Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/BFSRoEWheF_thFDZR4RD13IyNPk.roa
File: BFSRoEWheF_thFDZR4RD13IyNPk.roa (raw, json)
Hash identifier: NAqBNqwuBhSZMhxl5cooZMW+SxBxx7r3D1Dku0B3TdI=
Subject key identifier: 04:54:91:A0:45:A1:78:5F:ED:84:50:D9:47:84:43:D7:72:32:34:F9
Certificate issuer: /CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Certificate serial: 018572BA43794F901EDA1349F31C84F87F2E
Authority key identifier: 19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/BFSRoEWheF_thFDZR4RD13IyNPk.roa
Signing time: Mon 02 Jan 2023 13:44:47 +0000
ROA not before: Mon 02 Jan 2023 13:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:43:79:4f:90:1e:da:13:49:f3:1c:84:f8:7f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19dcc560daf3e2ac85b60b8661387f06c1fa1315
Validity
Not Before: Jan 2 13:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=045491a045a1785fed8450d9478443d7723234f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:bb:4d:b9:e6:b1:34:e2:d0:0e:f3:e8:8e:
02:f4:18:4e:ce:e8:db:97:d4:55:3b:da:09:db:a3:
63:8b:b5:6b:c1:39:a4:aa:73:5a:6d:5b:e5:e1:b0:
07:ea:ca:a8:db:a2:1d:7c:02:81:06:51:4c:9e:ee:
1e:8f:0b:1f:0c:bd:40:5b:e3:4c:ed:2c:d6:fb:62:
71:5a:9f:fb:89:80:46:0f:8f:c4:5a:6b:de:b5:13:
7f:a5:ff:3d:0c:6f:84:69:c0:e7:f2:3a:6a:89:a3:
ba:b1:fb:5d:a5:aa:0b:df:1d:7e:b4:60:bd:43:ca:
78:bb:99:1c:be:cb:9f:41:c3:0a:3a:50:11:d5:63:
c8:35:31:39:cc:59:52:c2:88:2a:3d:12:02:c4:6b:
5d:eb:b4:2b:25:f7:c1:14:f9:c5:69:d1:b4:19:ab:
4b:f7:85:c7:d3:e2:db:99:5a:98:c4:c6:25:29:91:
16:25:34:76:01:65:fa:5e:d0:7d:19:1e:8f:70:d1:
0d:54:70:f3:d6:8e:06:1d:d9:5b:f3:e7:b9:75:76:
5a:07:be:9b:e4:a6:5b:ef:50:82:a8:09:69:6d:2e:
64:75:4c:ce:2d:dc:e8:8b:5b:be:9f:ad:e4:ed:b9:
e3:13:9d:9c:83:e4:99:f8:57:e3:2b:1d:9c:72:50:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:91:A0:45:A1:78:5F:ED:84:50:D9:47:84:43:D7:72:32:34:F9
X509v3 Authority Key Identifier:
keyid:19:DC:C5:60:DA:F3:E2:AC:85:B6:0B:86:61:38:7F:06:C1:FA:13:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdzFYNrz4qyFtguGYTh_BsH6ExU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/BFSRoEWheF_thFDZR4RD13IyNPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/60f037-9ddc-40aa-88c6-15b6f1dea37b/1/GdzFYNrz4qyFtguGYTh_BsH6ExU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.112.0/24
Signature Algorithm: sha256WithRSAEncryption
67:62:e8:88:24:f5:24:c8:20:d5:9b:e9:58:66:59:31:80:91:
17:a8:94:7e:06:47:f1:24:b7:38:2f:99:33:b8:d6:bc:02:9e:
7d:35:98:ec:40:fa:56:41:2c:da:6c:93:02:33:49:01:a0:ba:
51:2a:57:93:4a:0f:00:5f:35:0d:c3:8c:47:8a:04:b2:31:2c:
35:6e:87:83:7e:64:c3:39:37:bd:bc:60:92:4c:e7:31:b4:d3:
ee:74:98:63:41:1b:e9:28:67:2e:07:d8:0a:7b:69:e2:47:37:
49:9a:6c:c8:c5:0a:54:d0:09:f3:b8:5a:8e:fa:48:20:c6:ed:
17:5b:b4:84:6c:25:7c:d3:81:52:84:bb:79:58:01:13:47:2f:
e1:68:05:43:a8:be:9e:f2:c7:b8:9c:82:79:6d:6e:be:0f:c7:
6c:c9:41:1c:4c:18:47:b8:7d:6b:8a:3a:cc:06:09:5f:39:43:
be:bd:cf:93:73:62:fe:29:b6:03:a8:06:11:88:e9:ef:22:5f:
3f:3e:82:0a:94:f3:d3:64:7c:68:95:c2:5d:05:63:1f:90:ed:
3e:df:42:c6:52:64:21:7d:b3:84:c3:42:e1:a8:6d:3c:81:18:
e0:e5:53:48:8a:1d:8d:bd:43:19:21:9a:69:1d:7e:0b:4c:20:
7a:5f:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org