Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GPE8aGy2xZYrP2x9Y27-z8ff1GI.roa
File: GPE8aGy2xZYrP2x9Y27-z8ff1GI.roa (raw, json)
Hash identifier: wFI3TK36SnCVdQfFgmfACCLDqEPIwTaWxML15VbYJWQ=
Subject key identifier: 18:F1:3C:68:6C:B6:C5:96:2B:3F:6C:7D:63:6E:FE:CF:C7:DF:D4:62
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF04E8D2D8E1D4FF61C7D465971DD1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GPE8aGy2xZYrP2x9Y27-z8ff1GI.roa
Signing time: Tue 26 Nov 2024 13:35:20 +0000
ROA not before: Tue 26 Nov 2024 13:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396597
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:04:e8:d2:d8:e1:d4:ff:61:c7:d4:65:97:1d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18f13c686cb6c5962b3f6c7d636efecfc7dfd462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:18:63:db:bb:64:03:f0:01:73:28:c7:a8:
15:c7:f7:2c:6c:92:2e:74:25:31:ad:a7:b1:ee:90:
19:0a:02:e7:ea:de:9e:f9:e7:86:58:a6:66:ed:f4:
a7:7d:08:50:0e:49:38:b7:3e:41:b7:b1:fc:ed:78:
cd:96:b5:3c:a0:29:3e:4c:dd:c4:dd:ba:f8:ad:52:
93:ab:62:ea:49:e1:e1:25:ab:ce:56:51:2b:95:86:
2f:d9:d0:45:64:1e:05:62:29:7d:6a:26:c8:78:72:
82:ad:7d:d5:ed:c8:2b:4c:c0:42:45:44:d9:1d:c9:
92:d4:1f:c6:e7:51:96:91:9c:dc:60:9b:7e:0b:fd:
50:f3:2f:31:e7:75:19:61:a4:47:d1:f3:57:8c:b5:
30:e0:d1:22:bf:a5:8e:4c:6b:f1:1a:c1:92:cc:0c:
87:5d:bc:bf:4b:fd:96:32:4e:c8:f4:ad:4f:97:35:
98:41:5f:28:28:38:97:13:1c:2f:b7:3c:69:f5:c1:
dc:c6:d5:ab:d9:5f:ea:aa:cf:08:f5:5a:12:de:b3:
e3:4e:89:42:a9:1d:8c:96:74:5e:8c:43:e0:97:5f:
bb:2a:e0:04:bb:51:95:7e:f8:0e:06:f0:0d:5c:78:
f0:ff:c1:df:8e:e9:00:e8:b6:1f:c9:cd:91:2a:17:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F1:3C:68:6C:B6:C5:96:2B:3F:6C:7D:63:6E:FE:CF:C7:DF:D4:62
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GPE8aGy2xZYrP2x9Y27-z8ff1GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
76:af:54:47:d0:fa:6f:b1:04:3d:83:36:ba:9a:dc:0a:24:a0:
70:66:80:31:33:1c:ae:18:01:9e:68:bc:0a:42:e2:ca:1e:68:
62:ca:b2:25:9f:73:10:2a:d8:8f:c5:0a:67:e0:1d:89:e2:68:
a6:ea:9c:85:98:f9:ea:85:5f:f1:e5:c2:49:c2:7f:63:0d:8e:
3b:ff:26:f3:14:0c:3b:a1:c5:e2:3a:80:e0:b3:ed:fe:e7:a9:
66:89:15:a1:00:34:53:f2:7d:6e:01:17:fd:5d:8c:4c:e5:28:
c2:a3:21:ba:75:26:4a:9f:2d:17:e6:09:45:8b:e7:71:ab:84:
cd:49:e6:d9:5f:34:85:43:86:4c:f1:0d:a4:7e:23:31:b8:87:
24:d3:53:4d:81:4a:0b:72:8e:2a:93:15:d6:4b:49:ee:d3:1d:
e0:21:9a:7c:be:03:fe:9d:23:3d:7b:f5:e7:d7:fa:84:96:14:
0e:c4:bb:31:35:34:ee:44:14:b4:83:63:24:10:b9:fc:e3:05:
e8:a9:3e:09:3f:6f:7f:c8:3c:e7:1f:2f:d2:16:9f:12:24:60:
e0:ce:81:b8:14:15:b7:7f:36:71:60:c3:f4:b1:5e:aa:c1:8f:
78:f2:d6:09:ad:06:24:01:8b:40:2e:e7:4d:fb:e3:ab:e4:97:
73:9e:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:12 2025 by rpki-client