Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IwXK7Fb9QXXXTQ-bupas8N7FEBY.roa
File: IwXK7Fb9QXXXTQ-bupas8N7FEBY.roa (raw, json)
Hash identifier: JazkzdXNfO4MCFNLh/2gfyoYfc30M/R5PZ+/YqcOTq4=
Subject key identifier: 23:05:CA:EC:56:FD:41:75:D7:4D:0F:9B:BA:96:AC:F0:DE:C5:10:16
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0E5884D4EE1896FD96ADD9025442
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IwXK7Fb9QXXXTQ-bupas8N7FEBY.roa
Signing time: Tue 26 Nov 2024 13:35:23 +0000
ROA not before: Tue 26 Nov 2024 13:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397193
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0e:58:84:d4:ee:18:96:fd:96:ad:d9:02:54:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2305caec56fd4175d74d0f9bba96acf0dec51016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:c8:14:12:01:5d:46:59:54:dc:5f:00:18:
44:4f:62:c8:24:31:bf:ce:e3:c0:5f:cb:eb:04:96:
dd:8c:5f:5c:58:c7:b3:cc:24:bf:a2:f9:0f:f6:4f:
09:24:67:94:e7:75:e6:85:5e:d0:a3:b0:fc:53:1d:
57:1e:0a:25:ab:9b:8f:a4:2d:9d:b5:a4:cd:1e:e7:
ee:06:5f:f7:ae:00:e3:be:11:76:d5:21:c3:ce:3b:
6c:0e:a0:f5:c5:d9:91:06:99:2e:2b:2f:52:43:54:
6b:ec:27:ec:6b:02:77:4b:28:7b:36:38:ae:4c:22:
4f:fe:fa:19:e5:c2:f3:0d:03:41:ab:86:86:4c:b2:
8d:29:94:b2:01:cb:48:c3:d9:79:d2:d1:0a:1a:f2:
a1:84:76:1b:16:b3:e8:74:2c:95:da:d1:bd:36:89:
c1:90:77:ff:10:6e:b1:0b:39:7c:23:73:f4:66:df:
c7:b6:36:93:3c:d2:31:17:e4:73:1a:e9:c6:67:ed:
3f:b7:2d:98:9a:7c:37:79:2e:de:2d:20:bb:20:26:
56:e4:d8:7f:d6:83:84:2e:07:02:d1:fc:8d:57:94:
7f:c6:bb:98:73:c8:37:ae:e4:5c:7e:b6:86:95:b2:
b5:33:4b:86:7f:61:5e:01:06:11:a8:f6:e0:eb:af:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:CA:EC:56:FD:41:75:D7:4D:0F:9B:BA:96:AC:F0:DE:C5:10:16
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IwXK7Fb9QXXXTQ-bupas8N7FEBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
23:ac:55:8e:7f:49:26:43:1f:1e:bd:b9:00:9a:6f:c9:db:e2:
b5:94:fc:f0:52:8a:b9:12:8a:da:9f:81:c4:86:48:a9:32:07:
db:2b:d5:10:76:9e:f1:c3:53:74:59:60:9b:d8:ef:57:0f:6d:
a0:6e:09:a0:ba:a9:73:80:8c:45:40:ae:a2:2f:eb:2b:bb:ce:
b1:5d:08:0c:a0:c3:6c:b2:3b:5b:4f:16:b1:08:bc:74:9f:ca:
62:8e:b1:44:9a:16:82:da:1a:8d:93:21:da:11:9b:1a:9b:71:
b0:13:be:18:e2:d2:da:4f:6e:27:e0:ce:9c:a5:50:32:b1:ce:
12:dd:3e:98:04:9b:4b:79:53:16:0f:23:f2:db:ca:c6:9c:4d:
f0:a3:6d:51:00:f4:d8:b5:15:58:f2:37:ef:06:fe:c1:54:57:
e2:3d:9c:2c:b0:1e:20:62:37:2b:be:b9:c2:82:6c:8e:4b:90:
16:13:b9:30:aa:17:cd:0e:3e:3b:22:2e:64:9d:53:f9:dd:14:
62:b8:54:9a:30:80:86:a8:36:81:5e:07:55:e7:af:1e:9f:5c:
3b:19:04:7e:67:a4:92:a9:00:8c:a4:91:28:4f:f5:56:22:5d:
47:43:34:ec:a1:3b:1a:52:0f:45:8c:2a:53:5c:66:0c:30:ee:
99:5a:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:46 2025 by rpki-client