Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/AYMXXyHU4WcwYL667kXZ7u57I6s.roa
File: AYMXXyHU4WcwYL667kXZ7u57I6s.roa (raw, json)
Hash identifier: J5gVIR0x4rxZ+ZS0e5Xyseem2PmNW/Wu92ki3wNEwJY=
Subject key identifier: 01:83:17:5F:21:D4:E1:67:30:60:BE:BA:EE:45:D9:EE:EE:7B:23:AB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBCD633B888BA6B17AE347C570793F
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/AYMXXyHU4WcwYL667kXZ7u57I6s.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396588
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cd:63:3b:88:8b:a6:b1:7a:e3:47:c5:70:79:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0183175f21d4e1673060bebaee45d9eeee7b23ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:4d:ef:2b:76:42:7a:33:85:ae:8a:77:e7:
67:50:0f:c5:67:95:8f:da:1b:bd:72:8e:32:c9:83:
bd:12:71:42:05:b3:9c:eb:c9:a4:ef:98:da:55:80:
df:52:c2:ee:8e:2a:5e:92:86:cf:16:57:c8:0c:53:
b2:ea:c4:8b:12:8d:4b:a5:6c:97:63:bb:c9:ed:6d:
5b:c5:ba:13:e0:ce:25:71:79:dc:9a:80:cd:07:b0:
68:c0:f6:46:97:78:11:d2:96:0a:c5:d8:24:40:20:
0b:9a:21:d9:de:d7:0e:5a:cc:fd:b2:35:b4:3e:8c:
ea:4c:cd:6f:70:14:99:2e:eb:22:1f:c1:e1:06:bf:
4d:8e:22:bc:fd:d8:72:c9:cf:20:9a:bc:7a:d7:32:
e7:0f:79:0a:ec:cf:40:f6:95:2f:c3:2e:4b:fa:db:
e1:cc:f5:af:80:10:45:72:60:35:49:f3:67:cc:5a:
0b:62:2b:7f:15:9f:84:76:79:17:a2:30:fd:53:b4:
80:ed:33:b8:89:13:70:eb:40:70:40:c5:50:03:54:
0c:ca:3e:8a:e8:e5:52:3b:d0:e7:f0:3d:3c:c4:be:
ef:5c:0d:c9:69:6c:e8:43:d8:c5:09:9b:de:13:6b:
6e:aa:78:d8:26:a7:65:81:fc:e5:b3:c1:24:31:e4:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:17:5F:21:D4:E1:67:30:60:BE:BA:EE:45:D9:EE:EE:7B:23:AB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/AYMXXyHU4WcwYL667kXZ7u57I6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
57:e5:fd:f8:78:7d:c2:03:01:0e:a6:bc:f4:80:dd:47:f1:a2:
51:28:93:1e:6f:f1:75:69:15:c8:05:6b:a8:a9:1d:d2:50:3e:
99:d0:c0:eb:30:de:e3:71:ed:75:60:25:26:39:f7:f8:75:fd:
cd:b4:98:a5:f7:fa:cb:5a:ad:3e:c9:63:8c:13:32:a5:23:86:
19:cd:a6:a8:09:f6:8f:15:95:4a:62:54:ad:d5:a6:20:62:45:
92:a5:42:44:0a:06:be:8c:1f:9c:a8:e7:d3:0c:7f:ce:14:b7:
7a:06:e4:6e:2c:a0:f3:c5:47:31:b4:8e:39:7d:47:0d:89:55:
d5:3c:89:3a:f5:b0:69:bc:36:0c:08:c3:6f:61:c2:d4:20:9c:
2c:0a:32:17:80:c9:f3:3e:03:b2:6b:c7:77:93:1f:21:88:84:
f5:9e:91:4f:b5:3a:b6:98:28:29:67:d0:52:ea:f6:09:94:0f:
48:d5:46:20:1e:9c:9a:2c:20:d9:09:56:7e:02:ee:f6:78:9d:
15:90:1f:f9:1b:ce:cb:b6:51:ed:ed:d6:52:5c:d5:d6:26:7b:
3a:0d:b6:18:1f:18:13:24:7b:f2:4d:32:52:0f:04:85:0c:ac:
1d:71:64:02:8d:6f:47:e1:2e:35:70:cf:1c:25:83:60:57:0f:
5c:79:bc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:46 2025 by rpki-client