Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/BNZ-VDcoTZVASOChmQpb_TMM-Js.roa
File: BNZ-VDcoTZVASOChmQpb_TMM-Js.roa (raw, json)
Hash identifier: RkJv5OsbRWdxsBa1MjJ0OFfd3OSZHdJWBgknCUXbGeY=
Subject key identifier: 04:D6:7E:54:37:28:4D:95:40:48:E0:A1:99:0A:5B:FD:33:0C:F8:9B
Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial: 019421443A9028DE0206F215BB0A151C2ECD
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/BNZ-VDcoTZVASOChmQpb_TMM-Js.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207388
IP address blocks: 185.93.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3a:90:28:de:02:06:f2:15:bb:0a:15:1c:2e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04d67e5437284d954048e0a1990a5bfd330cf89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:f9:35:0b:63:7c:b8:cd:7e:fa:56:7e:22:
f7:64:8b:64:51:49:e8:84:be:17:68:14:de:b1:cc:
b2:a5:aa:35:e1:43:12:e6:61:54:28:ce:97:91:2b:
7f:a2:fc:ec:90:42:97:13:b1:7c:3e:92:bf:27:12:
6b:0f:9e:4a:7d:20:5c:4b:06:54:d9:ed:67:0f:b2:
a7:dc:7f:3d:fe:80:fb:3d:07:c9:c1:fc:4c:74:18:
fb:ef:52:c0:b8:4c:82:43:d7:fd:c4:c7:35:a8:ac:
8a:4e:f4:e5:04:c2:3b:45:ac:dd:31:46:f8:a3:be:
6e:a3:8d:c0:52:ed:49:51:3e:dc:ac:e3:27:c1:23:
0a:0f:e1:ce:e7:63:0d:11:df:24:a8:31:47:f6:5b:
83:2b:da:86:c7:1e:50:f9:b6:46:b4:1d:58:f0:7c:
3a:7c:c4:1a:75:0c:04:aa:fc:99:09:46:29:7c:b3:
fc:30:19:f5:6d:8d:a2:38:07:17:84:29:97:99:e6:
7c:a4:5f:bb:bb:38:d8:05:a5:f9:a9:75:cf:a6:70:
12:24:57:81:09:0f:2b:54:2d:d7:fe:a2:e8:6f:b7:
15:e6:a0:75:74:1f:7a:25:56:5f:24:9f:7e:70:6e:
a9:df:5d:c6:db:31:43:6b:9b:c0:b0:2a:ab:04:4d:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:7E:54:37:28:4D:95:40:48:E0:A1:99:0A:5B:FD:33:0C:F8:9B
X509v3 Authority Key Identifier:
keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/BNZ-VDcoTZVASOChmQpb_TMM-Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.89.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:de:e8:79:82:9f:4a:c1:83:1a:46:c2:5a:78:39:00:55:71:
b9:83:a2:36:51:4b:e3:09:ed:a0:ae:d6:22:ab:58:10:c9:c9:
19:25:60:9d:bd:ce:fd:82:98:e6:f5:45:39:3a:70:96:b7:cb:
a6:97:ca:98:45:c5:2a:cb:17:20:7f:92:ae:49:2a:8b:c8:b5:
d8:34:91:83:40:f9:00:23:b5:e1:6f:93:13:cb:f6:ab:04:a3:
13:a8:b6:d6:36:c7:0e:bc:b4:e9:37:91:ec:e1:06:ab:e5:97:
07:e0:b9:2d:82:36:a9:ff:1d:66:10:1f:31:4f:1b:6b:4f:ed:
57:3c:6d:ea:8d:3b:19:48:60:be:6e:ea:64:17:c3:b6:2f:d4:
2e:dd:6c:37:71:49:85:09:9e:d9:5d:44:4b:b7:8f:7b:06:f3:
98:00:17:be:eb:58:15:3c:84:80:69:bd:dc:17:1f:52:2f:62:
ec:d2:d3:8f:4a:d4:64:a3:32:78:f9:f1:80:f1:29:31:6d:00:
29:87:51:73:ad:c0:fd:80:53:ea:07:bc:4d:8b:46:f2:1c:ad:
29:6f:8d:a7:85:ee:38:29:59:a5:55:f3:4e:1a:d6:4d:db:66:
20:d6:f2:94:85:a6:fe:77:37:fb:7d:4d:5c:71:c9:24:1b:df:
12:d1:2b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 17:21:14 2025 by rpki-client on console.sobornost.net