:31:b5:1e:f2:ee:e3:6e:7b:23:72:f7:a9:1b:fd:
12:e6:1a:84:87:be:5a:b3:4f:9d:b5:c0:d6:34:4b:
e7:7e:69:a8:8d:1d:f6:6d:2c:17:b5:09:2b:bc:2c:
1c:e7:fc:5e:37:cd:d2:6e:ff:d5:b5:23:1c:77:b8:
c9:a7:7b:e4:09:27:20:4a:49:f1:29:6c:ec:8f:b9:
18:a0:cb:7a:5d:a8:d7:11:61:a4:d9:9a:5f:46:62:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:D4:CC:79:E8:BC:1A:3B:9D:B2:82:0E:1D:2C:70:37:42:3F:51
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/BzvUzHnovBo7nbKCDh0scDdCP1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.0.0/18
188.125.128.0-188.125.155.255
188.125.157.0-188.125.159.255
IPv6:
2a02:e88:8000::/48
2a02:e88:8100::/48
Signature Algorithm: sha256WithRSAEncryption
1d:12:75:88:d4:75:d8:96:e7:67:89:09:e6:dc:fa:b0:88:9d:
07:33:ac:21:cf:7e:7e:21:96:bd:37:37:b0:2e:48:8b:f0:63:
da:7e:16:83:63:46:89:2e:32:ad:3c:a7:2d:b0:78:b8:52:b3:
8a:1b:54:b5:9b:b4:e8:8c:90:12:e7:f1:c3:5a:38:00:dc:4d:
36:55:2b:5c:f2:9e:80:8c:f5:fc:b9:2c:91:bc:e7:c1:d3:5f:
80:99:1f:51:c1:0b:c9:19:b4:1a:7e:ab:94:e1:d5:c7:a1:c1:
44:6a:63:3d:12:ec:32:a7:52:11:1b:c2:67:99:ee:3c:90:cc:
cc:12:b8:79:20:1d:de:e0:77:04:34:3c:15:cd:ee:02:44:80:
d5:85:b2:af:56:20:f9:be:5f:18:86:f9:d8:d2:97:b3:3e:91:
0d:a2:76:77:ef:ab:6b:bb:44:32:b1:c9:8b:16:e4:7b:95:cf:
6c:5c:ad:3b:0a:67:59:d6:29:4a:f4:5d:b6:ca:e3:35:fd:6d:
29:9a:a2:5d:a9:6e:27:ca:72:79:7c:29:d7:b9:c6:a1:f2:17:
d7:13:e9:5f:ec:88:90:99:f6:6b:3c:c1:d2:94:9e:a2:09:f1:
fb:6b:17:51:44:83:29:58:62:eb:ee:c7:a1:e6:d1:6c:0c:c9:
62:91:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net