Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Csrz1tgL3L89a7Af_O9FcAHn42U.roa
File: Csrz1tgL3L89a7Af_O9FcAHn42U.roa (raw, json)
Hash identifier: +wzIo34442d3KEl8NJa86us6HXibiwL4kBRQBcb4l20=
Subject key identifier: 0A:CA:F3:D6:D8:0B:DC:BF:3D:6B:B0:1F:FC:EF:45:70:01:E7:E3:65
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD6E0263FE8511EF7BFE4BB5FDEEC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Csrz1tgL3L89a7Af_O9FcAHn42U.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396611
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d6:e0:26:3f:e8:51:1e:f7:bf:e4:bb:5f:de:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0acaf3d6d80bdcbf3d6bb01ffcef457001e7e365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:6c:63:5f:d6:8a:fa:e6:d4:be:03:f2:2c:
7c:a9:84:88:bb:f3:a5:b7:59:63:76:e4:ca:5c:cf:
cc:d4:d5:c5:2a:16:fa:fe:2b:bb:f8:8d:97:88:dd:
69:a7:54:56:5c:ae:3d:3a:00:41:0a:2b:13:7d:22:
2c:ed:2c:71:bf:00:ba:6c:53:83:4b:87:48:b6:6f:
be:cb:17:ba:20:5c:19:8b:c5:70:22:5a:dd:7a:9f:
d4:19:22:13:91:d0:3f:45:e9:4d:72:6a:2a:28:62:
70:cf:12:05:64:e0:37:3f:07:63:68:a8:59:36:c5:
20:09:76:e2:0b:bb:2f:14:8e:89:96:bc:65:48:33:
9e:08:85:61:d6:71:62:30:4a:97:3b:62:2d:3d:93:
c8:66:38:1d:4a:96:91:d5:3a:e7:7b:e1:b7:3d:ab:
68:af:0f:87:ea:78:e6:d0:2c:8b:09:ad:58:56:29:
db:bd:c2:99:e1:26:b9:e3:7c:92:fd:d4:21:73:fb:
42:aa:4a:f7:d4:8e:78:bf:23:7f:76:c4:d6:11:37:
2f:b0:33:ce:04:6d:9f:98:b4:28:2d:17:dc:41:97:
9b:2c:c2:c0:f4:a5:e8:2c:8b:77:10:2c:ad:bf:2b:
7c:e8:13:d6:fc:3a:92:96:bf:cb:e5:ca:55:03:42:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:F3:D6:D8:0B:DC:BF:3D:6B:B0:1F:FC:EF:45:70:01:E7:E3:65
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Csrz1tgL3L89a7Af_O9FcAHn42U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
01:62:0c:44:e2:a6:2a:2d:9c:d0:46:b2:73:ec:33:20:85:80:
a0:e6:fe:70:cc:8e:ff:47:a1:e8:f0:8e:bf:49:51:e1:b2:fa:
f4:c0:dd:9e:c1:35:54:37:ed:f7:c8:c2:a4:a1:5d:db:6d:5d:
4a:72:4e:bd:78:ab:4a:b5:01:4d:11:eb:8b:ef:58:ad:e4:bf:
d6:89:2a:b3:b2:cb:3c:c5:86:f1:74:eb:5b:d7:2c:bc:63:16:
20:38:24:13:f1:6f:8b:0b:1a:f2:b4:8c:6b:dd:cd:d4:c1:63:
e8:27:96:12:99:c0:ba:9e:88:f7:03:a4:1e:d0:94:f7:3f:ec:
eb:00:af:39:2a:0a:59:ee:5a:bd:61:95:d8:8a:37:2b:74:47:
0d:4b:50:47:cb:4b:b5:4f:c0:23:5e:af:10:01:77:a9:e6:c3:
a8:33:ab:06:31:90:13:01:61:c3:43:a7:9d:13:af:98:3e:f5:
c0:71:49:a2:b4:57:d0:1b:ce:9d:36:6f:7c:75:cd:28:30:51:
15:1f:05:93:d7:7e:94:b4:14:7d:f8:6e:96:58:7e:4f:45:7f:
8a:2d:aa:0e:e0:d5:81:0e:eb:3d:0d:a1:d6:16:d1:e6:9c:0b:
cb:37:09:6d:35:53:8f:ef:81:9c:fc:90:5c:64:9a:67:59:00:
f7:ca:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:11 2025 by rpki-client