Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J7O_lqXdyBcAU6SMosGFKo0ZXfU.roa
File: J7O_lqXdyBcAU6SMosGFKo0ZXfU.roa (raw, json)
Hash identifier: 4g/yjJ14eSECNApX6uWXdXhb5UT6Li1R8vkSD2W9Dn4=
Subject key identifier: 27:B3:BF:96:A5:DD:C8:17:00:53:A4:8C:A2:C1:85:2A:8D:19:5D:F5
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEED49AE05ED7978E855D6A7C3C461
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J7O_lqXdyBcAU6SMosGFKo0ZXfU.roa
Signing time: Tue 26 Nov 2024 13:35:14 +0000
ROA not before: Tue 26 Nov 2024 13:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396544
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:ed:49:ae:05:ed:79:78:e8:55:d6:a7:c3:c4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27b3bf96a5ddc8170053a48ca2c1852a8d195df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:77:cf:db:71:55:d6:b9:e9:1d:a6:47:d0:
64:76:5d:ae:40:24:1d:7d:26:38:5b:63:af:d0:fa:
df:49:5f:e1:fc:59:6c:27:9a:bb:56:bb:84:7d:8b:
80:e2:61:86:97:a8:6d:87:51:5d:b7:78:ee:7d:ea:
de:ed:3d:c2:08:0f:2a:76:e3:06:c0:9f:03:8d:0e:
78:b6:86:cd:1b:d0:55:89:4e:ff:06:4c:ac:c1:0d:
a5:24:82:4e:73:4c:a7:2f:82:b4:a8:bb:52:ce:09:
c7:c9:b1:eb:5b:69:f7:0d:11:e0:0d:e0:83:aa:12:
b0:90:29:c7:45:85:2b:8d:05:f9:ab:e1:db:3d:ea:
ca:9e:46:b2:d1:36:05:0c:08:12:dd:51:7a:44:6b:
99:87:a2:e2:fb:4e:bf:02:7d:be:d0:bd:e5:9a:e6:
a5:b2:f9:6f:79:11:31:76:37:bf:5c:3f:25:b3:e7:
31:51:1b:14:c9:99:a8:dc:3b:80:27:5e:f7:d9:6f:
0b:fb:42:89:d6:0e:70:a0:7d:97:4c:d9:59:f2:02:
45:0e:c3:7b:c6:43:49:45:f2:06:d3:44:88:f9:ea:
ab:78:29:61:55:09:aa:98:be:a4:e2:47:0b:73:8d:
52:ad:26:b4:50:c3:09:fb:3b:fd:ec:70:63:df:af:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:BF:96:A5:DD:C8:17:00:53:A4:8C:A2:C1:85:2A:8D:19:5D:F5
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/J7O_lqXdyBcAU6SMosGFKo0ZXfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
10:6b:9a:7e:6e:8f:cc:a7:b3:ec:93:57:39:ff:c7:ac:d7:aa:
c0:ca:ba:41:4d:02:7a:12:54:e4:2a:d7:b9:af:0a:02:d9:59:
b2:cc:8c:63:93:1d:e5:52:3c:16:06:9c:46:ef:14:b8:44:19:
14:b9:d2:00:dd:b7:b5:6b:c7:59:17:a0:59:d1:6d:67:c9:9a:
3a:ce:95:5a:52:c0:b3:c2:46:70:eb:fe:46:32:e2:e3:5c:9c:
58:15:7c:43:a7:42:0e:3a:a7:42:c4:21:da:58:01:a1:8f:2f:
9a:bd:3e:b9:6a:b1:1c:d8:34:c9:b0:a6:1b:50:5f:4a:e4:f1:
5a:11:9d:ea:f0:17:78:58:41:67:f1:81:24:50:d6:6a:8d:ff:
34:54:24:28:bc:cb:08:1e:66:37:c0:09:6b:7c:0f:18:d8:6d:
2c:63:d6:41:84:87:54:1a:49:4d:39:43:f6:8e:98:ab:ca:1a:
4e:02:49:4c:c8:0b:53:87:e3:8e:54:ec:69:f6:87:2a:6a:b1:
57:54:44:c9:1c:88:0e:05:01:d9:c0:da:d3:0c:8a:50:a3:93:
b2:6f:b3:97:b4:47:4b:ec:54:a1:be:b4:a8:5b:47:cc:9c:af:
b7:07:f1:26:ee:90:10:99:26:6b:3a:4b:42:bd:f4:3b:cb:63:
04:ad:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:36 2025 by rpki-client