Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4jeQLQy0a17O910uc5_ugzYdGLI.roa
File: 4jeQLQy0a17O910uc5_ugzYdGLI.roa (raw, json)
Hash identifier: 93SDZOcud/vspsu1D3Iagw3PjJrqHtQOAiKSx5ZlWvY=
Subject key identifier: E2:37:90:2D:0C:B4:6B:5E:CE:F7:5D:2E:73:9F:EE:83:36:1D:18:B2
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF3909DC58BDDA7DE3364E0CD7FA2
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4jeQLQy0a17O910uc5_ugzYdGLI.roa
Signing time: Tue 26 Nov 2024 13:35:16 +0000
ROA not before: Tue 26 Nov 2024 13:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396561
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f3:90:9d:c5:8b:dd:a7:de:33:64:e0:cd:7f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e237902d0cb46b5ecef75d2e739fee83361d18b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:24:f6:af:5f:a5:ad:b9:06:50:f7:59:4c:
4c:9b:43:4c:88:ee:23:54:5e:00:81:91:55:bb:45:
d2:37:1a:c5:0f:de:6a:13:47:de:36:c4:a2:19:13:
4e:2f:37:23:58:02:f8:46:ec:84:65:00:d8:85:ae:
a5:20:0f:ca:77:6d:0e:12:0f:a9:ef:c8:77:90:4a:
1b:28:e2:f1:22:ac:64:de:24:3b:93:57:88:81:19:
35:4b:aa:7d:b0:f3:06:29:a4:c4:68:cd:70:67:18:
25:f9:b5:3c:84:98:d8:1d:ed:1b:80:1b:47:59:46:
aa:60:d3:b2:56:9e:c5:4f:80:eb:c0:c9:42:3c:0e:
cd:ed:4a:87:08:00:b4:de:e4:d8:32:36:06:43:28:
32:5c:f9:d9:c6:c1:a1:56:28:51:98:d0:bc:6b:b5:
0d:4d:fe:d0:da:40:90:45:19:05:f3:40:e8:d2:03:
03:e6:c4:fa:38:e1:20:33:49:2b:33:b8:76:86:10:
87:2c:85:86:d0:e0:78:f4:02:38:b1:51:9c:9d:e3:
62:75:d1:67:96:b6:b2:a8:df:7c:f3:83:65:c5:83:
51:7d:a6:b3:89:e5:64:ef:b5:9d:29:d0:87:89:e0:
ff:9b:65:70:4d:50:5a:a3:f1:d8:b2:58:28:0a:2a:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:37:90:2D:0C:B4:6B:5E:CE:F7:5D:2E:73:9F:EE:83:36:1D:18:B2
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4jeQLQy0a17O910uc5_ugzYdGLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
4f:ca:76:77:d6:41:66:30:10:da:0b:06:ab:8d:a3:51:cd:5e:
94:5f:dc:3f:e0:2e:2d:a1:fb:78:1f:40:b0:a3:f2:64:38:bf:
c5:92:a0:22:7d:a5:46:f8:13:68:8c:d7:03:4e:03:9e:14:df:
ed:af:88:67:6e:3b:a7:8f:4b:03:08:2b:84:7e:35:d5:14:87:
ed:81:c9:76:51:11:f7:f0:5c:7c:f0:dc:92:ff:56:95:f0:8d:
c2:56:18:ba:b1:42:18:0b:36:37:3b:fb:81:d3:30:93:93:5b:
d6:83:55:4a:7e:d6:e0:7f:a3:21:9b:3d:c7:56:e2:98:64:b1:
ac:eb:0c:a3:f7:e4:3a:db:7c:92:4e:46:5b:d2:c3:b0:8f:5f:
fd:83:a1:41:73:b1:8c:1e:1a:97:a0:c1:48:52:44:0d:b2:9b:
a2:17:7f:83:04:56:24:79:f1:9d:fb:d7:a8:66:25:c9:fd:3e:
29:d0:fd:62:7d:cf:ca:0b:fc:e0:a5:bd:9a:80:54:5b:82:7c:
56:ff:66:ac:df:74:de:02:9e:4c:e8:31:b4:1a:88:6a:bd:3a:
54:c3:70:40:84:7b:5a:44:e0:1a:ad:75:97:99:8c:93:5b:54:
f6:36:c0:a9:62:2c:93:50:5c:ec:2d:60:8a:61:bf:80:18:41:
7f:0b:4d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:39 2025 by rpki-client