Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/BFmKhRFnCi2AJyutOk-Yxml708c.roa
File: BFmKhRFnCi2AJyutOk-Yxml708c.roa (raw, json)
Hash identifier: 30fgE+QkDlz/nOmXI9WzL3BXCW8rLDMyhnps4H9jCSs=
Subject key identifier: 04:59:8A:85:11:67:0A:2D:80:27:2B:AD:3A:4F:98:C6:69:7B:D3:C7
Certificate issuer: /CN=4b632a758b59309e861089d6553aee067a6b353f
Certificate serial: 019420D5A70773E9B57DBE26289AC0B09B11
Authority key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/BFmKhRFnCi2AJyutOk-Yxml708c.roa
Signing time: Wed 01 Jan 2025 07:47:40 +0000
ROA not before: Wed 01 Jan 2025 07:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9150
IP address blocks: 185.67.64.0/22 maxlen: 22
185.67.64.0/24 maxlen: 24
185.67.65.0/24 maxlen: 24
185.67.66.0/24 maxlen: 24
185.67.67.0/24 maxlen: 24
212.83.192.0/18 maxlen: 18
212.83.192.0/24 maxlen: 24
212.83.193.0/24 maxlen: 24
212.83.194.0/24 maxlen: 24
212.83.195.0/24 maxlen: 24
212.83.196.0/24 maxlen: 24
212.83.197.0/24 maxlen: 24
212.83.198.0/24 maxlen: 24
212.83.199.0/24 maxlen: 24
212.83.200.0/24 maxlen: 24
212.83.201.0/24 maxlen: 24
212.83.202.0/24 maxlen: 24
212.83.203.0/24 maxlen: 24
212.83.204.0/24 maxlen: 24
212.83.205.0/24 maxlen: 24
212.83.206.0/24 maxlen: 24
212.83.207.0/24 maxlen: 24
212.83.208.0/24 maxlen: 24
212.83.209.0/24 maxlen: 24
212.83.210.0/24 maxlen: 24
212.83.211.0/24 maxlen: 24
212.83.212.0/24 maxlen: 24
212.83.213.0/24 maxlen: 24
212.83.214.0/24 maxlen: 24
212.83.215.0/24 maxlen: 24
212.83.216.0/24 maxlen: 24
212.83.217.0/24 maxlen: 24
212.83.218.0/24 maxlen: 24
212.83.219.0/24 maxlen: 24
212.83.220.0/24 maxlen: 24
212.83.221.0/24 maxlen: 24
212.83.222.0/24 maxlen: 24
212.83.223.0/24 maxlen: 24
212.83.224.0/24 maxlen: 24
212.83.225.0/24 maxlen: 24
212.83.226.0/24 maxlen: 24
212.83.227.0/24 maxlen: 24
212.83.228.0/24 maxlen: 24
212.83.229.0/24 maxlen: 24
212.83.230.0/24 maxlen: 24
212.83.231.0/24 maxlen: 24
212.83.232.0/24 maxlen: 24
212.83.233.0/24 maxlen: 24
212.83.234.0/24 maxlen: 24
212.83.235.0/24 maxlen: 24
212.83.236.0/24 maxlen: 24
212.83.237.0/24 maxlen: 24
212.83.238.0/24 maxlen: 24
212.83.239.0/24 maxlen: 24
212.83.240.0/24 maxlen: 24
212.83.241.0/24 maxlen: 24
212.83.242.0/24 maxlen: 24
212.83.243.0/24 maxlen: 24
212.83.244.0/24 maxlen: 24
212.83.245.0/24 maxlen: 24
212.83.246.0/24 maxlen: 24
212.83.247.0/24 maxlen: 24
212.83.248.0/24 maxlen: 24
212.83.249.0/24 maxlen: 24
212.83.250.0/24 maxlen: 24
212.83.251.0/24 maxlen: 24
212.83.252.0/24 maxlen: 24
212.83.253.0/24 maxlen: 24
212.83.254.0/24 maxlen: 24
212.83.255.0/24 maxlen: 24
213.206.192.0/18 maxlen: 18
213.206.192.0/24 maxlen: 24
213.206.193.0/24 maxlen: 24
213.206.194.0/24 maxlen: 24
213.206.195.0/24 maxlen: 24
213.206.196.0/24 maxlen: 24
213.206.197.0/24 maxlen: 24
213.206.198.0/24 maxlen: 24
213.206.199.0/24 maxlen: 24
213.206.200.0/24 maxlen: 24
213.206.201.0/24 maxlen: 24
