Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6gsk1Wp0zrrA24S6o9IPedSrjTM.roa
File: 6gsk1Wp0zrrA24S6o9IPedSrjTM.roa (raw, json)
Hash identifier: MRPFSe37AEPfZwl+s5iEl8tkJUAbL5tJNmZxloiMqlk=
Subject key identifier: EA:0B:24:D5:6A:74:CE:BA:C0:DB:84:BA:A3:D2:0F:79:D4:AB:8D:33
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE78C44933D313AF5E007BF5DE4D8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6gsk1Wp0zrrA24S6o9IPedSrjTM.roa
Signing time: Tue 26 Nov 2024 13:35:13 +0000
ROA not before: Tue 26 Nov 2024 13:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36626
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e7:8c:44:93:3d:31:3a:f5:e0:07:bf:5d:e4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea0b24d56a74cebac0db84baa3d20f79d4ab8d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:35:a5:4d:b6:30:c9:72:d9:b5:71:06:d2:
dc:c5:b8:73:f1:46:39:e2:db:d4:aa:2f:9a:e4:95:
99:b6:bd:04:d5:42:fb:8d:2a:cd:74:dc:95:44:6a:
3c:f3:8f:43:fa:71:f2:ea:8e:a0:75:8c:19:cd:ad:
21:65:0c:77:6d:4f:43:9a:30:31:33:c2:1b:1f:15:
02:b7:43:71:74:22:73:fe:12:9a:d1:12:05:b8:c8:
79:a8:7c:71:06:d3:e7:cf:c3:6d:04:66:ac:a3:58:
7a:94:0e:1c:7d:71:f9:78:e9:37:5f:cf:b0:a1:a0:
d0:cf:63:78:22:7e:ed:29:fb:e9:64:2f:3c:78:9d:
c3:1d:f8:c4:1f:68:df:46:ae:5c:ef:96:ca:fd:24:
8a:18:e9:7b:8d:e8:c2:84:e9:6e:ed:57:0b:93:fe:
1c:5c:ea:6d:a0:7b:0e:f2:30:92:3c:14:cd:4b:5e:
97:34:07:95:f5:81:2e:03:6d:89:ef:69:f5:28:6e:
2e:1c:c6:3b:ab:9c:dd:92:65:4b:14:b6:11:3a:4e:
64:e8:6f:aa:44:5c:fa:4b:3c:75:df:32:6a:de:ad:
de:66:52:1b:00:ce:fe:10:28:46:3e:4b:05:67:88:
4e:76:b7:d9:93:61:03:07:75:e1:4d:7a:9b:d2:ac:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0B:24:D5:6A:74:CE:BA:C0:DB:84:BA:A3:D2:0F:79:D4:AB:8D:33
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6gsk1Wp0zrrA24S6o9IPedSrjTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
04:61:c9:70:ec:b0:fb:27:22:9a:3b:ab:b9:0e:49:b5:0b:49:
cc:e0:a2:dc:76:f9:69:55:a2:a6:4a:fc:82:2c:09:3b:0d:97:
54:58:d0:b2:25:71:b5:d8:1b:b6:84:c5:cf:7d:b4:15:c2:48:
73:6c:86:77:77:79:1e:c5:a0:f4:22:57:56:cb:a1:24:bc:86:
e5:2a:e1:9d:fa:18:20:dd:2f:4e:dd:b0:7c:72:a8:5a:12:5d:
46:a6:9f:68:3b:58:59:9c:35:0d:20:fa:6e:a1:db:63:b0:b2:
ec:39:23:dc:56:59:ee:09:84:dd:1d:cc:75:84:80:d0:b5:12:
fa:5d:37:ff:f5:dd:90:88:15:bd:9b:48:7a:b1:ca:6a:66:47:
39:e1:01:54:9b:a0:2a:97:bf:86:c5:30:e1:35:e9:fb:06:db:
ff:84:9d:73:fe:49:a6:4f:cb:5d:08:7f:7b:d4:59:49:f3:e2:
33:df:ab:c2:f4:fc:f7:1d:58:4f:bf:f3:86:97:33:cc:99:26:
f9:ce:4d:1d:df:fd:b8:9b:41:4b:a4:a3:4f:4c:66:66:b6:0d:
a0:07:df:5c:88:d7:e8:a8:cb:80:26:0c:ad:53:15:f9:6e:1e:
dc:60:cb:59:ba:c9:bc:e0:b1:23:a4:48:39:5d:48:fd:5e:d4:
b9:c6:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:11 2025 by rpki-client