Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DunxRvQEwV4nQ2OJSgm5SiYJxv8.roa
File: DunxRvQEwV4nQ2OJSgm5SiYJxv8.roa (raw, json)
Hash identifier: 8wrFh8AHk22IAG1n3zL5WYOvEbFngx/5VnSHAw1cToE=
Subject key identifier: 0E:E9:F1:46:F4:04:C1:5E:27:43:63:89:4A:09:B9:4A:26:09:C6:FF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD9F0B22E3671BD70708C39B9725C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DunxRvQEwV4nQ2OJSgm5SiYJxv8.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396617
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d9:f0:b2:2e:36:71:bd:70:70:8c:39:b9:72:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ee9f146f404c15e274363894a09b94a2609c6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:a1:ba:c5:d1:bd:94:a0:ee:17:4b:0c:6f:
9d:ff:7b:30:a6:a5:fd:1c:29:0e:f3:f5:5e:82:61:
74:3f:aa:43:ef:cc:5f:64:23:fd:9e:01:98:d3:0d:
c7:40:90:5f:34:45:f0:1c:ba:6c:2a:bf:96:14:e4:
7f:01:5d:76:15:f3:a1:2d:dc:4e:0f:af:cf:5e:8b:
37:d2:bf:1f:1c:13:c9:05:db:3c:7b:23:67:d5:3f:
87:6d:ba:c8:94:94:6d:72:3f:3f:53:47:28:15:ab:
96:f4:ce:41:08:3b:f6:bf:e1:cd:4d:1e:2b:cb:d5:
4c:0b:ee:b7:d9:7c:d1:d1:cf:fa:44:86:94:bf:5a:
f3:f8:70:37:b0:69:96:56:a1:77:15:bd:7c:68:cf:
e4:06:45:f4:64:38:58:6f:86:95:72:a3:68:0a:f8:
3e:ef:ac:6e:67:02:36:81:64:7c:db:98:d6:82:4c:
32:74:2f:4b:f7:e1:c8:05:55:30:16:f2:b6:47:f9:
a8:f2:9f:44:e5:93:88:f1:4e:15:84:1b:02:8e:f2:
9d:27:2d:95:10:31:8c:bd:c6:f4:49:0e:fd:4f:23:
8a:bf:fb:3d:80:8c:30:c0:fa:72:e3:ee:03:5d:e3:
9f:18:c1:e9:e1:9b:88:9a:a6:59:f0:fe:db:d7:e8:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E9:F1:46:F4:04:C1:5E:27:43:63:89:4A:09:B9:4A:26:09:C6:FF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DunxRvQEwV4nQ2OJSgm5SiYJxv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
95:52:f9:a7:d1:9c:86:f9:b7:bc:b3:8f:cb:d3:18:c8:09:f6:
5b:65:76:52:ef:24:b9:42:10:fe:e6:d4:fa:ff:89:f9:ff:bf:
e6:8a:33:b0:6a:8e:34:64:c4:46:53:df:32:14:b5:39:90:41:
53:6a:7e:f4:5e:a7:80:b5:16:fb:00:8d:43:ce:f2:59:ea:98:
ce:56:8f:d9:e2:fc:07:41:ef:dd:8b:60:8f:c7:f6:36:7f:be:
05:cb:ff:02:73:07:98:b0:18:59:3c:43:53:f6:9c:7c:3f:72:
82:9f:c0:9b:08:ce:49:f1:19:c6:c7:e9:ce:39:b9:95:85:97:
2b:5a:26:81:d9:f1:9a:dd:dc:76:e0:a7:53:e4:6a:cf:85:84:
6a:a8:9b:dc:01:a7:ab:3a:ac:d2:cc:ff:31:8e:4a:05:d7:f8:
5c:fb:8f:87:da:72:ef:ff:dc:67:47:42:92:51:db:35:29:fb:
f5:9f:6f:a2:6f:3b:55:60:fc:1b:f9:7f:d8:4e:78:f5:00:1b:
ea:6f:f4:74:91:a3:8b:9e:dd:2e:43:3b:ce:b3:82:dd:67:aa:
e1:2d:57:25:5b:06:fd:35:7c:59:ac:a3:82:ca:dc:93:d8:82:
1e:c8:c9:f7:b5:6e:aa:80:fc:06:c2:be:cf:93:07:db:93:c1:
42:49:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:48 2025 by rpki-client