Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/M0LHWhczzkysggKRuy92WU3IJto.roa
File: M0LHWhczzkysggKRuy92WU3IJto.roa (raw, json)
Hash identifier: miZjnYRkaO65kuAqBvNgU5hpTfLS/YzahduxEOs0EhQ=
Subject key identifier: 33:42:C7:5A:17:33:CE:4C:AC:82:02:91:BB:2F:76:59:4D:C8:26:DA
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD30668F09FBD4E03157229A3C24D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/M0LHWhczzkysggKRuy92WU3IJto.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396604
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d3:06:68:f0:9f:bd:4e:03:15:72:29:a3:c2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3342c75a1733ce4cac820291bb2f76594dc826da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:74:da:bd:70:e5:cb:a7:66:a4:0e:39:b0:
61:2a:e5:9e:bc:8e:a8:d7:7e:d9:57:9e:5f:2c:85:
50:02:73:be:3d:0d:19:c6:7a:39:c3:fe:01:0d:9c:
9f:9a:db:69:14:73:97:aa:46:88:50:fe:b3:b5:13:
c5:42:e7:9e:e0:c3:d2:e8:74:14:aa:40:51:6d:39:
9d:6a:d7:69:ea:60:43:9d:97:98:c9:65:b1:d6:ff:
7a:46:fb:83:7b:91:ec:3c:84:34:5b:a1:34:ef:f6:
f1:f9:70:b5:d9:55:6d:11:8c:fe:c0:15:6e:bb:2f:
bb:f7:44:f7:5d:b0:ff:cc:f2:4c:14:ba:dd:a8:f8:
94:ff:7e:df:24:4e:d0:19:d9:e6:31:5d:6e:da:d6:
f4:2c:d0:61:08:da:b0:60:5f:d7:20:5e:64:76:5f:
79:ea:67:47:0b:f2:c0:f2:b4:a4:3b:df:57:9b:39:
de:94:cf:0d:8e:22:79:7c:75:c5:d2:c1:80:f2:b7:
92:78:d6:f1:3f:e2:2b:34:e3:68:ad:a0:3b:e8:84:
61:cb:45:e9:5f:c4:24:15:6f:6d:d3:55:3e:83:93:
c3:2f:28:8f:46:ee:5d:55:86:42:f1:f6:af:21:96:
48:18:20:ed:e9:2a:58:e1:3e:b0:fb:54:6c:e2:37:
e5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:42:C7:5A:17:33:CE:4C:AC:82:02:91:BB:2F:76:59:4D:C8:26:DA
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/M0LHWhczzkysggKRuy92WU3IJto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
5c:7b:74:63:42:02:5f:3b:d1:3d:f5:51:40:79:75:5f:27:71:
35:97:0c:a5:3d:16:9e:08:dd:a9:87:61:bc:28:f0:de:17:89:
66:11:d9:da:d1:9c:b1:17:25:cc:e9:29:a6:e9:25:e0:c4:1f:
b6:df:36:4f:d4:61:96:56:54:85:e9:6e:87:79:75:17:81:63:
78:92:fc:69:a4:90:42:c3:94:32:63:27:a7:be:e2:39:bf:87:
d6:22:14:55:5d:ea:73:5b:0d:04:2d:78:a9:f9:f6:74:ea:b8:
d4:1c:5b:68:53:92:89:5b:2d:19:74:e8:6b:15:1e:f4:76:22:
e8:36:8c:98:8e:92:07:c4:aa:ad:87:a0:09:c8:91:ee:51:35:
d0:d4:af:aa:83:2c:83:23:a4:90:c7:12:35:cc:23:af:f7:8e:
68:99:ea:55:dc:6d:27:ad:a2:fa:99:7f:17:f1:4e:c1:4c:6e:
62:02:c8:e8:33:1d:c6:86:ad:05:f9:50:a4:30:30:17:f1:2e:
e2:d4:40:66:48:cf:22:23:fb:0f:61:b2:22:6f:42:4f:84:d5:
c6:19:ea:06:e9:e9:5a:69:6c:27:e8:ff:5e:7c:30:2a:75:18:
5a:fa:ee:75:8a:2b:73:7e:ee:80:35:b4:92:ee:1e:1b:38:72:
0c:20:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:40 2025 by rpki-client