Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/D7XdXa4HtXhSn763MKMtMuvNAh0.roa
File: D7XdXa4HtXhSn763MKMtMuvNAh0.roa (raw, json)
Hash identifier: qRy4+rpUk5kr3eRduG3fravj36WBncAMwdKL+0lIf+4=
Subject key identifier: 0F:B5:DD:5D:AE:07:B5:78:52:9F:BE:B7:30:A3:2D:32:EB:CD:02:1D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE17B058E577D1E580CA5F95D08DB
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/D7XdXa4HtXhSn763MKMtMuvNAh0.roa
Signing time: Tue 26 Nov 2024 13:35:11 +0000
ROA not before: Tue 26 Nov 2024 13:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32651
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e1:7b:05:8e:57:7d:1e:58:0c:a5:f9:5d:08:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fb5dd5dae07b578529fbeb730a32d32ebcd021d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:9f:79:9a:3a:a2:09:5f:90:17:6a:d4:00:
31:b1:f6:ab:ff:15:5a:c9:cc:d9:b7:1e:cc:72:a0:
13:f8:b8:1f:58:be:3c:1c:2b:f6:91:53:99:39:24:
0b:2e:18:73:7d:ea:34:8a:c9:f4:37:6b:29:1d:b6:
30:2b:8d:f6:f2:4f:3f:2b:e8:0e:30:52:48:9a:fa:
98:f1:3e:a7:e5:a5:e0:23:ef:a8:14:1c:44:8c:34:
7f:5a:64:23:78:7c:bd:98:80:fd:7b:9b:6f:1b:ca:
5c:9b:a9:c8:71:27:7d:f7:3c:e7:e8:d8:c8:f1:4f:
64:1c:58:c7:13:fe:b8:1c:d6:2a:d8:74:b5:18:c2:
49:96:ce:88:4d:c0:58:ec:fd:a4:29:de:60:24:b6:
a3:c7:08:32:e6:aa:9a:e8:63:a3:d9:8f:c1:61:b5:
e0:bb:9b:bc:a3:6e:c7:bc:c2:b0:a2:81:05:a2:9a:
1e:f9:96:8d:5f:95:1e:0e:d3:d6:d5:5b:fd:26:68:
29:f2:6c:8b:7a:3c:f8:da:de:e2:2a:5a:e7:c9:17:
58:40:e8:b3:cc:a2:dc:5b:9f:06:77:47:97:c5:32:
d3:70:8d:e3:b9:46:93:9a:a4:77:b3:62:b7:8f:4d:
41:9e:44:63:39:39:c7:72:3e:76:31:ad:11:7a:bf:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B5:DD:5D:AE:07:B5:78:52:9F:BE:B7:30:A3:2D:32:EB:CD:02:1D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/D7XdXa4HtXhSn763MKMtMuvNAh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
03:d7:49:ea:6e:44:c1:b5:b8:b5:e9:ee:1d:8b:4e:89:8b:a1:
a3:f2:de:44:6f:d2:ff:70:47:7f:9c:66:f8:d3:ac:bf:8c:f1:
ac:70:43:ad:08:ee:ca:f4:ea:fb:c4:cb:fa:75:e1:8d:5e:46:
3f:dc:9b:ee:ee:16:62:10:95:1f:bd:7d:b7:7b:0f:e9:b5:5e:
22:ab:04:6b:af:8f:28:f7:a6:27:21:31:47:73:85:b4:c8:0b:
43:80:46:7f:a0:d8:5e:7d:b2:03:85:67:c7:f3:f8:74:01:9e:
7c:b1:30:66:03:95:ae:6f:38:27:29:5e:c2:38:bd:1d:4b:0e:
2f:34:bf:5a:f2:76:d6:c4:0e:93:46:42:48:ca:ba:8d:e8:ae:
80:44:9c:45:2a:ee:21:c9:6a:bf:e2:c1:ff:61:38:ce:3f:4a:
c3:8e:38:00:40:96:2b:6a:ea:99:89:f6:4f:10:a2:b2:8a:84:
84:89:a3:45:47:c9:d6:9a:c2:e8:9e:6b:3b:02:b7:c2:db:c7:
7a:85:92:ab:80:c9:0c:d6:c2:7d:20:d2:cf:0a:1e:cf:40:cd:
a9:99:97:51:6e:59:d0:72:40:84:dc:bd:c5:6b:0f:fc:1c:09:
95:f6:74:72:9d:3c:fe:82:e4:70:f3:fe:1f:6e:8b:a3:01:65:
3c:91:83:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:51 2025 by rpki-client