Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-DLE341YhRkzVccFvQHPFoBBz30.roa
File: 1-DLE341YhRkzVccFvQHPFoBBz30.roa (raw, json)
Hash identifier: hjVqIATVYQByI5HRwoEL93UM4ul42dlGF9Q34XM6iKo=
Subject key identifier: F8:32:C4:DF:8D:58:85:19:33:55:C7:05:BD:01:CF:16:80:41:CF:7D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0318EA6AA4AB14209650D63EBFA1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-DLE341YhRkzVccFvQHPFoBBz30.roa
Signing time: Tue 26 Nov 2024 13:35:20 +0000
ROA not before: Tue 26 Nov 2024 13:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396592
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:03:18:ea:6a:a4:ab:14:20:96:50:d6:3e:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f832c4df8d5885193355c705bd01cf168041cf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:dc:59:02:d1:b6:21:08:9a:39:dd:12:6a:
cd:cd:08:79:dd:75:2f:3a:56:4b:57:22:17:ec:4b:
f5:23:ef:c0:08:f4:8d:02:b9:aa:1f:00:7c:37:fa:
1b:01:90:26:05:0b:f2:3d:ff:f0:23:b9:c3:10:8a:
76:77:17:07:eb:1b:d8:d3:01:30:ce:4b:62:4a:a2:
4b:99:6d:c5:c1:62:2b:9a:f4:db:22:6c:68:a9:dc:
ec:f3:15:47:91:5c:be:bb:80:1c:2f:52:4f:22:65:
d8:04:b7:13:f1:3b:26:51:d4:60:91:1d:7a:d5:2e:
2c:d1:c9:66:36:02:59:e5:b1:24:a9:64:41:71:5f:
bf:43:06:f0:7a:c7:d8:7e:41:1e:f8:8f:0f:cf:4b:
7e:2b:92:2c:04:9c:f2:9d:03:80:80:fc:ef:eb:e3:
60:6c:4c:45:22:cf:88:59:d8:01:b1:68:68:53:1e:
f1:47:16:58:34:2d:eb:b3:6a:fc:5e:b7:5f:e8:b5:
91:a3:8c:10:0f:63:c3:9e:70:ef:41:34:a9:97:a6:
5d:7a:06:51:2e:1b:13:9e:66:68:6e:04:07:a3:70:
7c:95:8d:74:4c:98:ae:aa:30:54:84:d1:38:62:73:
f9:87:5b:a5:00:02:3f:b9:ed:e3:3e:22:75:88:39:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:32:C4:DF:8D:58:85:19:33:55:C7:05:BD:01:CF:16:80:41:CF:7D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-DLE341YhRkzVccFvQHPFoBBz30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
5f:ff:4d:19:83:94:48:37:37:78:e0:da:4a:62:57:a3:33:16:
94:10:06:11:57:f9:58:f6:13:f2:e1:cb:ab:61:bc:f9:e5:c7:
78:a0:49:2d:c8:69:7c:5b:a8:1d:37:6d:aa:42:12:d0:5c:f9:
78:ba:48:ed:6b:23:f8:9a:df:d1:4f:db:68:0e:de:d9:1a:07:
bb:9a:b0:d2:17:ae:05:c5:02:f7:2c:82:a5:ba:6e:32:c6:7b:
30:eb:18:57:d5:c8:cb:d2:08:1e:f2:bb:47:33:9c:94:c4:99:
5d:f8:21:5a:ac:0f:76:46:d3:3b:30:4f:1a:d2:07:58:60:40:
ed:df:5b:91:13:7b:90:0d:53:89:58:ab:4e:1d:07:d1:39:61:
24:4c:79:2c:aa:ec:01:53:a3:b2:95:ff:f7:16:03:ca:e8:3e:
54:1d:36:bb:1e:6b:66:0a:0c:3e:8b:31:66:9c:92:11:09:06:
b0:3f:2f:ae:11:fe:32:75:b5:43:4e:0f:5d:8a:76:f8:1e:3c:
72:18:37:b2:c6:76:35:02:34:57:5c:16:2b:6c:8e:6a:25:b6:
f2:37:2a:c4:ea:05:e7:01:b3:a4:94:69:bf:7b:a0:eb:fe:93:
9d:47:61:f8:1f:d6:76:ef:c0:15:30:9f:d7:79:3f:03:67:36:
15:46:da:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:56 2025 by rpki-client