Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BGZsJPqhlc4ZuFMuSGgWzOayVZ8.roa
File: BGZsJPqhlc4ZuFMuSGgWzOayVZ8.roa (raw, json)
Hash identifier: IoNm6tbEWC69I05jMYnZhenkSkUny2y+gPFNitYwzwM=
Subject key identifier: 04:66:6C:24:FA:A1:95:CE:19:B8:53:2E:48:68:16:CC:E6:B2:55:9F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF13BCBAA99707ACCEF71A2CE6705A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BGZsJPqhlc4ZuFMuSGgWzOayVZ8.roa
Signing time: Tue 26 Nov 2024 13:35:24 +0000
ROA not before: Tue 26 Nov 2024 13:35:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397204
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:13:bc:ba:a9:97:07:ac:ce:f7:1a:2c:e6:70:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04666c24faa195ce19b8532e486816cce6b2559f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:3a:ed:b3:aa:c9:b5:e1:99:17:8f:60:27:
75:ba:8a:b6:0a:78:0f:de:8f:15:28:c9:ed:60:28:
78:bf:4b:10:47:62:56:52:da:8b:a2:c7:cb:72:a8:
71:a1:ee:90:6c:e1:4e:d8:9e:90:20:fa:17:57:db:
f2:77:07:66:2d:2a:70:c4:db:a1:8f:2f:38:21:ac:
71:77:28:2b:30:39:ca:37:b3:78:b6:21:71:58:f3:
7a:91:74:e2:39:d6:31:c1:a7:d8:2a:21:2b:39:e2:
ac:8d:ba:c9:d5:c4:d3:85:76:0b:6d:f1:a2:bf:d2:
b8:14:82:89:8b:e5:ba:bf:e9:42:28:ee:0b:bb:ba:
3d:51:2a:29:ca:ad:6a:2a:b3:74:5a:ab:fc:d6:be:
1d:02:69:2c:15:30:7c:87:d8:11:43:5f:16:b7:ff:
39:2f:33:79:a1:8f:19:3b:ba:8a:09:32:2c:54:1a:
86:42:b1:c5:ee:e1:42:dc:64:3a:9c:f6:11:f8:95:
8a:d1:20:f3:09:d3:6d:f4:20:8f:9c:3b:7e:99:6a:
fc:32:27:09:75:4a:11:36:d1:60:d8:66:af:35:88:
78:54:0f:65:18:0a:88:a6:e9:7b:d1:6c:42:89:c7:
58:38:52:fa:4a:33:a4:53:7e:d4:9d:fb:8e:a6:b6:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:66:6C:24:FA:A1:95:CE:19:B8:53:2E:48:68:16:CC:E6:B2:55:9F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BGZsJPqhlc4ZuFMuSGgWzOayVZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
44:8f:e0:7b:59:fc:81:ff:b6:4d:3c:c2:41:61:7e:ae:54:00:
2d:83:2d:66:68:d7:ff:5a:53:6c:58:ce:cf:c3:5b:f1:aa:3c:
12:29:e0:b4:d4:d5:e1:91:6b:1d:d6:97:40:63:50:e2:5f:46:
aa:1a:93:1e:ca:34:5c:b7:90:e1:a5:e4:36:65:52:da:57:45:
aa:7d:80:85:87:cd:02:e3:4b:82:d4:17:e0:b4:f2:7d:62:4c:
f3:84:0c:23:a2:c8:14:da:3b:31:ec:db:5a:e3:1d:33:d2:5b:
0a:0f:2d:74:b1:bc:0f:9c:61:9c:bf:0c:42:60:4a:48:a5:46:
f1:e4:71:37:99:b0:30:fa:3a:d1:f4:f9:67:77:ac:a4:a8:65:
6f:8a:72:17:8c:4b:13:e3:19:33:aa:6d:b8:d7:64:7a:71:e7:
1b:4a:eb:f1:36:99:b9:84:80:27:ba:2a:c9:c8:69:65:e8:b6:
41:19:5b:b4:1e:00:fb:ac:b5:22:08:3d:56:dc:5c:af:02:02:
fe:84:b1:97:70:1a:ac:ea:d6:76:22:31:9a:10:83:2a:6c:a2:
97:5a:32:4d:60:73:e2:59:f3:65:20:26:cc:4e:33:aa:61:03:
1f:2c:a3:08:9e:ee:e7:69:f0:4d:a9:14:a8:81:ec:9c:3a:d8:
2b:8a:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:59 2025 by rpki-client