Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Lr6o7lEnjVx0zdQZ-EOUnpwr5-w.roa
File: Lr6o7lEnjVx0zdQZ-EOUnpwr5-w.roa (raw, json)
Hash identifier: uPDxIgefPF4fMUq8j27zTdQE+9OBDEBvjdFzUA1bUnM=
Subject key identifier: 2E:BE:A8:EE:51:27:8D:5C:74:CD:D4:19:F8:43:94:9E:9C:2B:E7:EC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF1B7CBA18BD0A0A99ED4E05BD897
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Lr6o7lEnjVx0zdQZ-EOUnpwr5-w.roa
Signing time: Tue 26 Nov 2024 13:35:15 +0000
ROA not before: Tue 26 Nov 2024 13:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396554
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f1:b7:cb:a1:8b:d0:a0:a9:9e:d4:e0:5b:d8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ebea8ee51278d5c74cdd419f843949e9c2be7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:f9:c8:d8:ad:59:e7:e5:22:8c:77:d1:40:
c2:9e:c1:f5:7d:75:13:ca:31:bc:c8:cb:37:09:0f:
49:b6:85:39:04:2f:79:5b:d4:31:a8:50:5b:de:57:
f9:98:6f:35:36:99:08:87:a8:32:d6:9c:44:ba:39:
43:22:74:36:35:c0:6a:43:8f:73:38:43:f8:df:f6:
84:fc:15:5b:6e:01:e7:1b:fa:47:f3:ab:40:0f:1a:
70:d1:7d:fa:55:f0:73:cc:b5:bf:65:03:02:5e:58:
b7:bd:3c:af:0c:81:53:8e:c3:e5:82:8d:24:c6:44:
8a:7a:c9:b2:8f:87:30:9a:0c:1c:1b:a6:58:06:58:
87:3f:91:80:ee:70:fc:38:84:3b:00:9e:eb:76:5b:
ea:a0:04:ec:b1:c2:c4:d0:e3:9e:ba:6b:73:a0:bd:
e5:68:e2:37:5e:02:d6:f7:ba:e2:e6:2a:01:ef:1f:
6e:09:bb:5e:2d:e8:a5:92:b0:2f:4e:44:15:e1:37:
14:aa:84:00:cf:a6:bb:c8:fb:b3:77:d4:19:93:6b:
45:1f:22:07:48:e8:0c:68:d5:f4:d1:f0:64:cf:32:
c9:c2:d4:46:3f:79:e3:77:7f:ca:d6:4f:15:1d:fb:
df:15:2a:6f:e5:95:fa:f9:f4:e2:dd:92:87:50:ec:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:A8:EE:51:27:8D:5C:74:CD:D4:19:F8:43:94:9E:9C:2B:E7:EC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Lr6o7lEnjVx0zdQZ-EOUnpwr5-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
36:72:f8:14:41:cf:1c:af:96:25:f4:2a:77:ab:c6:89:41:d2:
97:bf:7f:b4:43:c7:ac:2b:38:fc:2d:9b:86:a8:ed:27:13:d0:
c4:b4:82:c2:97:0e:d5:7c:c2:ef:a5:86:cc:eb:62:6d:1a:ee:
41:a3:b6:4a:75:a7:22:67:24:c5:6a:99:8e:23:7f:c9:89:4e:
97:ba:de:2b:3f:7c:99:32:93:89:99:70:ba:58:91:bb:9f:48:
d0:2a:fd:f7:81:a0:af:ab:b0:7f:67:da:a8:5e:aa:f7:cf:9d:
49:87:3d:dc:f3:d1:1e:f0:88:81:7e:f0:88:8b:b2:e7:cc:a6:
97:b6:bc:64:39:07:0b:f0:07:4d:c3:0c:f1:39:8e:8f:7b:d7:
58:46:51:2b:61:a1:3f:2a:d6:e0:67:29:97:12:34:52:d7:5e:
8e:21:33:0b:e4:a0:df:81:02:1b:9b:42:f1:42:20:70:64:53:
32:32:d2:db:0b:2c:4a:70:d6:b0:27:95:43:e2:08:9e:56:30:
be:c6:6c:27:c6:03:14:6b:3f:ce:fc:59:0e:a9:f6:4a:85:c3:
a0:b2:5a:10:7d:20:af:2c:f3:b9:94:3a:31:fa:a3:c0:5d:e6:
88:7e:aa:f4:6b:0a:82:df:bd:1e:a4:da:fd:b1:fb:fc:72:4d:
a2:12:80:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:26 2025 by rpki-client