Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2ws94DqA0kZxvq5VN7JmZLlVc4g.roa
File: 2ws94DqA0kZxvq5VN7JmZLlVc4g.roa (raw, json)
Hash identifier: EPePjgkuEqNpmO6BEXoGeL8SrD0CiahfrNwHTtbJ73U=
Subject key identifier: DB:0B:3D:E0:3A:80:D2:46:71:BE:AE:55:37:B2:66:64:B9:55:73:88
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBCAD1B91BB36ABAB87F0AC8E2EE52
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2ws94DqA0kZxvq5VN7JmZLlVc4g.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396582
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ca:d1:b9:1b:b3:6a:ba:b8:7f:0a:c8:e2:ee:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db0b3de03a80d24671beae5537b26664b9557388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:f7:3a:90:f0:e5:98:b5:21:0c:2c:a2:4e:
79:8a:63:30:ef:70:81:7f:bf:ff:89:e6:fe:2a:15:
06:6b:08:b8:f5:87:04:2c:bc:c2:1b:2b:91:a5:4c:
eb:c3:6d:e6:29:b7:23:e3:6b:9c:bf:fe:0c:2a:15:
2c:52:47:9d:98:58:71:49:75:7c:d8:68:62:21:5b:
15:9b:f8:31:dc:89:2a:76:69:c3:62:83:ea:0f:82:
5d:65:16:e8:2a:1f:6d:d9:75:ad:d0:65:14:ae:cd:
c4:a8:53:c4:eb:b0:1c:ab:95:3d:13:b6:2e:6c:b8:
20:27:bf:b7:29:36:84:f5:ec:e4:11:55:32:fe:04:
84:a7:3c:f8:34:72:3b:f2:6d:50:7c:45:60:84:a9:
f2:49:9e:ce:6c:fd:9d:e8:70:8c:c9:a4:bb:6e:11:
88:8c:e0:4a:42:4a:27:cf:f9:a3:e1:43:fb:74:06:
6d:68:e3:5c:f8:3a:d8:0d:2e:13:51:da:b0:e0:81:
d2:2a:9a:4a:b4:5d:ea:0d:14:d9:00:e2:89:47:99:
3e:6b:24:23:68:48:68:d8:43:46:b1:16:bf:82:38:
11:34:19:30:52:ee:19:83:2b:d2:a6:1e:68:ac:47:
4e:bb:b5:4e:49:3e:88:16:1f:59:c0:3e:37:67:c5:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0B:3D:E0:3A:80:D2:46:71:BE:AE:55:37:B2:66:64:B9:55:73:88
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2ws94DqA0kZxvq5VN7JmZLlVc4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
16:5e:82:ed:25:1b:5c:fc:e0:b7:0b:0b:eb:a3:ac:02:11:b4:
a0:1d:b9:0f:af:b6:6d:32:52:ca:33:7f:7a:1d:05:05:a1:ec:
dd:db:3a:55:a4:bc:aa:a8:04:e1:1b:5c:7f:5f:b4:2f:3f:70:
d6:ef:7e:e3:e5:b4:a3:33:d5:1a:fb:25:8e:3b:2f:58:32:0c:
01:c4:93:21:eb:7b:fb:7e:a5:c1:95:8d:5f:72:09:d8:19:cf:
77:38:d5:99:26:bf:f9:95:d3:d8:56:51:66:c5:48:f1:06:2c:
ca:b1:64:29:ce:3f:99:f2:dc:4f:58:38:91:e0:38:a4:06:2d:
25:e9:aa:a5:2e:d4:26:4d:0e:3d:2a:a9:9c:72:bf:5c:a8:ff:
c8:a9:59:f1:89:de:e9:20:34:0b:7a:b6:c3:df:6d:63:dc:d4:
d6:49:4d:9c:d1:d8:67:71:5a:1d:39:fd:18:22:f9:97:dc:7e:
c8:3f:cf:36:08:6a:14:68:6b:82:9e:47:7f:32:48:08:46:7d:
f5:20:0b:d5:4c:30:df:ca:e5:91:88:e9:7a:88:45:97:17:2b:
0c:04:20:87:e3:46:66:ad:56:de:b4:13:ff:da:39:c4:16:cb:
54:8e:7f:42:8a:61:fa:cc:42:b8:e9:03:86:c0:26:a6:6a:d0:
ae:82:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:22 2025 by rpki-client