Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KJVYRPLq6etddrr5k0GpsoGvLyw.roa
File: KJVYRPLq6etddrr5k0GpsoGvLyw.roa (raw, json)
Hash identifier: JLhOvHDv9trGOn/zB+HkkfOn2xwXqmGDw+36PRKivac=
Subject key identifier: 28:95:58:44:F2:EA:E9:EB:5D:76:BA:F9:93:41:A9:B2:81:AF:2F:2C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEFC269717007670C150FD5BA48069
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KJVYRPLq6etddrr5k0GpsoGvLyw.roa
Signing time: Tue 26 Nov 2024 13:35:18 +0000
ROA not before: Tue 26 Nov 2024 13:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396579
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:fc:26:97:17:00:76:70:c1:50:fd:5b:a4:80:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28955844f2eae9eb5d76baf99341a9b281af2f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:04:31:57:96:fa:2a:d8:19:4a:61:1a:f7:
64:08:02:ee:8c:c4:f3:ad:19:0f:6d:c4:dc:dd:7a:
2b:7d:4c:96:3e:5f:0d:0b:a0:43:87:a3:ae:d8:be:
51:16:f2:ff:1c:5d:bb:15:06:17:cf:14:98:72:f1:
c2:21:18:ee:84:57:16:dc:99:74:52:4e:a9:9a:26:
99:1d:44:92:81:62:6f:c3:ec:bd:05:db:75:06:32:
6a:ae:c5:b3:2d:ec:0e:0b:66:48:f0:1e:ea:4b:46:
9f:19:a1:36:5f:4c:a8:fe:6f:3d:5e:32:b4:6c:65:
53:00:39:05:00:94:ef:d0:9c:7b:d1:9d:e2:f9:dc:
cf:84:1e:dd:8c:08:b1:f1:a6:d4:d1:ca:16:08:d3:
06:ab:e0:39:03:3d:53:ce:78:90:12:75:45:be:30:
0c:fa:82:a6:a8:5d:d0:15:50:71:67:91:b4:bf:98:
66:54:36:44:d0:92:3a:38:6f:fc:00:c9:cd:a1:af:
71:ec:a8:76:32:f3:f4:25:dd:81:42:b9:9b:bc:3b:
12:bd:bf:f3:ce:ad:25:ed:35:38:0a:80:fb:c4:14:
03:6e:92:8c:ad:50:b8:07:87:91:f8:56:2b:bf:af:
f9:b9:3a:7d:79:4e:6d:21:0d:1c:a4:ed:02:17:57:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:95:58:44:F2:EA:E9:EB:5D:76:BA:F9:93:41:A9:B2:81:AF:2F:2C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KJVYRPLq6etddrr5k0GpsoGvLyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
11:69:05:b2:e9:2a:e6:7c:05:b3:9f:87:ea:ad:a6:f5:b7:ea:
27:4e:34:0b:56:fa:cc:60:ed:5f:c1:f9:0c:a2:0d:7c:69:bf:
ea:90:0a:95:01:74:ae:67:3e:10:7b:5c:d5:d1:74:a6:47:aa:
b4:32:79:48:aa:51:69:2d:25:77:06:75:09:d6:c2:dc:e0:72:
ad:61:31:35:ac:b5:2b:36:9f:b7:ac:ac:54:50:72:b3:c6:46:
0d:cd:38:41:10:7d:f3:2b:90:a7:e7:9c:63:75:7d:6f:81:df:
84:f7:67:42:a4:e0:cc:e7:cf:9d:f7:c5:3c:95:cc:21:4e:f5:
20:5a:7c:c0:b2:fd:43:71:45:be:e2:16:61:07:ab:1e:63:c9:
75:f1:9f:f2:eb:29:85:0b:16:ee:1e:19:a2:f3:4b:07:5a:6d:
ae:05:54:42:bb:5c:95:1c:7b:8f:3a:3a:4f:c3:ed:fb:af:22:
c2:fa:68:4e:b3:c4:8a:b8:f4:f0:ea:a7:e7:10:f8:d4:01:6a:
92:51:a4:07:0d:30:5a:d0:20:48:1f:18:5d:45:2d:a3:12:96:
70:9d:b4:4a:30:36:c6:bc:3c:79:e9:58:47:3a:8b:8c:f6:ef:
e9:d1:ba:27:db:a2:22:94:30:3d:71:50:7e:c7:95:04:9f:b3:
8e:1a:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:34 2025 by rpki-client