Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/BFvGU9aoz7rWEn9pDQTts3L78L8.roa
File: BFvGU9aoz7rWEn9pDQTts3L78L8.roa (raw, json)
Hash identifier: +uFs0aOYRrvBvDpuqjNUWAjstxrFKIih9wDuEmZp20g=
Subject key identifier: 04:5B:C6:53:D6:A8:CF:BA:D6:12:7F:69:0D:04:ED:B3:72:FB:F0:BF
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 019421B1B085F053CE462A130E773E65FF00
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/BFvGU9aoz7rWEn9pDQTts3L78L8.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34326
IP address blocks: 77.240.244.0/22 maxlen: 22
178.236.192.0/22 maxlen: 22
193.138.188.0/24 maxlen: 24
193.138.189.0/24 maxlen: 24
193.138.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b0:85:f0:53:ce:46:2a:13:0e:77:3e:65:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=045bc653d6a8cfbad6127f690d04edb372fbf0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:19:7f:69:c7:cd:78:0f:e5:4d:d6:19:4e:
27:4f:2b:6e:30:37:26:d6:f5:c4:ce:18:d1:98:a4:
80:ab:86:73:c2:a4:22:2e:99:3c:27:6b:ac:4e:b5:
c9:fb:31:df:32:f2:6a:ec:52:54:90:37:08:36:12:
fd:6c:84:65:28:50:c7:f3:b4:c9:95:bd:4e:b8:f7:
f3:21:d7:a0:7c:f1:07:e3:17:21:d9:79:10:7e:83:
e9:8a:05:57:85:ac:d1:11:2f:7e:f4:b1:ed:65:e7:
8a:86:e5:d2:37:8e:c7:9f:bf:19:99:70:99:0a:22:
82:90:ff:d8:15:3d:50:e2:24:d0:5f:2d:a0:1d:06:
5a:5a:1f:e8:7a:62:d1:a8:86:de:6d:4a:d4:e8:32:
8e:6b:ff:37:64:c7:b4:75:04:1b:35:ba:7b:d5:70:
05:40:68:cc:42:c6:f4:9a:16:93:23:07:53:67:06:
f8:a8:a8:e8:f8:4c:cc:b3:05:62:59:bd:51:14:32:
09:4f:37:89:fd:e8:62:1e:06:ce:9d:d3:83:54:11:
d8:86:8f:79:ff:a5:1a:28:c3:6b:92:65:e0:0e:61:
5d:b3:56:04:e1:41:5a:6b:1e:9c:e0:c0:7d:8f:11:
76:56:c1:84:eb:b0:07:23:9d:48:0f:dc:d8:d6:35:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:C6:53:D6:A8:CF:BA:D6:12:7F:69:0D:04:ED:B3:72:FB:F0:BF
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/BFvGU9aoz7rWEn9pDQTts3L78L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.244.0/22
178.236.192.0/22
193.138.188.0-193.138.190.255
Signature Algorithm: sha256WithRSAEncryption
26:41:69:cd:62:69:0e:e4:d9:a1:35:e3:e5:87:78:8b:d6:a4:
51:9e:b9:07:ab:76:f2:e7:72:4d:ab:65:ab:2f:17:92:90:33:
bb:cb:e9:d1:74:b8:15:30:43:69:91:42:40:ef:b5:c8:9f:3e:
46:44:d4:24:a6:e2:80:ef:4a:f1:c7:9c:eb:5b:a1:ff:f0:28:
14:0d:b0:d7:0d:b7:fe:6d:6e:a7:b7:b4:b7:be:1b:68:b1:e4:
47:39:5f:6d:58:81:a0:42:36:0b:33:34:7d:ad:96:a9:bd:54:
63:22:3b:f6:73:c7:40:5a:19:bf:c6:4c:22:f5:e8:5a:9a:8a:
86:a1:de:ec:64:8c:22:90:64:b2:39:21:44:7d:2b:ae:8a:72:
02:a3:ac:30:af:14:67:d6:dc:3c:14:4f:3b:f8:ba:e3:7a:56:
e3:00:c1:3b:f0:33:c8:af:b4:2a:94:e6:5b:cd:bd:25:12:1e:
c4:85:7f:ce:14:7d:f9:33:01:31:70:c4:7b:ba:56:3b:27:cf:
36:06:a4:ca:07:bc:ca:a2:49:b9:a1:de:0a:7a:ff:96:40:83:
2a:8d:88:cf:57:3d:6b:9e:00:53:9d:23:cb:72:57:52:ed:36:
46:43:38:a5:69:e0:0d:ec:e0:be:40:35:93:20:9b:57:44:98:
0c:7f:9f:be
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQhsbCF8FPORioTDnc+Zf8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmN2YwYjZkZDEyYTM3NGJjMjkzNWNiZTlkZjYxZTA5M2I1
NWJlZjYwHhcNMjUwMTAxMTE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDViYzY1M2Q2YThjZmJhZDYxMjdmNjkwZDA0ZWRiMzcyZmJmMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbYZf2nHzXgP5U3WGU4nTytuMDcm
1vXEzhjRmKSAq4ZzwqQiLpk8J2usTrXJ+zHfMvJq7FJUkDcINhL9bIRlKFDH87TJ
lb1OuPfzIdegfPEH4xch2XkQfoPpigVXhazRES9+9LHtZeeKhuXSN47Hn78ZmXCZ
CiKCkP/YFT1Q4iTQXy2gHQZaWh/oemLRqIbebUrU6DKOa/83ZMe0dQQbNbp71XAF
QGjMQsb0mhaTIwdTZwb4qKjo+EzMswViWb1RFDIJTzeJ/ehiHgbOndODVBHYho95
/6UaKMNrkmXgDmFds1YE4UFaax6c4MB9jxF2VsGE67AHI51ID9zY1jX1/QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFARbxlPWqM+61hJ/aQ0E7bNy+/C/MB8GA1UdIwQY
MBaAFL9/C23RKjdLwpNcvp32Hgk7Vb72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGIt
ZjdkMTEzMzlkYmFkLzEvQkZ2R1U5YW96N3JXRW45cERRVHRzM0w3OEw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGItZjdkMTEzMzlkYmFk
LzEvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCTfD0AwQC
suzAMAwDBALBirwDBADBir4wDQYJKoZIhvcNAQELBQADggEBACZBac1iaQ7k2aE1
4+WHeIvWpFGeuQerdvLnck2rZasvF5KQM7vL6dF0uBUwQ2mRQkDvtcifPkZE1CSm
4oDvSvHHnOtbof/wKBQNsNcNt/5tbqe3tLe+G2ix5Ec5X21YgaBCNgszNH2tlqm9
VGMiO/Zzx0BaGb/GTCL16Fqaioah3uxkjCKQZLI5IUR9K66KcgKjrDCvFGfW3DwU
Tzv4uuN6VuMAwTvwM8ivtCqU5lvNvSUSHsSFf84UffkzATFwxHu6VjsnzzYGpMoH
vMqiSbmh3gp6/5ZAgyqNiM9XPWueAFOdI8tyV1LtNkZDOKVp4A3s4L5ANZMgm1dE
mAx/n74=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net