Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Gn3sUmkCKr0lg1pkMbZChokr6pk.roa
File: Gn3sUmkCKr0lg1pkMbZChokr6pk.roa (raw, json)
Hash identifier: hW60W9/AsEPE3JTjbuRNPVZ4Dsul9R71ZcJme6r8paE=
Subject key identifier: 1A:7D:EC:52:69:02:2A:BD:25:83:5A:64:31:B6:42:86:89:2B:EA:99
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF275A31127ABA5CD398F7ADE567F
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Gn3sUmkCKr0lg1pkMbZChokr6pk.roa
Signing time: Tue 26 Nov 2024 13:35:16 +0000
ROA not before: Tue 26 Nov 2024 13:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396558
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f2:75:a3:11:27:ab:a5:cd:39:8f:7a:de:56:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a7dec5269022abd25835a6431b64286892bea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:e5:79:ae:d4:32:6c:94:d1:69:68:08:98:
ef:98:be:d1:52:f7:c4:de:98:1b:8b:b8:5c:b3:13:
83:fd:96:82:f5:5b:6c:ba:5c:64:35:1e:47:74:aa:
d3:d8:86:17:6e:17:f6:02:87:2a:8f:e3:44:55:96:
f0:26:58:73:78:1e:80:fa:e0:18:c7:d8:7d:6f:ea:
75:fa:69:84:df:57:cf:14:ee:32:11:d4:a8:0b:1f:
06:ab:a1:86:29:fe:f1:9c:47:ea:30:63:8a:e8:4a:
26:53:e5:a3:7c:18:c0:fe:31:66:5d:c6:be:f9:92:
a8:59:4b:f0:d6:77:c6:d8:fe:a2:90:e9:3d:bb:a8:
5a:a2:f1:69:c3:83:a0:39:0a:d2:ef:55:ae:2f:8d:
be:76:70:0f:7c:89:e9:24:2a:c4:33:41:5b:9d:8e:
3e:8c:f4:63:8a:8b:3e:b7:2c:a7:9a:47:da:3e:6d:
2c:0c:ea:af:f1:1e:9a:c2:7b:72:2c:73:ac:e9:78:
a4:97:bf:45:7d:6c:6f:fe:fc:00:57:db:ef:c2:19:
38:96:1a:de:9d:09:85:ae:61:fb:87:cb:ff:a6:ff:
65:56:f6:c4:f6:77:2c:a8:bd:8a:ec:e5:0a:5e:c4:
56:3e:f3:7d:dc:16:f9:44:44:bb:22:6d:cb:52:bb:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:EC:52:69:02:2A:BD:25:83:5A:64:31:B6:42:86:89:2B:EA:99
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Gn3sUmkCKr0lg1pkMbZChokr6pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
c6:1b:b0:77:0c:e6:07:c9:bd:20:8d:f6:14:9e:be:49:1a:4a:
01:55:67:56:b2:ed:c4:06:72:19:a3:e8:9e:2f:b1:05:2a:09:
d3:59:fa:67:8a:89:0d:af:8b:d0:df:fd:ce:14:09:f6:ed:7f:
3c:74:8b:1b:16:c6:28:f6:6a:06:22:aa:55:1e:9d:01:b6:ab:
f3:24:72:3f:c6:d2:b3:22:a9:18:33:30:e9:53:df:f0:61:46:
46:56:ee:0a:a4:86:ec:7a:35:d0:68:b5:f9:24:20:fb:86:11:
a9:90:57:d2:39:c7:f6:bb:a4:ac:dc:4e:61:40:6c:0b:e2:86:
44:3f:60:6f:f2:ee:ed:1c:67:b3:e9:f6:95:6c:d0:ee:6f:f8:
20:42:84:4b:3d:fa:5c:fa:f3:64:d5:a1:95:a4:bb:75:c4:b3:
93:a6:cc:d0:7c:fe:03:e5:26:85:07:90:07:39:b6:cf:55:4b:
91:8a:ea:02:4e:34:7d:9a:fd:71:80:0a:6c:37:7a:11:65:e6:
98:f1:8a:e8:2f:b2:70:21:a6:a5:ed:28:df:4f:0e:69:4d:27:
39:56:60:98:a8:05:83:2c:c5:98:b8:3e:9c:d0:d9:3f:8b:b0:
90:1d:41:6d:42:9c:1c:09:99:73:7d:94:83:af:52:f9:88:45:
f1:b7:1c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:23 2025 by rpki-client