Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CY1Sn9_mc2gSbJoMcdG_I9MQGa8.roa
File: CY1Sn9_mc2gSbJoMcdG_I9MQGa8.roa (raw, json)
Hash identifier: wTm6gwbwPx02ocSsbUaT0j5RsK/QzlA0/+hR0zChMC4=
Subject key identifier: 09:8D:52:9F:DF:E6:73:68:12:6C:9A:0C:71:D1:BF:23:D3:10:19:AF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF06675403734E91E19B6150DE534A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CY1Sn9_mc2gSbJoMcdG_I9MQGa8.roa
Signing time: Tue 26 Nov 2024 13:35:20 +0000
ROA not before: Tue 26 Nov 2024 13:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396602
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:06:67:54:03:73:4e:91:e1:9b:61:50:de:53:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=098d529fdfe67368126c9a0c71d1bf23d31019af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:56:09:ba:2d:07:85:ba:5a:6e:13:01:3b:87:
69:5f:7d:29:8a:b9:9b:d1:8c:4b:d8:7d:63:47:2a:
c7:6c:b0:e6:8c:a4:bc:e6:c6:46:cc:96:8e:42:e3:
2c:e3:0b:cd:16:a5:c2:2a:f4:db:6f:e3:06:e7:ef:
57:c6:b6:49:c3:59:7a:9d:f5:4e:be:e9:27:2a:c7:
e8:99:d5:cf:52:30:04:b6:e8:60:15:5c:6f:c6:33:
36:2a:1e:63:9f:32:43:b7:5d:53:ff:60:ad:17:37:
31:3e:a4:45:8a:58:7d:94:58:97:64:18:f0:15:96:
27:76:47:4d:e4:f9:49:59:2a:f7:30:0f:2e:9f:01:
81:61:d8:11:c9:06:4a:bd:ee:78:bc:48:46:7f:a7:
3b:a3:f7:e4:bc:c1:6d:f7:a8:9e:b2:66:4e:2f:0a:
5a:32:44:03:7b:1e:ac:39:ef:66:59:32:25:4f:00:
e5:3f:af:80:ca:f9:ba:39:85:c7:58:96:cf:11:dd:
f6:d9:a6:21:99:a8:8b:85:97:d3:bb:63:d7:a7:8f:
1b:62:e9:1f:00:e4:c9:7e:ed:ee:4c:57:f8:b2:c9:
f7:2d:18:ba:47:9c:84:1d:c7:8d:e4:27:68:36:b0:
e3:dc:7f:91:f0:1d:c9:a3:98:bd:7c:2d:f3:70:4f:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:52:9F:DF:E6:73:68:12:6C:9A:0C:71:D1:BF:23:D3:10:19:AF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CY1Sn9_mc2gSbJoMcdG_I9MQGa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
1a:f0:e2:28:8d:7d:6a:04:ee:29:a2:ef:53:6a:a4:87:75:8b:
bd:95:f4:82:94:72:2e:7b:3f:fc:ab:64:33:59:5c:3e:2b:d5:
53:b5:16:f2:f6:26:c0:cd:5c:4b:50:62:84:06:ae:8f:e6:f5:
9e:7b:a7:22:d2:4b:20:7d:e6:54:99:61:7b:58:22:a3:c0:c4:
20:5b:25:af:1c:45:c2:76:74:29:48:da:95:ab:07:e7:9d:47:
1c:f7:f3:6c:0c:77:19:9d:c8:ef:8f:c3:fd:84:b7:6c:1b:fc:
4f:7d:82:5b:f8:ba:de:cb:66:54:05:b6:e8:ec:a6:82:35:8c:
63:bc:42:f8:21:84:3e:8d:d6:4a:07:b4:dd:f9:37:d0:b1:79:
86:b0:1d:e2:82:ad:1d:fc:ee:3c:65:17:86:ba:81:22:48:df:
90:7c:18:87:0d:f8:75:ff:43:8c:cc:b9:ca:db:7a:46:c9:80:
b7:fd:2d:e7:e6:27:fa:d8:9c:a4:d0:00:a3:8a:2e:47:9c:98:
01:11:c1:73:05:a3:92:1e:fe:ff:7d:16:51:c1:a0:c9:b4:c7:
26:b9:c4:5e:f0:a7:a3:b9:e9:0e:ec:cc:70:28:6e:a1:30:87:
b4:c9:87:d6:f7:3e:be:27:7d:65:60:2e:8f:0b:44:39:cb:8e:
71:93:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:57 2025 by rpki-client