Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FRaUM_ndio8nUTI5uFoAzJtVTlg.roa
File: FRaUM_ndio8nUTI5uFoAzJtVTlg.roa (raw, json)
Hash identifier: iwb84475eoWCw5NeoPaKYTnJ7jvkJCNNAZ5vSo3uMp8=
Subject key identifier: 15:16:94:33:F9:DD:8A:8F:27:51:32:39:B8:5A:00:CC:9B:55:4E:58
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0E2907022E85C09A2033164525E9
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FRaUM_ndio8nUTI5uFoAzJtVTlg.roa
Signing time: Tue 26 Nov 2024 13:35:23 +0000
ROA not before: Tue 26 Nov 2024 13:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396827
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0e:29:07:02:2e:85:c0:9a:20:33:16:45:25:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15169433f9dd8a8f27513239b85a00cc9b554e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:0e:25:c1:a6:ff:c9:de:8a:24:7c:f4:36:
b3:a5:51:d7:e8:b6:e2:bc:b0:ef:7a:c5:3a:2e:8d:
30:37:94:f0:d9:94:74:44:2a:7c:f3:be:42:6f:6b:
43:cf:12:eb:93:09:74:f5:2a:70:d7:4a:78:b5:88:
30:6e:aa:8b:6b:78:2c:ce:81:62:e0:52:a4:16:35:
d7:6c:97:0a:ea:1e:7a:ff:e4:a2:c0:ff:bf:3c:d7:
09:72:37:e3:56:3b:b5:5c:bd:0c:f3:e7:5b:f9:a3:
6d:2f:c6:a3:25:4c:3a:e1:b4:f1:3e:ed:33:85:e2:
0e:7e:5b:10:f4:bd:66:dc:14:5c:00:13:83:b5:cd:
e6:7f:13:3f:ea:99:0b:2e:72:9a:ef:1c:79:2a:f4:
07:3b:da:9c:f9:64:03:78:3a:e1:38:d4:d8:2c:75:
4f:09:84:94:a7:27:53:b3:6a:f4:8d:d3:fe:8c:1a:
55:db:c7:ee:2b:bc:b5:07:33:6c:ea:9c:ac:f0:ed:
b8:88:1d:f7:a4:ff:13:60:d2:ef:c4:6e:ca:e4:d8:
b8:40:d8:a6:1b:67:42:09:f0:df:1b:0d:e0:b4:b5:
a0:4e:95:e9:fe:82:5b:e7:04:81:f4:66:f7:bc:dd:
ef:27:75:ce:16:f0:cc:56:1b:84:b0:ce:f0:e7:68:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:16:94:33:F9:DD:8A:8F:27:51:32:39:B8:5A:00:CC:9B:55:4E:58
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FRaUM_ndio8nUTI5uFoAzJtVTlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
7d:72:71:35:27:59:50:b8:33:3f:9f:90:3e:c8:df:cd:d5:bd:
23:79:8f:a6:e8:5f:48:b2:14:a9:ef:9e:6e:21:93:07:8d:4e:
79:bb:cd:2b:51:d8:88:45:5a:c8:e7:af:12:0b:c2:97:2a:7b:
a8:23:6b:d6:9c:8c:73:3b:23:3f:31:04:17:22:7f:43:82:b2:
a3:37:84:22:34:07:6d:aa:47:45:95:69:7a:ec:11:66:ae:ce:
af:51:7c:70:c8:24:43:08:33:ac:a8:3e:87:eb:5d:ba:b6:c6:
ef:48:ae:77:3c:13:61:ca:55:31:b1:f1:23:80:76:cc:97:63:
ed:cc:90:e8:c5:72:6a:42:56:eb:15:ff:fd:1d:ab:fd:31:f5:
87:79:a7:e2:2f:ac:a8:b7:c3:ff:11:ff:60:25:0b:77:79:d7:
72:47:f6:1c:89:36:81:56:38:a8:e8:44:3e:8e:28:8d:2c:4d:
86:36:b0:69:bf:a7:47:11:01:aa:ac:97:14:58:9c:82:4e:1c:
c4:d3:f1:67:4b:4c:59:87:ca:a0:55:03:39:e1:7b:4e:45:9a:
44:bd:6d:0f:44:fe:17:26:b5:a8:96:da:f8:fc:50:34:31:bc:
65:31:2b:43:2b:df:2f:e4:8c:4f:34:6d:5e:b2:55:70:62:55:
75:de:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:51 2025 by rpki-client