Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0T8gB-n0G6eNAni3opA698CXbyI.roa
File: 0T8gB-n0G6eNAni3opA698CXbyI.roa (raw, json)
Hash identifier: STnDD874ONXzK3E3qlCUVTa/Myz5AZZhs78QNhHD8WM=
Subject key identifier: D1:3F:20:07:E9:F4:1B:A7:8D:02:78:B7:A2:90:3A:F7:C0:97:6F:22
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF11413776D18995AB801B8046B57A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0T8gB-n0G6eNAni3opA698CXbyI.roa
Signing time: Tue 26 Nov 2024 13:35:23 +0000
ROA not before: Tue 26 Nov 2024 13:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397199
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:11:41:37:76:d1:89:95:ab:80:1b:80:46:b5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d13f2007e9f41ba78d0278b7a2903af7c0976f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:bf:ae:d5:39:bf:ed:19:82:d9:3f:bc:3c:
65:03:b1:dc:13:26:17:03:c0:08:86:a1:27:d0:dd:
82:03:31:a0:6c:53:5a:7f:a6:de:c7:f8:71:ce:bd:
16:22:8b:2a:db:e7:b6:ac:06:ca:8d:82:e4:80:18:
77:5a:3b:69:16:cf:d4:20:f4:cf:46:70:c8:f3:44:
d9:f5:87:b9:1e:16:17:db:92:7c:ed:62:3b:f2:d9:
e0:70:89:c4:6f:c2:9b:f5:f0:e2:bc:6f:cb:3f:0d:
e7:8f:08:fe:8a:8e:0f:c3:a8:ba:d0:c2:89:7f:ac:
7d:84:23:69:fc:fb:c1:35:e2:11:79:4c:77:4a:4f:
48:bb:91:d3:10:d9:01:36:3b:a6:95:7a:d9:44:71:
0d:c4:04:1c:69:1c:b8:45:fd:17:78:05:87:09:bb:
6c:98:02:2e:77:1a:57:96:0e:b6:b0:bd:08:a3:1f:
4a:7e:8d:41:45:71:39:f3:10:aa:97:c9:57:9e:52:
1b:89:f9:38:3c:c0:32:50:25:23:0e:d1:f4:d7:f7:
1f:dc:b9:58:f9:19:00:d4:35:3d:28:6f:fc:d6:99:
49:9e:2b:9f:93:83:29:45:41:5f:1f:8c:e2:74:ba:
ca:d5:cd:f2:a7:4f:41:1d:d8:c2:2f:2b:04:47:27:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3F:20:07:E9:F4:1B:A7:8D:02:78:B7:A2:90:3A:F7:C0:97:6F:22
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0T8gB-n0G6eNAni3opA698CXbyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
10:5c:80:12:3f:93:19:5a:d0:25:eb:09:5e:14:e6:9e:55:3c:
59:74:79:2f:4d:9d:49:63:e9:36:75:40:4b:29:35:57:f9:d8:
8d:18:fc:9e:73:32:c0:de:5e:38:b9:d3:2a:a2:e4:48:f1:9e:
4a:d1:d7:80:41:cd:ba:10:9b:a5:9e:90:8e:c6:10:66:71:c6:
85:95:ef:0f:78:7a:f5:ee:e3:e4:c7:94:95:66:03:cb:90:d9:
0f:59:e1:31:1d:96:d5:4d:79:20:e4:ff:93:52:13:ce:8f:08:
94:18:d9:ea:ac:54:da:84:88:cd:e8:cb:ce:37:58:f4:1a:ef:
21:5f:e9:08:0f:40:b7:b9:03:a0:66:74:34:f4:e6:bb:02:78:
92:43:bd:3f:f7:30:61:db:7a:80:58:c6:f2:54:a1:dd:9d:a3:
ca:04:9c:eb:ff:4c:af:d8:bd:2a:00:e0:00:30:e7:06:7b:c5:
64:0d:4d:a1:cb:45:16:e7:70:0c:ba:ae:e5:a8:fd:0f:eb:ba:
13:15:19:1d:2e:cc:4f:f9:85:cc:a3:d2:66:8a:93:25:ec:34:
e3:61:95:1b:a3:d9:1d:6e:64:c8:97:5f:87:82:f4:84:04:de:
58:b7:6a:6d:79:85:57:43:67:2a:40:2e:33:f0:75:cb:38:87:
09:de:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:47 2025 by rpki-client