Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/98XBBMve-SXYUWFmW-8BIgcB30A.roa
File: 98XBBMve-SXYUWFmW-8BIgcB30A.roa (raw, json)
Hash identifier: jHELZ8mYPmypvQ5RLJ8DwOtfHS+xQa1Rlq5oIsay1NM=
Subject key identifier: F7:C5:C1:04:CB:DE:F9:25:D8:51:61:66:5B:EF:01:22:07:01:DF:40
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDBA0282279995DD02D2FF9D630AF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/98XBBMve-SXYUWFmW-8BIgcB30A.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397193
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:db:a0:28:22:79:99:5d:d0:2d:2f:f9:d6:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7c5c104cbdef925d85161665bef01220701df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:8a:bc:a8:9a:78:12:fc:2f:72:88:8c:e4:
31:da:2f:51:c4:43:39:36:ec:be:1f:30:90:95:f7:
01:e3:94:b2:ca:57:92:70:ac:c3:a2:de:45:34:f7:
bb:53:1f:1e:42:88:2b:d0:f2:3a:e8:94:e8:9e:e5:
1a:96:ee:3a:fc:66:80:49:db:5f:48:cf:1a:99:d8:
9e:b8:d7:7f:df:10:3e:d1:dc:56:90:f3:24:05:e3:
2d:ef:04:23:89:72:38:49:66:5c:91:8d:60:b6:24:
3f:75:4d:09:80:64:04:01:2b:29:d6:59:46:ac:5b:
d9:4e:19:99:bd:30:ad:f5:61:13:3d:ab:b1:2d:c6:
3d:bb:c8:66:7e:8b:b6:35:de:2b:c9:cc:3f:1e:0c:
48:e8:87:62:12:74:8f:4f:cf:f9:39:4a:76:ee:26:
b3:49:91:6c:00:66:e5:14:4e:5d:75:fa:71:38:98:
ba:93:69:01:40:07:33:e4:ea:51:98:16:6c:7f:c2:
e5:14:c7:2f:c5:f9:8b:eb:0b:ee:d9:ca:ce:02:99:
25:fd:bb:81:01:7e:68:b4:1e:29:56:d4:bf:de:e9:
08:00:8a:2d:c5:3d:86:72:fb:bd:9d:ca:59:e3:28:
9e:92:f6:0b:c1:31:a5:45:40:76:a0:b3:e7:f0:79:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C5:C1:04:CB:DE:F9:25:D8:51:61:66:5B:EF:01:22:07:01:DF:40
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/98XBBMve-SXYUWFmW-8BIgcB30A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
0c:cf:24:83:03:be:0d:2b:c4:11:6d:69:31:b3:2d:aa:a3:b8:
c3:98:a9:b3:9b:5e:39:c6:45:db:24:1f:75:d6:bf:da:28:20:
4b:68:b6:fa:99:a7:fd:5e:69:ff:e1:78:c4:59:f1:72:84:d3:
f0:dd:dc:90:d9:27:65:6a:4a:34:42:b1:62:c9:f6:6d:c5:bc:
bb:5e:90:21:d6:61:9b:f0:6f:c0:4e:59:ea:f3:01:1d:a3:bf:
bd:aa:da:ca:b1:7e:50:73:88:45:f8:9d:6e:ec:f6:4a:3d:d8:
b8:6a:68:e3:30:77:73:25:59:23:14:aa:b5:e1:26:4e:a3:ac:
81:9e:95:f0:f4:04:79:ea:f4:db:b7:d5:3b:6c:c6:fa:d4:38:
42:ef:92:29:dd:20:db:7a:2c:87:bd:5f:11:0c:6e:fb:ff:88:
a0:b2:24:76:d8:10:8a:b2:75:35:51:aa:37:e7:9e:ae:8b:d6:
4c:5d:0f:19:d8:5c:0b:05:cd:ff:ee:9e:d0:48:89:76:29:d9:
fc:bf:4a:9f:00:85:70:66:d8:f2:6c:53:0e:12:3d:3c:28:dc:
08:70:70:22:d5:05:6c:60:79:7f:79:44:69:1d:37:57:f8:e2:
fd:31:88:a8:84:49:32:9d:90:43:6c:db:a9:6b:58:74:b8:3f:
e2:98:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:52 2025 by rpki-client