Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa
File: BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa (raw, json)
Hash identifier: W2NfednhtlR7QdA8fAAqksCstG5fL7QYtGvfqI9Vs8k=
Subject key identifier: 04:53:69:06:E9:83:A7:59:02:6C:E9:11:3D:F3:5E:79:BF:5E:83:74
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 019426D9C3DB6DEC7B6BEF3FD61495A8A26D
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 194.180.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c3:db:6d:ec:7b:6b:ef:3f:d6:14:95:a8:a2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04536906e983a759026ce9113df35e79bf5e8374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:6b:5d:9f:c0:46:93:a7:03:a2:be:d9:1d:
7d:b7:82:25:64:52:cd:60:63:54:ef:64:6e:f8:4c:
b6:fc:67:e5:06:b4:07:bd:10:41:fd:25:b1:f7:3a:
0f:83:d1:5e:08:e1:d3:16:a1:0e:3f:97:e6:da:5d:
10:58:72:65:7f:b9:57:96:2f:4a:c6:4d:b0:ab:48:
8a:eb:60:13:8b:fb:ce:fd:1e:ea:b2:d7:d1:81:02:
33:82:b2:c9:fd:c9:d6:25:f0:82:18:66:d7:bb:74:
00:79:90:c7:fe:35:4e:8f:db:fa:c8:4f:df:7e:78:
68:04:70:a5:3b:0b:1f:91:ee:10:8c:c8:a4:49:cd:
32:41:3a:ae:2a:b8:8c:1a:f0:3e:b7:c2:e5:f8:ea:
9e:c5:dd:44:c5:45:66:b9:1f:77:d5:b2:53:96:c0:
13:b1:dd:92:37:31:21:d5:60:9a:6d:03:c3:aa:8b:
fc:0c:85:91:e7:f3:a0:a6:54:cf:05:91:30:0d:83:
4b:c5:ea:bc:70:b0:e3:a5:9b:fe:fd:90:ff:44:52:
ca:68:c4:1c:a9:6a:b6:e5:3b:17:7c:0c:69:bf:7e:
0c:0f:4b:87:cb:66:95:09:16:21:b1:60:8a:6e:28:
f6:77:af:02:27:9d:75:ed:6f:9f:78:50:b1:4f:6a:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:53:69:06:E9:83:A7:59:02:6C:E9:11:3D:F3:5E:79:BF:5E:83:74
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:27:78:08:d4:d1:9a:67:b2:1a:f4:6f:84:3a:b4:3f:68:b5:
62:0b:6e:6d:a5:4a:46:a6:e9:45:4d:f7:af:1a:fa:c2:d1:79:
70:02:25:df:5e:2d:55:8d:07:4b:c1:78:cf:5f:75:f2:ca:c2:
96:94:17:c9:4f:e3:eb:13:1f:5a:c1:27:9f:16:6a:5c:d8:49:
1a:b6:e0:f8:a5:71:7f:f0:f7:4d:bf:db:48:7a:a5:d5:19:d3:
07:6a:4d:82:ce:2e:39:20:84:5e:b7:cb:44:bb:9b:c6:0b:82:
4e:50:74:42:c6:2b:1e:2e:dd:2c:5e:4d:58:4d:47:e9:ba:5c:
45:f6:bb:f2:1d:e0:a1:57:ba:55:b3:b9:77:54:da:9e:06:ef:
d2:a7:1a:43:ad:66:9b:7a:f7:9a:76:a4:ef:0f:f3:b1:f4:ce:
99:09:4d:13:4f:3a:53:b1:62:dd:b2:69:ee:99:6e:81:cd:58:
e5:af:be:bb:09:5b:13:60:6c:0e:bd:5d:e2:56:90:79:f6:14:
7a:27:b2:99:85:d5:2f:d8:a9:2f:b4:fd:21:1b:fd:41:1a:1b:
61:17:11:e3:0c:15:87:31:59:82:25:88:56:73:3b:4e:41:d6:
05:f7:de:c8:44:77:ab:0e:16:61:d2:bd:78:9c:0b:92:f5:fe:
0d:72:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net