Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/At36TvlZu_4orjH31BSF8glgxrs.roa
File: At36TvlZu_4orjH31BSF8glgxrs.roa (raw, json)
Hash identifier: IeSw1E33izXbIx3RL6CpBqdvBGWXtYDJRL4JV1HbnA0=
Subject key identifier: 02:DD:FA:4E:F9:59:BB:FE:28:AE:31:F7:D4:14:85:F2:09:60:C6:BB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC7E23509A964C6497E2D467E290B
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/At36TvlZu_4orjH31BSF8glgxrs.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396576
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c7:e2:35:09:a9:64:c6:49:7e:2d:46:7e:29:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02ddfa4ef959bbfe28ae31f7d41485f20960c6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:e2:00:00:53:7d:51:a6:8b:bd:3c:b2:38:
1b:82:5d:a2:f1:6b:f5:c4:dc:18:4d:c2:4a:44:cc:
3a:c4:e2:31:7d:58:b4:91:38:47:b3:32:c6:04:17:
c6:17:83:85:46:da:34:95:1f:b0:34:6c:fa:21:d0:
a7:36:b0:5b:e8:e6:fc:74:31:a3:32:4c:85:0c:ca:
00:ae:ae:b1:36:ed:45:e4:6f:4f:97:f7:9c:db:a2:
11:82:55:f2:f2:9e:99:10:37:2b:4b:14:f8:93:23:
91:1d:a2:4e:ca:71:f4:39:eb:6c:77:b6:7b:64:ff:
99:4a:dd:4e:cf:a9:0b:26:83:a6:80:34:ac:6a:32:
98:4d:00:51:d2:9d:88:f1:b7:fd:a8:ce:6c:82:c4:
0f:95:4b:26:c3:43:2f:4a:17:0c:56:8a:d2:5f:fa:
b3:3e:da:32:ae:f2:f4:e8:78:81:53:91:a1:af:be:
bc:13:e5:15:b1:fb:7b:f5:be:8e:d5:a0:31:94:a7:
55:6e:c8:ce:8a:29:e1:f7:fd:e2:ac:de:11:55:cd:
df:58:22:a7:74:34:7a:b9:e7:ab:c1:6d:19:2a:d3:
91:30:bd:5c:c6:73:b9:bb:70:f8:7a:60:50:3f:8c:
62:06:c0:a1:89:fe:95:fb:90:e1:11:65:11:c2:7d:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DD:FA:4E:F9:59:BB:FE:28:AE:31:F7:D4:14:85:F2:09:60:C6:BB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/At36TvlZu_4orjH31BSF8glgxrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
50:62:f2:20:c6:ce:f8:24:b6:e5:64:a7:78:26:c8:47:42:15:
8d:3e:74:44:87:b3:bf:35:08:8f:8d:57:3b:b6:ff:d7:74:0e:
24:eb:bf:33:6e:77:d9:38:b1:71:1f:7a:c5:55:9e:b9:4e:32:
3b:0a:82:c3:ac:fa:fa:a1:0f:ca:8f:62:1a:15:b6:21:4f:d0:
ea:b9:8e:12:c9:12:cb:0d:52:60:6a:88:2e:64:0e:22:f9:3c:
38:41:30:15:77:9a:dc:1c:39:44:56:3c:fc:f0:00:fb:b1:8a:
67:d0:0b:c2:c3:d4:c5:f7:8c:7e:7e:01:44:f4:1c:c5:83:dd:
83:8b:ea:b9:f3:6b:96:d4:ae:f8:c7:84:ad:db:f8:19:3d:1e:
b6:f1:6a:0d:5b:a5:9c:6d:ed:0c:40:8c:0a:f1:e2:f8:03:6f:
aa:5a:c8:7d:b4:c5:5e:5a:10:83:6b:8f:a7:ca:a0:28:49:bf:
57:a3:a1:25:d5:3b:39:65:27:30:76:64:2c:cc:23:f4:62:04:
7b:2d:e8:5d:98:50:55:5d:b4:ad:2e:bf:5a:ad:c8:05:2a:c1:
4a:59:bb:b8:13:02:2c:46:69:e8:0a:f4:7c:a1:b6:2a:7a:6b:
30:d9:0d:7b:f1:fc:8f:36:c6:c8:7c:f2:b5:b1:c0:76:03:d1:
6d:34:20:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:27 2025 by rpki-client