Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DluQ-9laUKwwlLCj0svEwFBelv8.roa
File: DluQ-9laUKwwlLCj0svEwFBelv8.roa (raw, json)
Hash identifier: amZnm4RtcXAEwwvk3wg+9eGUVE4mXu5g6Xqq7/UvWG0=
Subject key identifier: 0E:5B:90:FB:D9:5A:50:AC:30:94:B0:A3:D2:CB:C4:C0:50:5E:96:FF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0C2B23E8D819AF0EBFC2C5C1F34D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DluQ-9laUKwwlLCj0svEwFBelv8.roa
Signing time: Tue 26 Nov 2024 13:35:22 +0000
ROA not before: Tue 26 Nov 2024 13:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396614
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0c:2b:23:e8:d8:19:af:0e:bf:c2:c5:c1:f3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e5b90fbd95a50ac3094b0a3d2cbc4c0505e96ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1a:98:c2:91:36:1f:09:ec:7f:98:ea:2a:ec:
9d:0d:83:1d:f2:ca:9d:c5:79:19:09:e9:bb:71:5a:
ea:b7:7e:c4:50:2f:a4:4d:67:e2:fb:b5:53:9e:f0:
ce:c2:aa:fa:28:cb:22:14:f7:4e:d8:f9:22:c6:ce:
c8:b2:b3:4c:04:d1:9c:41:80:4a:0b:e5:7c:ce:d5:
f7:20:7e:6d:2d:47:bf:95:10:2a:31:b3:bd:7b:59:
62:b6:1e:2b:d9:dc:d1:ca:9c:18:f7:61:9c:ea:ea:
0c:85:f5:86:04:7e:d9:ea:d5:db:e2:38:74:e1:39:
44:bd:0f:ef:21:4f:68:b3:9d:ee:9d:43:fa:6d:f2:
5d:52:f2:c9:24:4d:42:d2:af:b8:3f:08:3a:24:a4:
9a:62:a2:20:2d:dd:9e:34:db:db:2a:3c:e7:4f:15:
d2:82:a0:c3:c5:ce:de:43:d8:54:3d:3b:05:42:8e:
50:aa:99:6a:1e:bb:b5:7c:13:9e:6e:36:03:96:e9:
92:39:cb:03:b7:76:ca:7d:48:3e:16:6d:23:38:89:
b1:68:25:04:18:ea:06:68:86:f2:58:b6:49:76:db:
fa:a1:8e:85:ab:7c:4f:3f:72:c2:6a:08:9b:d5:cc:
7f:95:2d:a3:86:52:e8:d3:eb:71:e9:38:d2:5f:81:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:90:FB:D9:5A:50:AC:30:94:B0:A3:D2:CB:C4:C0:50:5E:96:FF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DluQ-9laUKwwlLCj0svEwFBelv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
83:6d:fa:d3:fb:91:b1:d1:ce:2d:7d:3c:21:53:69:93:b4:23:
b9:e5:72:3a:33:1e:ba:5d:8f:1c:25:05:b8:82:c7:3f:20:92:
fd:02:a9:2b:74:2d:ad:e5:9c:9a:4e:0f:a6:85:5a:dc:b3:8b:
4e:40:f7:ec:39:06:88:24:11:d5:d6:1c:34:a6:bf:c8:fe:2f:
d3:64:22:17:5d:5a:d7:5d:0f:06:d3:0f:8d:87:39:f8:34:98:
15:ad:78:b8:52:82:b7:a7:d4:0b:12:19:d0:16:99:f0:c8:a8:
51:c2:d4:85:46:77:fe:4f:96:da:3e:d0:37:7c:73:83:b0:d0:
de:a8:4d:8d:af:b9:11:99:11:90:5e:e4:4b:58:48:3d:f0:4e:
aa:33:e0:0a:d6:6d:87:ca:3f:81:dd:0b:43:a9:26:61:0c:78:
90:e9:d7:03:db:7b:7b:3e:c0:51:ef:36:07:bd:6c:48:9a:ea:
ff:2a:e0:5f:92:5c:95:45:c1:4e:e9:88:b1:a3:1a:5e:de:41:
5f:fc:e2:1b:8e:9c:af:27:be:0a:6b:24:78:34:4f:4b:35:e7:
82:1c:6b:2c:de:f2:c2:38:a5:71:b7:ca:21:33:4a:58:37:6b:
e9:98:b4:1f:21:e8:a7:16:ba:cf:c2:b2:88:40:a0:c1:02:73:
aa:fb:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:21 2025 by rpki-client