Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4kMk9MMth8rywjse8OwCvXxvrxQ.roa
File: 4kMk9MMth8rywjse8OwCvXxvrxQ.roa (raw, json)
Hash identifier: MK1xTI/xFFvZOYNuAoDR3pgXNMw5mFuL/NZt5AaTL60=
Subject key identifier: E2:43:24:F4:C3:2D:87:CA:F2:C2:3B:1E:F0:EC:02:BD:7C:6F:AF:14
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE6F07BE275803B60254A8F7ACF62
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4kMk9MMth8rywjse8OwCvXxvrxQ.roa
Signing time: Tue 26 Nov 2024 13:35:13 +0000
ROA not before: Tue 26 Nov 2024 13:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36624
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e6:f0:7b:e2:75:80:3b:60:25:4a:8f:7a:cf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e24324f4c32d87caf2c23b1ef0ec02bd7c6faf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:db:3c:20:4e:de:10:df:04:ca:4c:11:16:91:
9f:9d:ea:4b:fd:c1:54:00:52:28:35:f3:c1:93:16:
e6:32:7d:3a:8c:cb:c0:f6:37:34:0c:a4:6a:e7:00:
d1:c0:8b:83:b3:0e:a2:56:bb:da:cd:af:ed:8a:15:
57:83:43:72:86:49:fe:b5:33:57:93:a2:8d:78:39:
6a:58:d9:c6:68:88:c9:08:7f:09:cd:c1:78:07:79:
63:cc:be:49:d0:d8:25:af:f6:46:4c:08:12:22:04:
0f:de:a0:b8:b4:05:11:d0:28:5f:10:a4:fe:fe:da:
c9:41:f6:df:70:ab:ec:e6:05:0d:4d:1b:8b:1e:b8:
da:7f:fb:2b:7a:f0:a8:65:75:cc:90:88:f5:97:fe:
a1:3a:ba:bd:b2:2d:51:51:34:39:eb:a3:ab:02:c1:
22:bf:2a:53:ab:18:f0:34:61:be:d1:26:f0:f3:97:
aa:41:33:a5:2b:40:b7:f8:4e:8e:3c:9c:6e:53:b6:
07:be:33:6b:8b:ac:09:c6:8f:92:6b:da:45:da:34:
f4:8c:01:80:c7:f0:8e:72:6f:22:af:08:d0:74:1f:
1c:f1:f8:2e:57:2c:b9:ab:6f:c6:52:cc:e8:7e:e3:
bf:9b:8d:0d:91:5a:32:b4:33:dc:33:2a:38:d3:ca:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:43:24:F4:C3:2D:87:CA:F2:C2:3B:1E:F0:EC:02:BD:7C:6F:AF:14
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4kMk9MMth8rywjse8OwCvXxvrxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
82:bc:21:c7:dd:71:1f:db:f2:08:ec:18:ce:4e:85:2c:a9:c5:
02:ca:67:8a:7a:75:28:19:5f:c9:80:14:ef:7f:6c:0f:71:f4:
99:ac:7c:72:5e:cc:49:2c:68:89:aa:26:f2:e7:87:42:83:ae:
a5:82:6b:80:32:a0:88:ca:60:ee:56:cd:d0:88:da:53:04:8c:
db:f5:9c:35:58:93:e9:66:cd:d7:be:06:4c:2a:13:0e:32:d9:
79:ae:60:15:53:bc:69:e8:41:a0:02:ab:34:46:7a:ad:bc:a4:
be:ec:d6:1e:11:85:c2:9f:84:1d:4c:00:4f:f3:13:70:ae:db:
c8:d5:22:b3:55:78:a2:14:38:3e:e8:a6:8e:d3:0a:97:02:c3:
e0:35:76:a3:de:e8:7c:b4:06:7d:af:e7:f4:3c:97:fd:05:62:
b7:50:57:10:52:1c:07:f5:c3:76:fe:81:dc:38:ee:89:7b:99:
64:fb:59:6d:35:33:40:12:ad:66:64:40:a2:e9:11:62:45:34:
e6:a4:1e:af:20:b0:be:87:6f:9e:41:6c:8e:8c:3f:ba:59:45:
d4:40:b3:87:f2:23:52:1e:55:c3:38:c1:45:66:d7:62:8b:25:
2b:ae:f7:48:df:53:06:16:15:bf:e5:56:93:f8:2e:7a:0d:cc:
10:69:37:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:11 2025 by rpki-client