Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/71ElLvdOz83mcFc5Dv467SsMLz8.roa
File: 71ElLvdOz83mcFc5Dv467SsMLz8.roa (raw, json)
Hash identifier: DqHogD5PbjqsVeJVu0AFbTU4KXq04GL5DD4s0h7VvX0=
Subject key identifier: EF:51:25:2E:F7:4E:CF:CD:E6:70:57:39:0E:FE:3A:ED:2B:0C:2F:3F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBCECB699DEC745632D074167C1429
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/71ElLvdOz83mcFc5Dv467SsMLz8.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396590
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ce:cb:69:9d:ec:74:56:32:d0:74:16:7c:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef51252ef74ecfcde67057390efe3aed2b0c2f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:a7:9b:1c:83:2d:cd:35:e0:2d:23:3d:f0:
b1:ed:15:8d:36:63:83:22:ef:53:f8:93:a0:91:bb:
32:57:26:b1:99:65:de:60:cd:82:f3:9d:1f:a1:b9:
c2:60:84:7f:c6:fd:56:61:90:e2:b5:e5:4d:70:9d:
3f:7c:a5:2b:72:52:70:4b:60:71:c4:ca:6f:62:03:
23:aa:e3:ae:0f:3f:13:2b:47:73:c5:39:dd:03:a2:
24:c0:47:16:37:16:a9:1a:09:89:d1:bb:f7:6d:a7:
81:a5:8d:a0:3c:42:87:d7:e7:42:56:00:a6:40:26:
18:22:51:39:c0:d5:d2:f0:49:5a:ba:da:b4:af:fd:
fb:1d:1d:3e:75:78:5f:bd:91:8f:c7:6f:e4:93:df:
7d:a8:bd:48:f2:22:a0:f8:bd:81:da:f4:0a:4f:07:
b5:c8:21:8f:01:49:2b:34:e3:ff:23:f4:7f:8c:b5:
81:a1:42:b7:20:ca:ea:e9:0d:4d:79:f1:31:e3:c2:
0e:5f:2a:3a:33:e4:7e:49:91:f7:21:45:6c:ac:87:
58:61:ad:43:7f:9d:4c:51:e8:22:73:cc:1a:23:ef:
60:32:71:f1:40:f1:86:bd:65:57:d9:46:be:d3:62:
b3:ba:29:64:2a:32:ba:9e:5f:6d:0d:9b:3e:39:a6:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:25:2E:F7:4E:CF:CD:E6:70:57:39:0E:FE:3A:ED:2B:0C:2F:3F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/71ElLvdOz83mcFc5Dv467SsMLz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
b4:39:e7:48:e5:f7:83:4d:98:ff:b5:8d:a9:75:8c:c6:73:40:
32:0e:e8:b4:57:b4:54:8d:13:4b:17:40:5b:64:6b:ff:12:92:
de:31:3f:0b:9c:f5:8b:39:c4:73:5c:99:da:2a:8e:b2:e6:4a:
b9:ce:0e:b4:05:b5:d0:17:79:08:da:3f:c3:0e:10:e2:99:e7:
34:3b:15:6e:ee:e1:40:d0:13:f5:1a:02:1b:76:f6:5e:78:de:
a4:5f:f8:15:b7:9d:b6:d1:00:4e:b4:fd:c2:35:cf:72:92:a1:
8c:56:b6:6a:8e:e7:3e:59:80:df:e5:63:7e:62:49:8f:a8:0c:
15:bb:1c:10:f8:fd:16:c6:83:d3:11:20:cc:9f:14:df:04:14:
9c:73:97:9a:cb:e0:d4:78:39:ae:8e:1a:d0:07:4d:37:bc:de:
dd:42:69:6a:09:95:73:74:71:39:ed:8d:cc:f6:4b:ce:d6:87:
3a:f9:37:d4:4e:69:66:b9:9d:eb:f3:69:79:97:3d:e2:ee:29:
b5:89:60:d0:78:5e:47:57:94:cb:ae:84:e8:85:4f:0d:37:d7:
8c:88:ac:2e:89:d2:42:39:d9:a3:62:10:26:0a:ed:1d:b2:b5:
48:83:a1:e9:9e:e0:d0:f0:eb:cb:7e:b0:20:1a:b4:b3:30:8f:
49:e1:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:41 2025 by rpki-client