Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/BVgWpGBZypCUifXc1SwYFcZMUxA.roa
File: BVgWpGBZypCUifXc1SwYFcZMUxA.roa (raw, json)
Hash identifier: EYIrhzWJLMLklX9H8a1uf+wHbnzsx3CNTGu1LfPTo8I=
Subject key identifier: 05:58:16:A4:60:59:CA:90:94:89:F5:DC:D5:2C:18:15:C6:4C:53:10
Certificate issuer: /CN=2e4dd492aba37802f99020379b0daa49f101b7da
Certificate serial: 018CC26CF0CAAFE8FEBEE96D4A6D10FE5489
Authority key identifier: 2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/BVgWpGBZypCUifXc1SwYFcZMUxA.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 194.15.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f0:ca:af:e8:fe:be:e9:6d:4a:6d:10:fe:54:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4dd492aba37802f99020379b0daa49f101b7da
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=055816a46059ca909489f5dcd52c1815c64c5310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:af:43:3b:8e:06:80:72:df:a3:01:5b:c1:
f1:85:fc:ed:85:77:3f:ec:4c:f7:3b:30:bf:ce:4c:
6c:82:71:77:cc:40:a1:40:74:d3:6c:81:c1:93:f7:
5c:2c:9a:7b:32:17:51:c6:a4:26:58:76:ef:12:79:
1f:10:cf:11:2e:92:a3:84:21:ec:2f:4b:c9:8d:21:
9f:d9:a7:11:21:3f:de:47:84:92:64:54:93:cb:0a:
de:c4:dd:59:1b:ac:3c:32:1e:f7:be:c1:0c:a6:11:
11:04:ac:59:50:ea:29:f3:43:62:ed:30:b6:90:d6:
f7:1e:ff:88:f8:1e:0f:6e:c1:6c:22:bd:8d:11:f6:
4a:c7:c2:3d:59:93:ad:74:08:9c:30:59:7f:0a:0e:
46:52:4c:ae:2b:5a:23:e0:02:f8:46:22:04:69:f7:
67:ea:04:58:48:37:57:fb:a5:9e:ca:b4:30:c8:d7:
33:89:67:1c:f4:17:1d:ca:24:89:d6:a0:a8:df:e5:
a1:f0:1b:d4:62:f5:cc:4c:f6:26:88:01:94:a2:11:
c6:5d:6f:87:8a:48:8d:e4:af:9e:cb:4f:16:f2:f8:
3f:7e:55:e0:6b:b2:ee:d6:b4:61:30:21:0e:55:8f:
70:89:92:97:7c:4d:0e:c7:96:b7:83:b2:eb:30:b4:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:58:16:A4:60:59:CA:90:94:89:F5:DC:D5:2C:18:15:C6:4C:53:10
X509v3 Authority Key Identifier:
keyid:2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/BVgWpGBZypCUifXc1SwYFcZMUxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/Lk3UkqujeAL5kCA3mw2qSfEBt9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f3:15:ff:96:28:de:03:b5:31:09:4c:6b:d9:b6:f6:b1:47:
30:36:fe:a8:d2:74:03:e0:76:c1:14:8a:b6:7d:d4:b4:27:b9:
aa:18:a3:62:ee:f0:45:fa:16:7b:0a:4d:7a:02:d8:46:bb:8f:
b9:0f:d9:4a:24:78:a0:7d:0e:16:89:9b:84:3d:92:80:93:14:
25:bc:7a:04:20:a9:7d:b9:36:7d:6a:39:5d:52:7f:13:02:9b:
d4:2a:89:47:c5:48:29:04:01:77:52:c7:c0:fa:15:98:ce:f5:
b9:4f:a2:86:3e:5a:a0:49:42:f7:97:c2:b7:b4:99:e2:74:95:
0d:65:93:91:7a:87:19:61:c5:57:ed:b7:f3:36:89:29:69:99:
8a:8c:c3:47:c7:ad:11:ac:06:59:47:f6:80:04:40:ac:36:df:
62:27:6b:47:75:2a:3b:8a:b1:18:66:19:5e:e5:d3:aa:09:59:
6a:b7:36:cf:d3:12:5c:06:ad:5c:2b:88:e2:7d:a9:dc:77:28:
93:c0:f6:04:d0:b5:33:92:13:8c:d4:da:3c:69:bb:70:11:f4:
aa:aa:46:9e:e5:77:61:a5:c2:45:5c:bc:93:1c:a6:63:c6:f2:
9d:08:59:d3:59:d5:76:28:02:9d:ec:72:c7:64:dc:ae:d1:0f:
aa:aa:50:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbPDKr+j+vultSm0Q/lSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNGRkNDkyYWJhMzc4MDJmOTkwMjAzNzliMGRhYTQ5ZjEw
MWI3ZGEwHhcNMjQwMTAxMDAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTU4MTZhNDYwNTljYTkwOTQ4OWY1ZGNkNTJjMTgxNWM2NGM1MzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkqvQzuOBoBy36MBW8HxhfzthXc/
7Ez3OzC/zkxsgnF3zEChQHTTbIHBk/dcLJp7MhdRxqQmWHbvEnkfEM8RLpKjhCHs
L0vJjSGf2acRIT/eR4SSZFSTywrexN1ZG6w8Mh73vsEMphERBKxZUOop80Ni7TC2
kNb3Hv+I+B4PbsFsIr2NEfZKx8I9WZOtdAicMFl/Cg5GUkyuK1oj4AL4RiIEafdn
6gRYSDdX+6WeyrQwyNcziWcc9BcdyiSJ1qCo3+Wh8BvUYvXMTPYmiAGUohHGXW+H
ikiN5K+ey08W8vg/flXga7Lu1rRhMCEOVY9wiZKXfE0Ox5a3g7LrMLTtzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAVYFqRgWcqQlIn13NUsGBXGTFMQMB8GA1UdIwQY
MBaAFC5N1JKro3gC+ZAgN5sNqknxAbfaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGszVWtxdWplQUw1a0NBM213MnFTZkVCdDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zYWMwMzktMThjMi00MjRjLWFlNTkt
Mzc0YzliN2FkMWU3LzEvQlZnV3BHQlp5cENVaWZYYzFTd1lGY1pNVXhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zYWMwMzktMThjMi00MjRjLWFlNTktMzc0YzliN2FkMWU3
LzEvTGszVWtxdWplQUw1a0NBM213MnFTZkVCdDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg+WMA0G
CSqGSIb3DQEBCwUAA4IBAQAf8xX/lijeA7UxCUxr2bb2sUcwNv6o0nQD4HbBFIq2
fdS0J7mqGKNi7vBF+hZ7Ck16AthGu4+5D9lKJHigfQ4WiZuEPZKAkxQlvHoEIKl9
uTZ9ajldUn8TApvUKolHxUgpBAF3UsfA+hWYzvW5T6KGPlqgSUL3l8K3tJnidJUN
ZZOReocZYcVX7bfzNokpaZmKjMNHx60RrAZZR/aABECsNt9iJ2tHdSo7irEYZhle
5dOqCVlqtzbP0xJcBq1cK4jifancdyiTwPYE0LUzkhOM1No8abtwEfSqqkae5Xdh
pcJFXLyTHKZjxvKdCFnTWdV2KAKd7HLHZNyu0Q+qqlD/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:45 2024 by rpki-client on console-fra.rpki-client.org