Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IYr7hrAwbkLmUuWEFw012o4nAB8.roa
File: IYr7hrAwbkLmUuWEFw012o4nAB8.roa (raw, json)
Hash identifier: gJfLOYrCGNmyv+ITGlNhsSR6OYC1fClCvEOnHCJ0xmg=
Subject key identifier: 21:8A:FB:86:B0:30:6E:42:E6:52:E5:84:17:0D:35:DA:8E:27:00:1F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC4EF6070984FA04238B7D6167ACC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IYr7hrAwbkLmUuWEFw012o4nAB8.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396569
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c4:ef:60:70:98:4f:a0:42:38:b7:d6:16:7a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=218afb86b0306e42e652e584170d35da8e27001f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:12:a4:4d:fe:5a:8f:39:76:c9:89:47:e8:
d7:6a:ec:e4:08:bb:75:94:8f:a1:98:79:8e:95:a1:
58:aa:d7:9c:03:59:8c:be:55:92:c8:6b:e9:a4:f6:
ce:4b:ff:75:28:1a:ca:45:55:ae:a3:d1:47:b4:c1:
b6:b1:71:20:dc:60:b9:64:dc:9f:2f:a1:98:eb:ea:
d1:07:82:c2:52:fd:82:2c:df:37:88:7b:18:19:7e:
a2:ac:a8:c4:25:75:dd:1c:3c:cf:29:59:47:19:81:
15:20:b4:95:27:84:60:92:7e:3e:cb:88:b1:e1:5e:
dc:2b:8f:98:a2:d8:3c:b2:aa:82:a3:e7:97:e5:e2:
29:eb:1b:c8:9c:16:1f:4c:3d:99:28:8d:76:66:1d:
3f:8d:87:00:04:7d:9c:c0:d4:b0:8e:57:c0:4d:69:
8d:91:46:29:ba:48:3a:37:bd:82:70:90:24:0f:b7:
e0:4b:30:44:01:98:d1:50:a2:f1:0e:53:c0:f6:8a:
9f:f0:b9:c2:a8:49:9a:1f:fa:ad:a1:4b:83:0f:52:
84:40:c0:7c:8d:7c:a2:77:68:fc:dc:c4:54:fd:28:
3d:31:1d:82:44:a5:f8:79:85:ee:e7:b5:91:1f:9d:
a4:98:d7:c5:9f:db:8c:b8:49:9d:e8:37:42:71:f9:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:FB:86:B0:30:6E:42:E6:52:E5:84:17:0D:35:DA:8E:27:00:1F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IYr7hrAwbkLmUuWEFw012o4nAB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
3d:54:82:40:52:2c:35:d8:de:96:7e:7a:76:ed:c4:92:3f:69:
2c:55:ae:52:2c:96:c8:be:0c:2a:1e:91:8a:ab:fb:4f:d0:6a:
20:53:8e:f4:1b:4a:82:3b:a2:03:16:f4:6d:55:4a:d4:ad:85:
3d:d5:2e:e4:ca:7e:7c:df:25:ce:eb:09:44:ab:f2:e9:e8:ff:
ef:cc:4e:44:2f:c5:c9:0c:cb:98:ca:75:5a:90:b7:db:8d:8e:
bb:03:99:d1:31:f7:6d:2e:4c:29:02:e3:b1:37:0c:58:74:b6:
78:fe:8f:01:f7:ff:32:cb:a7:85:74:3f:11:70:32:79:ea:cd:
04:a1:c6:9a:5f:2d:40:c4:2d:fa:e8:bc:17:ef:eb:86:d0:7b:
29:96:ce:a2:ed:a9:b4:9f:f8:25:bc:4e:77:8e:ef:b5:6c:c9:
81:26:45:56:d0:3f:8d:85:b5:e0:c3:8b:00:4e:68:62:0f:4f:
8c:63:98:04:89:39:0e:3d:40:5d:71:90:44:c6:1a:3d:a8:61:
12:1a:0e:b4:e1:06:ff:74:7e:cd:4c:4f:d6:54:4c:ba:aa:de:
22:3d:bb:aa:d0:9e:79:92:09:31:e2:f3:0e:dd:a8:69:7b:ac:
2c:37:c8:65:13:15:c7:72:82:fc:20:15:64:43:db:27:58:c7:
2c:70:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:17 2025 by rpki-client