Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4M-Eba52Hc0ajYpFc47A2NBmTHw.roa
File: 4M-Eba52Hc0ajYpFc47A2NBmTHw.roa (raw, json)
Hash identifier: 6KYqyMPtMwHm39IhyrzgtCI1TLYD1la+uw/aZ2daFz8=
Subject key identifier: E0:CF:84:6D:AE:76:1D:CD:1A:8D:8A:45:73:8E:C0:D8:D0:66:4C:7C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF129A174513DA93FE17AFDEEA0DE1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4M-Eba52Hc0ajYpFc47A2NBmTHw.roa
Signing time: Tue 26 Nov 2024 13:35:24 +0000
ROA not before: Tue 26 Nov 2024 13:35:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397201
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:12:9a:17:45:13:da:93:fe:17:af:de:ea:0d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0cf846dae761dcd1a8d8a45738ec0d8d0664c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:88:5f:3a:b4:5f:66:7f:41:1f:13:a2:05:
2f:2e:5b:04:c7:ec:81:9e:d5:56:28:fd:94:38:70:
d8:43:ff:5d:3a:c8:e0:58:d7:89:9c:5b:74:ce:cf:
8c:58:50:d9:54:e6:5d:1c:c0:b1:4f:b3:e6:0f:e9:
ff:35:6f:60:10:91:7b:1b:14:4f:d9:c1:68:9a:41:
67:56:e3:61:60:b7:10:ff:b0:75:49:dd:a4:c9:60:
6a:27:57:56:0c:6d:b1:8d:7b:b0:c0:5a:93:66:55:
45:f0:ae:d1:3d:62:91:3b:d1:5f:1f:fe:a0:a2:9f:
49:5e:98:3c:07:84:0e:24:ac:98:60:29:23:0a:9f:
87:bc:4d:66:a8:8e:d7:c1:12:89:f6:8d:98:56:a1:
c1:9b:70:be:24:7c:28:07:14:7f:27:6b:f1:d2:dc:
82:35:d1:1b:17:2b:83:c6:fe:8c:75:06:b1:14:ea:
30:fd:fa:3c:82:6c:1a:82:5a:00:33:2f:14:35:47:
59:e0:4a:8f:30:76:96:b8:6e:6a:5b:a4:c6:71:a8:
98:f5:b9:46:47:1c:26:82:4c:d1:51:76:ad:52:46:
f3:80:51:ba:6b:aa:bd:ad:c7:90:a2:6f:97:7b:e1:
bd:27:44:50:66:43:00:7f:ae:af:4b:7b:b6:93:9d:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CF:84:6D:AE:76:1D:CD:1A:8D:8A:45:73:8E:C0:D8:D0:66:4C:7C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4M-Eba52Hc0ajYpFc47A2NBmTHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
c1:a7:14:0e:45:23:f3:a0:92:83:84:c8:e4:d1:c5:8e:63:ea:
65:8f:6b:47:2e:27:b4:9b:37:71:e3:67:11:7b:a0:e3:2d:0b:
ad:cf:63:1f:93:85:83:e8:a4:b2:86:6c:25:2c:4c:f6:a6:29:
09:33:33:30:af:b0:6f:58:da:4b:66:94:44:ba:86:e2:1c:9b:
3a:d7:f4:fd:3a:e3:f5:47:bc:44:b2:c6:0e:b9:4c:18:5f:f8:
35:69:8d:ad:e5:94:8c:81:90:5a:9c:f2:80:65:8d:87:26:6d:
dd:06:53:d5:1a:87:f6:08:22:ad:7f:d3:92:90:66:85:46:71:
52:d5:ac:56:90:26:c6:06:9e:8d:39:fe:c1:e1:19:54:31:7c:
4f:fe:41:11:5c:e6:eb:3a:61:2d:b3:40:34:ef:10:64:f2:e6:
12:0b:76:d9:a7:ce:78:c1:54:82:2f:84:8b:7c:28:59:cd:b7:
a1:df:92:0d:37:81:0d:f6:22:ee:f6:6c:8b:80:4b:4c:75:b2:
bd:f9:24:d1:d9:f2:90:d7:46:92:02:59:eb:3b:bb:f2:9c:8d:
5d:54:28:94:05:c7:6d:3f:a2:de:aa:fe:e2:57:91:92:e4:a5:
ce:f1:d9:a0:e8:4a:26:e4:bb:2f:a5:1a:e6:72:f9:1c:69:f3:
29:1a:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:40 2025 by rpki-client