Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/BfyClB3XmviPfJ6xZ2InO7FtLcs.roa
File: BfyClB3XmviPfJ6xZ2InO7FtLcs.roa (raw, json)
Hash identifier: 3EeV7dZbc++zjvyl5M1yeUuYRy/Llocvb96yJLQ1iig=
Subject key identifier: 05:FC:82:94:1D:D7:9A:F8:8F:7C:9E:B1:67:62:27:3B:B1:6D:2D:CB
Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial: 019422FB6E6F0CEAB259F76083C32C7749AB
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/BfyClB3XmviPfJ6xZ2InO7FtLcs.roa
Signing time: Wed 01 Jan 2025 17:48:10 +0000
ROA not before: Wed 01 Jan 2025 17:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 195.47.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6e:6f:0c:ea:b2:59:f7:60:83:c3:2c:77:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05fc82941dd79af88f7c9eb16762273bb16d2dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:d2:97:e6:e2:a5:32:73:50:f5:ca:3b:91:
89:b9:fb:5e:11:fd:03:18:53:7b:bc:8f:30:3f:06:
26:e5:7d:34:b7:86:c1:18:c8:18:07:4b:b2:f0:ce:
a1:32:9a:3d:71:b5:2d:6e:57:cc:0f:0c:8a:54:54:
02:06:6b:38:67:aa:3a:b4:b2:23:11:a9:20:32:11:
48:34:65:75:27:02:74:9d:f2:fd:24:b2:89:9f:0c:
55:dc:d0:02:35:2c:5e:05:c4:82:14:7e:44:8f:25:
4a:b6:45:6c:0c:bb:ab:91:0b:06:da:ba:b8:b3:eb:
ed:c3:4f:d7:df:2b:ee:06:b6:38:65:9d:6b:9c:ae:
5d:6f:e2:0d:9b:b5:27:e9:9d:c3:a7:ff:ce:c9:4b:
b6:73:d8:dc:4e:57:7f:4c:f6:59:ac:4b:3e:38:86:
f9:a0:4d:30:94:34:ee:6a:5b:d0:14:94:d2:57:85:
f9:44:a9:b3:e3:63:3f:b9:34:c4:57:5b:04:a3:d6:
9a:19:98:d9:ec:45:36:b3:63:7e:87:af:b3:32:87:
db:8d:63:f4:92:63:36:0e:06:06:51:91:2c:ff:33:
65:21:d8:44:a2:17:a1:5e:ce:d1:2c:f1:c8:78:0f:
c2:44:8b:2f:ff:21:13:75:53:40:1d:5d:1d:56:3b:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FC:82:94:1D:D7:9A:F8:8F:7C:9E:B1:67:62:27:3B:B1:6D:2D:CB
X509v3 Authority Key Identifier:
keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/BfyClB3XmviPfJ6xZ2InO7FtLcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a3:ba:60:22:da:12:f8:87:e6:b5:7b:df:ea:66:63:e4:21:
d0:67:b9:61:63:c8:a4:45:d1:06:ce:1b:0b:0c:13:de:9c:51:
2d:dc:6e:84:5c:b5:f8:81:5a:d4:7f:87:37:84:59:9d:15:5e:
ef:50:c6:79:ba:9d:61:cd:9c:85:37:6a:c9:58:00:7e:56:6f:
62:a2:2d:ce:c1:39:0b:bc:b1:bb:0c:04:ac:a4:e1:a2:ad:fb:
df:78:02:84:d1:43:8b:dd:49:ec:6d:2a:4c:d2:5f:ec:16:18:
ee:a6:16:d4:8b:36:5e:12:51:f9:d8:5d:d8:ea:31:34:3b:12:
18:bd:68:be:ba:1b:e2:46:cb:36:92:02:ea:df:15:d8:60:fa:
2d:10:51:3d:0c:58:4f:92:e2:bc:fe:89:cf:71:a8:ac:71:44:
31:e3:5d:28:e2:36:ec:b3:d4:5a:f6:ef:f0:60:c6:7a:a5:47:
af:23:62:24:b5:c1:d9:f9:c7:66:ea:7a:74:6f:c3:3c:a4:ad:
46:46:e7:4a:29:01:f8:59:bc:70:af:41:1a:3b:6a:e4:35:d3:
5f:b3:d3:7b:82:cb:25:e9:b0:be:e1:4b:4b:1b:17:71:34:ed:
1f:01:75:d2:c5:45:7e:8a:b4:f7:5a:ab:a6:06:a8:8b:0d:34:
83:a7:e0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net