Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/BVA-ewMKFfhNlaM9uEKeCRcxb44.roa
File: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (raw, json)
Hash identifier: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=
Subject key identifier: 05:50:3E:7B:03:0A:15:F8:4D:95:A3:3D:B8:42:9E:09:17:31:6F:8E
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 0194252137B886A891D4BE3ED66DDF615C22
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/BVA-ewMKFfhNlaM9uEKeCRcxb44.roa
Signing time: Thu 02 Jan 2025 03:48:41 +0000
ROA not before: Thu 02 Jan 2025 03:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39912
IP address blocks: 37.186.0.0/22 maxlen: 22
37.186.4.0/24 maxlen: 24
37.186.6.0/23 maxlen: 23
37.186.8.0/21 maxlen: 21
37.186.16.0/21 maxlen: 21
77.220.96.0/20 maxlen: 20
77.220.105.0/24 maxlen: 24
77.220.111.0/24 maxlen: 24
77.220.112.0/22 maxlen: 22
77.220.120.0/21 maxlen: 21
78.142.64.0/23 maxlen: 23
78.142.68.0/22 maxlen: 22
78.142.72.0/21 maxlen: 21
78.142.96.0/20 maxlen: 24
78.142.112.0/22 maxlen: 22
78.142.116.0/23 maxlen: 23
78.142.122.0/23 maxlen: 23
78.142.124.0/22 maxlen: 22
81.94.48.0/22 maxlen: 22
81.94.52.0/23 maxlen: 24
81.94.54.0/24 maxlen: 24
81.94.56.0/21 maxlen: 21
81.94.56.0/24 maxlen: 24
91.206.224.0/23 maxlen: 23
92.42.16.0/22 maxlen: 22
92.63.208.0/22 maxlen: 24
92.63.212.0/24 maxlen: 24
92.63.214.0/23 maxlen: 23
92.63.216.0/21 maxlen: 21
92.63.217.0/24 maxlen: 24
92.63.218.0/24 maxlen: 24
93.185.128.0/20 maxlen: 24
95.143.80.0/20 maxlen: 20
195.16.224.0/21 maxlen: 21
195.16.232.0/22 maxlen: 24
195.16.236.0/23 maxlen: 23
195.16.238.0/24 maxlen: 24
195.16.241.0/24 maxlen: 24
195.16.242.0/23 maxlen: 23
195.16.245.0/24 maxlen: 24
195.16.246.0/23 maxlen: 23
195.16.251.0/24 maxlen: 24
195.16.253.0/24 maxlen: 24
195.16.254.0/23 maxlen: 23
195.137.238.0/23 maxlen: 23
195.137.238.0/24 maxlen: 24
195.140.136.0/22 maxlen: 22
213.139.252.0/22 maxlen: 22
2a00:e98::/32 maxlen: 32
2a00:eb0::/32 maxlen: 32
2a01:f8::/32 maxlen: 32
2a01:100::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:37:b8:86:a8:91:d4:be:3e:d6:6d:df:61:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Jan 2 03:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05503e7b030a15f84d95a33db8429e0917316f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:a7:87:04:39:25:58:d7:81:04:47:91:b1:
f3:77:72:d6:93:d1:3e:a0:c0:f4:fd:09:c2:f8:ee:
03:d2:26:4d:f0:ee:40:44:06:43:67:30:3e:f2:94:
28:e2:a6:1b:0f:ee:ad:e8:5f:aa:e3:2e:11:23:bc:
b3:37:ef:65:c6:71:7f:44:9a:c6:92:e5:9c:24:08:
f2:4c:98:e6:c6:c1:6b:63:1c:0e:5e:72:1a:9f:a0:
e3:93:61:15:39:8c:f5:e2:ae:0a:63:b7:46:78:89:
d1:06:b5:0e:ef:74:c9:98:d1:9f:45:ee:b0:83:08:
3c:df:cd:4c:34:13:b4:30:f3:85:23:b3:e2:2e:93:
e7:5c:72:28:99:b4:42:cb:97:6e:02:08:9e:3b:ef:
fc:7c:a9:bd:e0:47:a4:5a:ef:6e:86:86:b9:5e:43:
91:55:cf:22:78:28:ce:96:a9:7e:97:14:c6:70:cf:
eb:0f:b0:84:1b:d0:2b:d8:77:88:f6:f0:9a:47:88:
5a:e7:ab:cf:f6:d3:7d:aa:d9:7c:3f:7b:7e:c8:34:
5c:ec:94:1d:08:00:8c:18:f1:4b:e2:2a:b0:c5:e4:
d8:cf:b4:3a:ff:75:dd:f5:a0:bf:82:bb:90:cd:7e:
4b:d6:fc:47:19:45:5a:58:1f:71:38:57:46:84:e3:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:50:3E:7B:03:0A:15:F8:4D:95:A3:3D:B8:42:9E:09:17:31:6F:8E
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/BVA-ewMKFfhNlaM9uEKeCRcxb44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.186.0.0-37.186.4.255
37.186.6.0-37.186.23.255
77.220.96.0-77.220.115.255
77.220.120.0/21
78.142.64.0/23
78.142.68.0-78.142.79.255
78.142.96.0-78.142.117.255
78.142.122.0-78.142.127.255
81.94.48.0-81.94.54.255
81.94.56.0/21
91.206.224.0/23
92.42.16.0/22
92.63.208.0-92.63.212.255
92.63.214.0-92.63.223.255
93.185.128.0/20
95.143.80.0/20
195.16.224.0-195.16.238.255
195.16.241.0-195.16.243.255
195.16.245.0-195.16.247.255
195.16.251.0/24
195.16.253.0-195.16.255.255
195.137.238.0/23
195.140.136.0/22
213.139.252.0/22
IPv6:
2a00:e98::/32
2a00:eb0::/32
2a01:f8::/32
2a01:100::/32
Signature Algorithm: sha256WithRSAEncryption
14:48:93:e4:1d:4e:c0:40:16:11:32:68:a7:b3:36:39:16:f2:
cc:9c:7b:ac:3f:c6:21:49:e5:a7:7e:71:6b:47:e0:bb:9c:89:
cf:08:fd:f2:9a:35:91:b4:92:43:57:72:0a:89:8f:63:e7:5c:
9e:6b:0f:6b:59:9a:92:4a:26:4a:cf:f7:67:5e:a1:84:35:9a:
41:ab:e2:e7:66:16:1b:c0:19:5c:ac:c2:68:c7:98:82:90:7a:
ff:ac:f8:44:14:b4:da:e1:44:32:79:7b:ff:ad:ad:7f:0d:0f:
52:18:b6:51:fb:fc:10:c8:e9:48:b4:ea:d3:d6:f0:b9:fc:3b:
93:1c:d6:d6:7a:60:08:db:d9:e2:a0:4a:03:f2:32:d4:15:c9:
66:cf:ed:2f:9b:01:04:f2:d6:f6:8a:ef:5a:e5:90:80:0d:e1:
17:83:7b:6f:e8:91:08:1a:2c:57:f3:0b:f6:31:f6:c5:1b:df:
36:0f:0c:20:42:96:49:ce:ef:08:97:1d:4a:bb:f3:f9:54:2f:
39:41:12:bd:94:ac:96:5d:8d:76:e0:e2:8e:85:7e:2e:5e:cd:
13:3c:e5:24:08:ac:a5:8f:05:bb:09:eb:b7:f8:56:eb:6d:e7:
66:69:1b:04:7e:c7:42:83:2a:bb:47:e9:77:59:3a:6f:16:c0:
10:5a:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:45 2025 by rpki-client