213.206.202.0/24 maxlen: 24
213.206.203.0/24 maxlen: 24
213.206.204.0/24 maxlen: 24
213.206.205.0/24 maxlen: 24
213.206.206.0/24 maxlen: 24
213.206.207.0/24 maxlen: 24
213.206.208.0/24 maxlen: 24
213.206.209.0/24 maxlen: 24
213.206.210.0/24 maxlen: 24
213.206.211.0/24 maxlen: 24
213.206.212.0/24 maxlen: 24
213.206.213.0/24 maxlen: 24
213.206.214.0/24 maxlen: 24
213.206.215.0/24 maxlen: 24
213.206.216.0/24 maxlen: 24
213.206.217.0/24 maxlen: 24
213.206.218.0/24 maxlen: 24
213.206.219.0/24 maxlen: 24
213.206.220.0/24 maxlen: 24
213.206.221.0/24 maxlen: 24
213.206.222.0/24 maxlen: 24
213.206.223.0/24 maxlen: 24
213.206.224.0/24 maxlen: 24
213.206.225.0/24 maxlen: 24
213.206.226.0/24 maxlen: 24
213.206.227.0/24 maxlen: 24
213.206.228.0/24 maxlen: 24
213.206.229.0/24 maxlen: 24
213.206.230.0/24 maxlen: 24
213.206.231.0/24 maxlen: 24
213.206.232.0/24 maxlen: 24
213.206.233.0/24 maxlen: 24
213.206.234.0/24 maxlen: 24
213.206.235.0/24 maxlen: 24
213.206.236.0/24 maxlen: 24
213.206.237.0/24 maxlen: 24
213.206.238.0/24 maxlen: 24
213.206.239.0/24 maxlen: 24
213.206.240.0/24 maxlen: 24
213.206.241.0/24 maxlen: 24
213.206.242.0/24 maxlen: 24
213.206.243.0/24 maxlen: 24
213.206.244.0/24 maxlen: 24
213.206.245.0/24 maxlen: 24
213.206.246.0/24 maxlen: 24
213.206.247.0/24 maxlen: 24
213.206.248.0/24 maxlen: 24
213.206.249.0/24 maxlen: 24
213.206.250.0/24 maxlen: 24
213.206.251.0/24 maxlen: 24
213.206.252.0/24 maxlen: 24
213.206.253.0/24 maxlen: 24
213.206.254.0/24 maxlen: 24
213.206.255.0/24 maxlen: 24
213.207.64.0/18 maxlen: 18
213.207.64.0/24 maxlen: 24
213.207.65.0/24 maxlen: 24
213.207.66.0/24 maxlen: 24
213.207.67.0/24 maxlen: 24
213.207.68.0/24 maxlen: 24
213.207.69.0/24 maxlen: 24
213.207.70.0/24 maxlen: 24
213.207.71.0/24 maxlen: 24
213.207.72.0/24 maxlen: 24
213.207.73.0/24 maxlen: 24
213.207.74.0/24 maxlen: 24
213.207.75.0/24 maxlen: 24
213.207.76.0/24 maxlen: 24
213.207.77.0/24 maxlen: 24
213.207.78.0/24 maxlen: 24
213.207.79.0/24 maxlen: 24
213.207.80.0/24 maxlen: 24
213.207.81.0/24 maxlen: 24
213.207.82.0/24 maxlen: 24
213.207.83.0/24 maxlen: 24
213.207.84.0/24 maxlen: 24
213.207.85.0/24 maxlen: 24
213.207.86.0/24 maxlen: 24
213.207.87.0/24 maxlen: 24
213.207.88.0/24 maxlen: 24
213.207.89.0/24 maxlen: 24
213.207.90.0/24 maxlen: 24
213.207.91.0/24 maxlen: 24
213.207.92.0/24 maxlen: 24
213.207.93.0/24 maxlen: 24
213.207.94.0/24 maxlen: 24
213.207.95.0/24 maxlen: 24
213.207.96.0/24 maxlen: 24
213.207.97.0/24 maxlen: 24
213.207.98.0/24 maxlen: 24
213.207.99.0/24 maxlen: 24
213.207.100.0/24 maxlen: 24
213.207.101.0/24 maxlen: 24
213.207.102.0/24 maxlen: 24
213.207.103.0/24 maxlen: 24
213.207.104.0/24 maxlen: 24
213.207.105.0/24 maxlen: 24
213.207.106.0/24 maxlen: 24
213.207.107.0/24 maxlen: 24
213.207.108.0/24 maxlen: 24
213.207.109.0/24 maxlen: 24
213.207.110.0/24 maxlen: 24
213.207.111.0/24 maxlen: 24
