Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ES5ZfpyXukHX2TREMiPOQhz8vQI.roa
File: ES5ZfpyXukHX2TREMiPOQhz8vQI.roa (raw, json)
Hash identifier: JI6w2ixBtoHH4wv0wu3PwmVKqtPw6fnezcZUtpEGYTI=
Subject key identifier: 11:2E:59:7E:9C:97:BA:41:D7:D9:34:44:32:23:CE:42:1C:FC:BD:02
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB485E0E91822D9FE3A6AF22DFC64
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ES5ZfpyXukHX2TREMiPOQhz8vQI.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36629
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b4:85:e0:e9:18:22:d9:fe:3a:6a:f2:2d:fc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=112e597e9c97ba41d7d934443223ce421cfcbd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:d1:d9:c0:2c:8f:6b:71:b0:96:a0:41:4a:
26:0c:21:59:e2:cb:e2:30:c7:bb:b6:59:18:83:30:
47:38:b6:ad:6c:e1:e7:9c:42:9b:da:2c:d4:a5:a0:
c2:e7:20:a3:77:05:18:37:2c:20:00:9c:30:36:b0:
7e:e3:8a:4c:0c:36:1d:c9:56:ca:77:b3:a2:5e:4d:
e6:29:0c:b4:f7:0c:eb:0a:b6:9d:75:f4:ce:de:6b:
42:96:4a:24:e8:27:ff:81:4e:9a:c8:ed:e1:54:42:
74:70:0b:10:f9:8d:0e:bc:90:6e:7d:ad:99:de:4f:
5b:93:9d:1c:1d:e7:e6:51:80:85:f1:6d:a6:40:96:
b4:79:bc:99:7c:4a:26:94:8c:73:01:08:70:35:50:
c8:e5:bd:f7:be:87:71:fb:5f:60:a5:63:94:22:ec:
81:c0:55:42:99:aa:94:3a:54:30:d8:8d:fd:f5:06:
aa:7e:40:80:d2:ec:2c:7c:09:41:8f:e2:2c:2a:6d:
79:6f:44:8b:0a:e6:12:ff:c9:19:b4:4f:10:2f:d1:
55:9c:47:fc:fd:47:32:84:01:09:ab:26:5f:06:95:
da:68:c9:60:94:38:87:10:17:f8:fa:ae:a0:14:73:
45:34:43:e0:67:43:e1:f2:ca:ac:fe:f0:91:fe:a7:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2E:59:7E:9C:97:BA:41:D7:D9:34:44:32:23:CE:42:1C:FC:BD:02
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ES5ZfpyXukHX2TREMiPOQhz8vQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
b1:c9:d8:bc:19:fa:10:e7:a5:b4:fe:63:c3:0a:f3:73:c9:d3:
97:bb:25:12:7f:7c:60:b0:82:f6:ce:d0:59:17:2c:f0:d8:07:
b3:03:a3:5d:96:67:07:f7:85:86:00:21:90:ea:73:79:c8:b7:
90:64:e0:36:a4:03:ae:04:14:8b:73:86:9c:5f:0a:ed:0d:b4:
d2:72:0e:27:38:63:d8:5b:df:1b:a0:88:e6:1e:77:33:94:5f:
cc:1c:65:1b:7e:3b:9c:70:9c:22:dd:a7:ab:19:cf:5b:55:8f:
e4:98:f4:d5:f6:2a:0c:71:03:d9:3e:70:da:f9:86:d2:fb:07:
82:66:2c:fd:95:7d:e5:ee:21:31:c3:71:08:84:2e:f7:ab:8a:
9b:75:fe:3d:75:c2:8b:89:4e:7b:4a:da:0c:24:c4:9b:51:df:
80:5d:21:30:8a:5f:38:41:00:11:29:e4:0e:6e:35:04:6d:f1:
06:17:95:63:99:7b:28:9f:8d:92:09:89:c8:23:10:8c:3f:0c:
6e:4c:94:ed:24:5a:07:15:20:07:f4:cd:df:27:66:4b:c2:0d:
61:1d:53:fa:d9:ea:9b:f9:06:fc:e1:72:35:d6:5c:27:22:33:
d0:78:db:96:df:c1:47:74:37:2a:dd:01:0c:c8:4b:27:e1:f6:
6d:0c:75:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:08 2025 by rpki-client