Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/BfiaPd6e2ZF_ou8-Y9FB8dT2GWs.roa
File: BfiaPd6e2ZF_ou8-Y9FB8dT2GWs.roa (raw, json)
Hash identifier: gN+gtOZ1sO9qEVx2V/WYK+gPOJEbOfVcgv2ODnlqnOI=
Subject key identifier: 05:F8:9A:3D:DE:9E:D9:91:7F:A2:EF:3E:63:D1:41:F1:D4:F6:19:6B
Certificate issuer: /CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Certificate serial: 018CC56EC9E04A40E643D3D9654653B83684
Authority key identifier: D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/BfiaPd6e2ZF_ou8-Y9FB8dT2GWs.roa
Signing time: Mon 01 Jan 2024 14:30:21 +0000
ROA not before: Mon 01 Jan 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.187.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c9:e0:4a:40:e6:43:d3:d9:65:46:53:b8:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e2760d70a0d6b7a047130edbd996d041e9d300
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05f89a3dde9ed9917fa2ef3e63d141f1d4f6196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:f5:2a:db:95:55:2a:41:8a:41:e6:9c:5f:
d4:c0:8a:50:3b:00:a6:b1:ae:fe:38:d3:62:e3:bd:
08:e5:66:b0:ea:ba:4e:f6:6c:c6:68:23:3f:db:f6:
55:e3:20:6c:f6:ef:32:47:53:d3:f1:ed:c5:13:90:
f4:72:6a:7b:1c:80:19:84:5f:7c:50:89:a1:4d:d8:
6a:0e:95:80:47:49:29:0e:3b:bb:86:69:39:57:8a:
16:9a:c4:b5:10:f1:bb:73:15:f5:90:b0:4a:2b:ea:
40:38:7d:93:f1:7b:bb:b5:96:81:53:a4:57:6f:69:
2b:8e:31:8a:7f:bf:1b:fa:4f:0a:24:47:3f:93:09:
72:fa:87:82:78:5d:52:0e:7c:b0:b0:4a:03:b1:eb:
15:ab:66:3e:da:68:78:f8:7c:a1:ec:b4:3e:02:1e:
28:7c:cf:34:06:c5:14:f2:02:79:8e:f1:1e:76:58:
f2:39:04:cb:9e:3d:28:a9:4c:3a:92:08:45:cf:21:
61:99:98:81:09:6b:83:0b:a7:35:f9:9b:8e:74:43:
ab:47:a9:e4:3b:9a:85:b8:e5:0c:9a:89:98:53:ae:
d1:82:2e:9a:d4:65:4b:8b:9e:49:92:58:d0:80:a0:
cd:8d:56:03:42:05:e1:19:2e:09:cd:18:1f:b2:71:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F8:9A:3D:DE:9E:D9:91:7F:A2:EF:3E:63:D1:41:F1:D4:F6:19:6B
X509v3 Authority Key Identifier:
keyid:D9:E2:76:0D:70:A0:D6:B7:A0:47:13:0E:DB:D9:96:D0:41:E9:D3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eJ2DXCg1regRxMO29mW0EHp0wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/BfiaPd6e2ZF_ou8-Y9FB8dT2GWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5525ae-4401-40a6-9059-c63050257066/1/2eJ2DXCg1regRxMO29mW0EHp0wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.19.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6a:d4:6f:a0:00:5e:38:e4:39:60:16:c4:f7:74:85:d4:43:
b4:f3:9e:74:55:8b:f4:cd:d3:48:ce:b7:07:54:2e:d8:2d:48:
f0:f9:55:f6:e3:68:b1:b1:ab:b9:eb:e0:e2:ae:31:38:99:ea:
c5:f8:94:0c:4a:f8:2f:61:5a:29:84:6b:a1:17:2c:f2:3e:61:
4c:50:5a:97:2c:4a:4c:d9:5c:7d:3e:d2:e4:7d:ea:28:1a:90:
6c:9c:dd:cb:28:9c:cb:72:89:b0:ca:e1:0a:c1:c7:8a:22:2b:
3f:0e:fb:d0:02:95:1e:83:cf:97:70:4f:02:ed:73:70:c0:e7:
57:93:33:24:1a:6a:aa:cc:ea:2c:a3:40:d8:ad:f9:d5:0c:3d:
a4:71:70:b7:50:04:ca:91:15:40:4f:79:f8:7b:80:63:2d:f4:
f1:ab:9e:e2:da:c2:e9:84:c7:38:ab:e0:a3:8e:2f:32:cd:20:
9a:b8:8b:80:ae:6c:f4:4c:84:3b:9a:bf:9c:f2:cb:15:88:6d:
94:04:84:12:41:4a:f9:eb:22:ab:40:e6:12:26:1b:86:38:dc:
82:f9:20:10:1b:3e:9b:fe:b0:e2:c5:8a:08:a2:d0:c0:10:db:
8f:28:32:da:7b:a8:8c:b7:93:f3:f5:a3:ea:91:d6:cd:d3:a6:
40:72:2d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:15 2025 by rpki-client