213.207.112.0/24 maxlen: 24
213.207.113.0/24 maxlen: 24
213.207.114.0/24 maxlen: 24
213.207.115.0/24 maxlen: 24
213.207.116.0/24 maxlen: 24
213.207.117.0/24 maxlen: 24
213.207.118.0/24 maxlen: 24
213.207.119.0/24 maxlen: 24
213.207.120.0/24 maxlen: 24
213.207.121.0/24 maxlen: 24
213.207.122.0/24 maxlen: 24
213.207.123.0/24 maxlen: 24
213.207.124.0/24 maxlen: 24
213.207.125.0/24 maxlen: 24
213.207.126.0/24 maxlen: 24
213.207.127.0/24 maxlen: 24
2001:4018::/32 maxlen: 48
2001:4019::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a7:07:73:e9:b5:7d:be:26:28:9a:c0:b0:9b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b632a758b59309e861089d6553aee067a6b353f
Validity
Not Before: Jan 1 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04598a8511670a2d80272bad3a4f98c6697bd3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:03:ad:4d:b3:27:06:7d:47:21:09:2f:b5:
83:57:64:fa:92:cb:bb:20:77:9a:4e:b2:26:ab:84:
59:61:85:55:1f:f6:22:5e:cf:00:bc:8c:7f:bd:0d:
3f:00:24:68:9e:fe:2f:d8:bd:72:2f:38:c6:39:0c:
46:ae:57:58:6e:43:df:42:fb:b9:96:5c:ae:88:ae:
36:5a:b5:cd:3e:cb:eb:e6:1f:8a:18:48:ac:1a:1f:
eb:02:d0:39:30:92:e5:ba:e2:55:89:a6:ec:3e:06:
70:b3:5d:f7:d8:14:94:db:0c:36:ca:3a:70:c9:ec:
f6:57:63:93:13:1e:92:55:a7:62:ee:50:97:8b:ca:
a8:02:1d:f2:cf:15:72:c6:b8:19:0a:a8:ce:41:00:
e6:30:dc:33:94:d6:83:2c:c2:80:cf:5b:e3:e9:e8:
bb:b6:d0:05:cc:c7:af:e9:ab:69:c5:82:8f:e5:c2:
c2:68:47:68:65:6e:06:d4:b9:0c:8d:da:ba:05:93:
67:36:27:f4:6c:14:e0:d4:a0:8d:d9:cd:2b:4c:10:
74:aa:92:61:2b:44:db:31:cb:b9:d2:a0:1c:97:1f:
cc:79:52:45:42:25:6d:ec:13:9c:83:5e:54:3b:d6:
d3:79:2d:ca:86:c6:ec:04:1d:e9:b1:e8:93:55:26:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:8A:85:11:67:0A:2D:80:27:2B:AD:3A:4F:98:C6:69:7B:D3:C7
X509v3 Authority Key Identifier:
keyid:4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/BFmKhRFnCi2AJyutOk-Yxml708c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.64.0/22
212.83.192.0/18
213.206.192.0/18
213.207.64.0/18
IPv6:
2001:4018::/31
Signature Algorithm: sha256WithRSAEncryption
00:12:af:56:13:53:76:ab:a5:3e:5c:ac:a9:99:49:09:8f:21:
49:ef:f2:24:5a:25:c4:de:a3:4e:6f:ba:d4:ee:6f:3d:ee:f1:
11:a0:c6:bc:bd:b0:29:3f:05:a7:26:fc:fe:a0:17:38:73:20:
b2:13:72:02:a6:9e:73:a7:9b:dc:0f:db:a4:33:bc:11:e7:92:
dc:b6:3d:a3:54:c2:45:a5:cb:58:16:73:6a:89:16:06:5b:14:
8d:ae:7d:e8:00:18:85:22:fc:98:49:37:61:25:44:46:fc:b3:
42:9a:df:79:d9:d8:7d:95:ae:f2:9c:12:29:6d:3c:c9:db:98:
c5:fe:c9:18:7e:49:e1:9f:25:55:0e:f6:b4:f7:4f:76:e4:bf:
71:b3:65:7b:c0:14:9b:db:e2:97:aa:67:ed:50:bf:0e:47:e2:
bf:29:88:ee:8b:d3:9b:11:3a:73:63:e9:38:91:fa:41:a7:99:
ae:b0:e3:13:29:c9:63:71:16:95:c9:b6:ea:41:93:f7:16:70:
ed:63:2e:67:dd:4b:65:1d:2c:4c:c1:c1:91:36:03:b8:4f:df:
79:7a:01:26:3c:c4:48:e1:3f:4f:de:d4:46:2d:fa:43:f4:38:
49:ba:60:95:e9:09:4e:95:e7:46:d1:06:23:3f:18:70:1b:59:
04:0c:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:03 2025 by rpki-client