Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KUwhUPEcLpof2hsXGLjrxBVMn1I.roa
File: KUwhUPEcLpof2hsXGLjrxBVMn1I.roa (raw, json)
Hash identifier: dD2USjpaDFGlZh8Fh1bo6TyoRiDOqzhmAqCl2XvgLyM=
Subject key identifier: 29:4C:21:50:F1:1C:2E:9A:1F:DA:1B:17:18:B8:EB:C4:15:4C:9F:52
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEFF0E8AC3CDF3652006CFAE0D8DA0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KUwhUPEcLpof2hsXGLjrxBVMn1I.roa
Signing time: Tue 26 Nov 2024 13:35:19 +0000
ROA not before: Tue 26 Nov 2024 13:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396585
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:ff:0e:8a:c3:cd:f3:65:20:06:cf:ae:0d:8d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=294c2150f11c2e9a1fda1b1718b8ebc4154c9f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:f1:46:58:b8:5f:5d:d3:79:c1:34:fa:b7:
79:7f:b4:f4:7f:39:0e:fe:29:e8:d5:e1:9b:ce:85:
f6:a0:35:1c:7d:f4:22:d8:02:17:3e:bf:e2:87:e1:
89:49:03:13:b4:fa:f9:3a:5f:e3:be:f9:6b:9b:79:
05:10:c0:7f:bc:34:e3:e1:6c:37:c5:13:3f:48:b7:
5e:38:38:33:5a:31:35:a8:28:62:45:2e:c1:32:a3:
ed:87:b4:7d:12:e8:35:47:c5:1a:0a:bf:32:f7:a3:
aa:ee:0f:ca:2a:13:e9:63:72:b9:10:d5:b3:b5:e9:
27:70:b8:a0:95:27:a6:f7:a0:4b:2c:fa:e7:28:77:
be:fb:47:e2:f0:a1:ac:05:14:ae:da:79:b6:64:e1:
b0:b1:be:67:2e:03:0e:19:25:e8:0f:cc:30:d6:a0:
74:4c:ad:c5:45:52:40:26:f3:05:96:0c:31:d7:c7:
91:73:3a:82:bf:6b:bf:13:ec:26:87:c1:f5:c5:60:
7f:6a:44:6c:44:45:76:89:cc:e1:ca:ef:57:53:18:
60:65:1e:ab:20:e6:79:0b:e2:7a:fb:5f:30:91:63:
0a:ae:5b:a2:4d:2f:08:8f:f3:1b:99:1b:0e:46:ac:
d0:cc:39:e7:af:46:41:12:78:e3:a3:43:88:b5:44:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4C:21:50:F1:1C:2E:9A:1F:DA:1B:17:18:B8:EB:C4:15:4C:9F:52
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KUwhUPEcLpof2hsXGLjrxBVMn1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
8d:ea:26:a9:d0:8f:26:0c:77:53:b6:1a:b5:95:ef:1f:b6:a2:
d6:d4:c0:c9:24:7d:d7:ef:cd:b1:35:25:cf:fe:3c:e5:3b:ef:
66:a5:ae:a6:a2:fc:12:fe:11:fc:d4:d0:fe:e2:c3:71:91:69:
74:f8:b9:1d:af:0c:6a:03:fe:52:45:ca:3f:68:41:b0:bb:90:
91:62:d1:fe:65:36:62:e4:ea:c3:ed:96:cd:ce:4a:f9:96:a6:
19:94:ec:a8:c6:80:f4:f2:b1:f0:5e:e4:5c:d1:36:50:44:ca:
45:bb:b2:e9:d0:0b:bb:44:7e:ef:4a:2c:42:90:58:6a:31:8d:
b3:6b:d2:14:f9:59:73:9d:c6:f8:cc:60:1b:6f:e8:85:dc:72:
da:52:6e:64:a3:2e:a8:1e:d2:8a:4d:02:1c:ba:ad:27:f8:0c:
f8:1f:ca:d4:8f:c2:68:99:11:8a:56:ac:d2:01:c7:5c:36:84:
c6:83:e0:b6:6d:47:42:b9:c3:25:66:da:76:d3:a2:be:1d:3f:
4f:0b:d8:46:4d:9a:0e:c9:af:de:5d:9f:47:f2:c7:2c:56:1e:
b4:cb:80:b1:21:4b:d7:a6:3b:da:ac:7a:5f:cd:0e:cd:fd:a2:
3d:d5:7b:fc:79:06:85:04:fb:4f:29:36:8a:d5:0d:95:91:59:
41:36:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:26 2025 by rpki-client