Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NOR1yZ8602AU8qSVAq5GSoMgV9Q.roa
File: NOR1yZ8602AU8qSVAq5GSoMgV9Q.roa (raw, json)
Hash identifier: mXw4EKEbegCqLqa8PZAaxUWw7zWFADUWK+iXhrmWQe4=
Subject key identifier: 34:E4:75:C9:9F:3A:D3:60:14:F2:A4:95:02:AE:46:4A:83:20:57:D4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0FE22E44FC3F2EE34FC988775D85
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NOR1yZ8602AU8qSVAq5GSoMgV9Q.roa
Signing time: Tue 26 Nov 2024 13:35:23 +0000
ROA not before: Tue 26 Nov 2024 13:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397196
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0f:e2:2e:44:fc:3f:2e:e3:4f:c9:88:77:5d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34e475c99f3ad36014f2a49502ae464a832057d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:b6:41:c3:87:52:00:9a:ff:82:26:56:02:
50:d7:71:f8:f5:18:d1:43:11:59:d7:8f:70:6d:a2:
d6:b3:d7:0d:64:c2:bf:b7:47:d3:56:f3:71:20:8f:
71:bd:3e:dd:7f:e7:65:d8:d1:c2:a9:62:22:2d:bc:
6d:3f:22:2c:42:73:69:09:bb:88:49:11:7a:26:33:
76:0c:d1:cd:cd:af:83:4e:f5:5e:22:2d:de:4b:e3:
3d:bb:af:2d:c4:9c:49:05:43:10:06:52:56:14:6f:
2b:62:ad:ef:ce:89:1f:72:82:76:8d:27:09:2a:f4:
4d:ab:42:58:51:e7:2e:5a:13:33:d3:71:c1:2d:82:
8e:76:91:7b:1c:d0:42:1d:63:fa:a4:4a:20:b0:58:
5b:58:49:8f:c4:d4:73:a6:31:cc:88:2c:64:4d:44:
3e:a6:e7:67:71:19:b8:1c:42:f3:ae:54:36:7d:0b:
e8:3a:57:85:64:54:23:ed:22:eb:cc:54:f1:90:73:
43:c1:0f:69:ad:f2:7f:5f:63:86:75:47:7c:d2:0e:
6a:07:dd:3b:ba:de:bf:99:5f:7e:fb:87:04:29:8c:
aa:6c:d4:a5:df:40:c4:b7:0d:34:17:db:8d:21:48:
19:db:93:b0:64:60:10:22:3c:72:61:24:71:79:53:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E4:75:C9:9F:3A:D3:60:14:F2:A4:95:02:AE:46:4A:83:20:57:D4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NOR1yZ8602AU8qSVAq5GSoMgV9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
a4:a9:0d:79:13:db:94:11:b3:6e:7e:90:ca:df:16:41:a1:62:
ee:cf:0b:e3:81:c7:36:3a:f1:44:90:e5:8b:6a:66:45:db:4c:
b5:c4:16:68:14:1e:91:c8:c6:ea:c7:c7:4b:fe:15:5d:f4:07:
62:1e:4a:be:4b:a4:ce:6b:b1:c9:94:37:31:ad:59:60:c0:28:
fb:7c:9c:1a:60:ed:0a:94:bb:02:39:9a:55:28:62:ef:db:4d:
e1:58:de:42:0b:22:aa:5a:cf:d9:b9:1b:fb:bd:17:02:42:78:
26:b0:0e:04:02:0e:d1:75:81:91:4d:e9:f1:d5:7b:4e:59:ac:
6b:4b:80:58:9d:00:72:b1:1d:e4:9b:65:5f:be:1b:b4:de:0f:
b3:7d:02:02:7b:a2:80:bc:f9:88:ec:cc:81:bd:51:e4:bc:f7:
9a:69:64:88:18:06:f3:07:65:64:b5:b5:5f:4b:0b:e1:9b:18:
bc:7e:5c:ba:a6:ea:d0:a0:02:ef:84:f8:f2:2f:b4:ba:1b:47:
0f:07:fa:26:24:63:64:58:70:2c:03:7e:2a:b0:41:10:6c:0a:
5c:a7:7c:1c:ba:14:fa:54:d0:0a:c1:3d:33:84:32:ad:61:4b:
16:f0:79:6f:6f:3b:84:39:f3:46:2f:c5:5c:1b:04:81:ac:ae:
f0:db:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:14 2025 by rpki-client