Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2MMih059p-jW4Nhp7CKI41BTfWI.roa
File: 2MMih059p-jW4Nhp7CKI41BTfWI.roa (raw, json)
Hash identifier: eOD9ZGx/k1r81qRGXz0OcZ7wpsOsHFD9XPtia6tDULo=
Subject key identifier: D8:C3:22:87:4E:7D:A7:E8:D6:E0:D8:69:EC:22:88:E3:50:53:7D:62
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBAE253114268E416858936505F263
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2MMih059p-jW4Nhp7CKI41BTfWI.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25485
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ae:25:31:14:26:8e:41:68:58:93:65:05:f2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8c322874e7da7e8d6e0d869ec2288e350537d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:4d:ad:92:54:76:44:bd:d0:82:ad:fd:3f:
af:63:e8:22:e2:ab:d9:87:7b:ab:df:fd:a4:b8:ed:
ef:13:52:d9:e2:b7:16:d7:b9:09:0f:c3:a4:37:1e:
0d:39:3f:b9:17:ce:1c:0a:63:67:a4:2c:2c:e7:cb:
60:e2:e8:9b:9d:45:be:1b:d3:75:cc:7f:8a:3f:3c:
75:ad:da:1f:36:5c:68:66:37:8b:27:dc:a0:4d:25:
1c:13:d3:49:98:b9:82:c5:f2:2f:8f:da:f3:2f:dc:
65:d3:8b:5e:46:eb:34:44:d6:b8:50:97:ae:f3:ca:
3d:bc:9d:28:b5:14:9e:af:96:c7:3e:8f:e2:37:de:
53:5d:21:3f:50:da:c8:8c:52:75:37:32:94:51:4a:
e5:62:bd:80:b4:f9:b6:6f:26:14:e6:09:f2:e0:0d:
c5:68:84:b2:b0:cb:5b:fe:f2:f3:27:35:2d:94:b3:
ad:54:2d:33:31:d7:c6:68:f4:ce:ed:e8:f3:f9:30:
4b:ae:f0:3a:5d:00:eb:29:5d:ed:8b:4f:61:42:c7:
a8:20:a5:5c:e6:67:cd:43:30:99:b6:e6:ef:f9:a6:
97:07:31:b5:5e:0a:7a:09:6e:63:d1:6e:8b:2b:ef:
d3:b7:a5:79:b1:e3:13:79:34:2d:c3:1e:55:f1:04:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C3:22:87:4E:7D:A7:E8:D6:E0:D8:69:EC:22:88:E3:50:53:7D:62
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2MMih059p-jW4Nhp7CKI41BTfWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
2a:f7:0d:f8:1c:08:0c:00:e9:c4:0d:00:27:5f:a2:67:45:37:
d8:b3:34:b4:64:80:4c:56:db:81:f2:11:52:7d:85:31:08:f5:
b4:4f:95:e0:95:96:ad:9c:21:ea:56:93:66:77:c1:4a:fc:de:
fe:62:21:c7:da:e8:53:78:41:89:4f:69:a9:28:05:dc:5a:e7:
44:8d:26:a4:01:98:40:df:ce:96:cd:e5:ea:bd:7e:09:6e:0e:
4c:d1:71:68:a2:06:39:2b:57:df:90:57:18:e2:8d:eb:a7:83:
92:c2:a1:ef:3d:86:be:6e:9c:c1:f1:d0:2e:43:a5:9f:63:ce:
be:7b:24:82:30:e1:0d:61:68:37:b7:f1:ac:73:4b:3c:96:18:
a6:7d:d4:18:22:ef:40:74:2c:fb:c3:4d:d2:1f:83:95:aa:b8:
ee:53:5b:0d:0e:6f:5c:5f:ff:00:32:3a:9f:2e:b4:85:ff:81:
13:dc:7d:79:78:77:b3:e7:77:69:61:d2:e0:f8:91:9a:47:4d:
93:48:5e:d8:7d:c8:3d:8d:73:09:b7:a7:84:d2:16:d2:96:88:
2e:e7:0f:a0:f9:0c:a0:dd:70:a3:86:cd:1a:4b:51:95:dd:dd:
cd:c2:b3:2d:7f:5d:71:60:fe:15:88:2e:c2:c1:b5:ab:d8:52:
a0:f1:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:30 2025 by rpki-client