Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/Bjn95uhuPOZfmvC5Hlwb47V9emA.roa
File: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (raw, json)
Hash identifier: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=
Subject key identifier: 06:39:FD:E6:E8:6E:3C:E6:5F:9A:F0:B9:1E:5C:1B:E3:B5:7D:7A:60
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 01941FFA24737D0C7DF58F915BBDF9F6166E
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/Bjn95uhuPOZfmvC5Hlwb47V9emA.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30925
IP address blocks: 83.98.224.0/19 maxlen: 24
109.109.96.0/19 maxlen: 24
185.26.56.0/22 maxlen: 24
185.34.156.0/22 maxlen: 24
185.34.168.0/22 maxlen: 24
185.142.248.0/22 maxlen: 24
2a02:988::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:24:73:7d:0c:7d:f5:8f:91:5b:bd:f9:f6:16:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0639fde6e86e3ce65f9af0b91e5c1be3b57d7a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9f:de:3b:e5:7c:f4:fd:e0:97:a1:f0:c1:ba:
c7:29:7d:c5:5e:f7:8b:1a:d7:31:b2:27:8d:b0:c9:
f4:3d:0c:eb:ee:b4:e5:70:ed:58:38:bb:58:a6:55:
c3:7d:ef:4b:3c:50:85:d9:49:b1:19:a4:81:1d:2b:
b6:87:ac:c4:37:d5:83:72:8b:d9:6e:8e:6b:c9:1a:
30:43:78:87:8e:1b:d2:d2:19:9d:b7:a0:a4:d0:03:
61:23:83:fa:97:a4:b9:4f:6f:37:c3:0a:b8:4a:b4:
a2:07:54:05:3e:06:82:ab:2a:59:5c:94:6c:27:0a:
09:34:72:cb:e1:43:d1:ac:81:d2:8d:27:e6:ff:46:
0c:98:9c:52:73:5d:5d:e1:05:0e:b9:bc:8b:5c:31:
85:35:55:bb:3c:b2:ac:ab:5f:29:28:19:01:d1:64:
06:45:75:a3:7d:08:33:4e:c3:4a:47:15:d9:5e:16:
23:fa:56:8f:a8:68:a7:be:10:c7:54:c1:87:2f:5a:
35:f8:68:c8:0a:06:64:33:ef:45:50:09:a4:e0:f0:
00:6a:86:9a:73:ed:e0:a6:37:20:60:32:c6:9f:af:
66:6b:b8:18:25:03:ee:4f:82:6b:37:0e:a7:c9:ee:
5f:9e:cf:ab:bb:d6:18:aa:cc:36:c1:db:2c:7f:71:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:39:FD:E6:E8:6E:3C:E6:5F:9A:F0:B9:1E:5C:1B:E3:B5:7D:7A:60
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/Bjn95uhuPOZfmvC5Hlwb47V9emA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.224.0/19
109.109.96.0/19
185.26.56.0/22
185.34.156.0/22
185.34.168.0/22
185.142.248.0/22
IPv6:
2a02:988::/32
Signature Algorithm: sha256WithRSAEncryption
38:ed:cd:7a:14:c5:f3:4c:6a:d5:d3:32:33:8d:2a:87:5a:69:
b9:89:24:31:58:e0:17:37:f1:05:57:af:3b:3d:c9:cd:a2:58:
5d:02:4c:84:40:b8:d9:a3:77:42:1c:35:e5:4f:f6:c5:58:4d:
c9:39:79:5b:b6:d6:16:93:6c:71:8b:36:56:67:15:8a:f6:40:
4e:30:58:0e:2f:10:6f:e6:d5:56:86:1f:32:fd:4e:63:90:80:
10:35:97:55:cf:d1:54:2d:7a:cc:6a:75:37:a6:92:ab:f2:86:
30:69:c0:98:5d:a4:87:20:b4:57:17:31:67:c2:91:7a:d0:27:
62:bd:c1:34:74:04:d1:86:0b:f7:dc:6e:34:a6:a1:b5:ec:36:
6f:51:ea:11:27:34:a6:c9:37:63:a0:8e:19:84:f3:b4:31:3e:
53:48:eb:8c:83:45:84:b5:2c:00:de:5d:6a:eb:42:e3:c7:fa:
01:bf:c1:7f:47:1f:df:6f:2b:8c:c9:89:1c:d5:89:cb:c3:83:
ae:08:4e:cd:20:ed:9e:c1:83:7c:d9:6f:77:9b:e0:92:ff:0f:
ca:77:e4:51:6b:25:3f:18:0e:b6:77:24:c8:8c:f6:f4:42:37:
47:25:cb:20:11:a9:83:94:71:c4:c5:d5:f2:14:ef:6b:93:c5:
33:4d:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net