Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GfeFPZf-WTYrzQOo2djyYHwB418.roa
File: GfeFPZf-WTYrzQOo2djyYHwB418.roa (raw, json)
Hash identifier: KZfaQjkmqA0kmxZlhydqwpe5jh0hSPmIeuTTSZbpJto=
Subject key identifier: 19:F7:85:3D:97:FE:59:36:2B:CD:03:A8:D9:D8:F2:60:7C:01:E3:5F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF03B719D3A86E44B40FE675D80C5B
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GfeFPZf-WTYrzQOo2djyYHwB418.roa
Signing time: Tue 26 Nov 2024 13:35:20 +0000
ROA not before: Tue 26 Nov 2024 13:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396594
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:03:b7:19:d3:a8:6e:44:b4:0f:e6:75:d8:0c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19f7853d97fe59362bcd03a8d9d8f2607c01e35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:54:b6:6c:f6:23:f7:41:6f:9a:3e:db:df:43:
14:1e:5b:da:59:33:75:64:ba:50:12:4a:af:7a:8f:
37:3f:bc:6e:56:00:7d:3f:dc:6b:24:f8:7c:56:5b:
93:e8:34:15:b4:9c:25:b6:a0:f8:c2:40:79:c3:b3:
72:60:37:26:95:41:06:e5:54:65:35:ea:56:e0:9b:
48:3b:8b:2f:80:d4:f6:83:0f:b8:cf:a5:a7:a8:cf:
e2:57:c4:aa:0b:a5:e5:b5:e9:16:32:15:14:5f:89:
6c:ff:5a:64:05:73:b9:4f:df:74:4a:24:af:5f:37:
da:b6:50:06:4e:b6:f4:88:f2:ce:5d:4c:33:c8:7a:
65:58:9f:54:c6:a6:02:60:3c:00:1d:5d:f4:3d:67:
74:4f:7a:a7:85:77:67:6c:7f:c7:29:8d:fb:1d:64:
e2:fd:85:12:f9:55:d6:c0:1b:aa:9e:8c:a8:33:e3:
97:68:ac:57:5d:74:e2:a6:88:4b:32:7a:6b:bd:f0:
e6:22:d0:cd:20:f6:f3:10:73:3a:21:3d:7a:7c:0f:
73:f5:e6:60:fc:77:6d:c2:d9:d4:96:0c:34:53:77:
79:09:fe:21:60:10:f8:a2:e6:dd:49:ab:12:d4:b1:
b4:23:e2:ad:7b:85:d5:ab:4b:dc:22:4f:34:3b:ff:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:85:3D:97:FE:59:36:2B:CD:03:A8:D9:D8:F2:60:7C:01:E3:5F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GfeFPZf-WTYrzQOo2djyYHwB418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
5c:77:68:cf:34:74:b5:de:cd:3a:ff:7f:a2:3d:b0:e5:97:b6:
20:75:92:00:cd:02:e8:21:35:01:9a:71:73:e7:81:2d:1e:b6:
1d:5c:8e:d3:24:46:3f:c6:8d:6b:8c:6f:4c:20:57:ef:e4:7e:
d4:bf:27:9d:f7:ea:fe:ce:7a:e4:91:e6:9a:1e:97:5d:28:33:
9b:7f:bb:cc:f9:ad:66:c6:bc:e5:ac:54:91:dd:b5:96:1f:57:
90:46:7d:2f:86:7f:70:b0:05:2c:52:d4:e4:0d:56:55:b8:e2:
73:dd:65:cd:39:39:9c:70:64:a9:81:f2:85:05:43:23:36:ed:
b8:d6:7b:61:14:07:ab:90:62:d5:10:8c:7e:b0:8a:96:32:3f:
c9:38:12:89:63:f8:44:4f:36:49:ca:c3:46:83:b0:47:7a:d6:
78:1b:3f:71:53:e1:5e:a5:83:f3:46:3b:79:a9:b4:55:45:ea:
70:bc:eb:41:67:06:41:ba:07:8d:bc:54:0f:6d:87:5b:88:74:
83:a8:c5:18:b9:d3:74:c4:cd:17:a0:f9:9e:ba:0b:f0:81:3f:
70:02:73:40:dd:8d:d1:e9:12:0e:92:ae:d2:e7:2e:7a:a1:d7:
be:80:61:04:87:a5:9f:d0:8b:e3:55:16:1b:04:64:86:e2:5e:
04:27:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:05 2025 by rpki-client