Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/BUzdyVZrGK6fjP9keCA0YjRRsys.roa
File: BUzdyVZrGK6fjP9keCA0YjRRsys.roa (raw, json)
Hash identifier: xzbaupu1vrOFRx8Z+RUeKuNWrfPfdYjjyeT44auDONY=
Subject key identifier: 05:4C:DD:C9:56:6B:18:AE:9F:8C:FF:64:78:20:34:62:34:51:B3:2B
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018604306C14849EE3B2A15C4EA312147495
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/BUzdyVZrGK6fjP9keCA0YjRRsys.roa
Signing time: Mon 30 Jan 2023 19:38:47 +0000
ROA not before: Mon 30 Jan 2023 19:38:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 93.119.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:04:30:6c:14:84:9e:e3:b2:a1:5c:4e:a3:12:14:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: Jan 30 19:38:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=054cddc9566b18ae9f8cff64782034623451b32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:cc:6b:e9:ad:a8:28:18:b0:0a:29:fc:7d:
9b:77:e9:14:12:4f:4e:3a:7c:0c:a8:9e:b0:4b:53:
fc:a0:59:c9:d6:a6:6b:9c:bc:f1:da:55:77:63:79:
ee:96:aa:86:ad:1f:34:d6:a8:59:93:0c:92:59:f6:
4b:2c:dd:44:d3:85:61:1f:c6:e5:63:cb:15:43:cc:
fa:c0:ae:03:e7:97:25:7f:6a:d7:b0:2e:57:3e:0f:
34:99:25:74:dc:02:6a:14:43:b5:05:f2:8f:ec:85:
6b:46:cd:b2:7b:36:73:53:c3:53:8a:41:8f:2a:72:
1d:04:6b:d9:19:09:56:9a:66:6d:07:cc:e5:8f:55:
e2:93:f6:f9:0c:ad:7d:35:69:a1:e0:6e:da:03:b8:
0b:88:4e:9b:4e:15:08:6e:c1:a8:84:e0:8f:ac:43:
3a:81:6b:18:26:bb:f6:f5:64:41:3b:f1:7a:15:c3:
21:45:c5:4f:54:05:ee:6b:cf:41:d9:d3:66:1d:e6:
5f:79:ba:cc:d0:95:fd:21:08:b5:c2:d9:78:63:a5:
fd:71:fe:59:df:b0:bd:dd:a8:3b:b2:23:ee:44:50:
14:eb:63:32:7d:a5:f5:6f:3d:3f:bd:4e:0a:07:d4:
fe:3a:96:49:3a:2f:38:fa:7c:2a:7e:4a:0a:d6:7f:
42:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:DD:C9:56:6B:18:AE:9F:8C:FF:64:78:20:34:62:34:51:B3:2B
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/BUzdyVZrGK6fjP9keCA0YjRRsys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.184.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:17:19:a5:4a:f6:06:06:e4:71:d1:e6:df:05:98:aa:87:c4:
36:cb:bc:2b:c7:25:8b:37:5b:47:36:71:39:70:4c:83:e1:28:
5f:5e:04:52:95:dd:07:f0:df:d1:d6:81:1c:b4:47:c6:87:e4:
55:96:97:27:38:af:9b:3f:e9:a8:4d:c1:7b:fe:bd:76:8a:89:
74:39:2d:0c:19:bb:14:27:2d:25:d0:e3:52:fd:1b:4d:36:8f:
03:9e:0c:98:5d:e4:ef:7b:9c:dc:de:ef:e7:f1:f6:f0:7f:34:
a2:ef:41:19:e3:d5:75:aa:37:5a:a1:8b:28:5d:b7:b6:92:1b:
db:fe:c5:8e:a0:ee:fe:e8:46:2e:27:c9:77:19:57:73:3f:f0:
d7:15:83:41:17:bc:44:81:3c:34:2b:a7:85:7a:43:02:b0:b2:
2f:6e:91:bd:e3:63:47:5a:69:8b:f8:2f:0c:ac:30:09:2b:43:
46:02:9d:2f:cd:d2:e9:a7:d4:42:c7:27:3c:1b:c3:fd:cb:28:
21:a7:bd:de:5b:7d:aa:c7:5d:82:e6:30:8c:ab:aa:04:43:e2:
7c:0b:09:bb:eb:7e:39:1c:97:0f:a6:07:46:12:0e:57:cc:2a:
3a:85:78:40:53:9f:73:1c:96:54:78:ad:a8:da:67:0e:2e:b0:
68:93:5b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:50 2025 by rpki-client