Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Nt5hSynhlfhj3uj2eKB-FYs9lzw.roa
File: Nt5hSynhlfhj3uj2eKB-FYs9lzw.roa (raw, json)
Hash identifier: 2bQHVtW6SE8qlFbxeMsFsy+o0rxv/6iMKgNVTUOcIcE=
Subject key identifier: 36:DE:61:4B:29:E1:95:F8:63:DE:E8:F6:78:A0:7E:15:8B:3D:97:3C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBCF6ACB07845DB593E5F15E532A72
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Nt5hSynhlfhj3uj2eKB-FYs9lzw.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396591
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cf:6a:cb:07:84:5d:b5:93:e5:f1:5e:53:2a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36de614b29e195f863dee8f678a07e158b3d973c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:cb:ad:6f:90:04:91:c1:3f:cd:15:a4:d4:
9e:bc:1a:26:59:2d:cf:e5:a7:46:9c:05:fd:42:97:
27:c6:b0:b4:f6:43:4f:44:d1:d6:46:44:8d:97:1c:
a4:f3:21:ab:57:bd:38:b5:90:a1:22:1b:46:8d:9d:
26:05:0e:c3:3a:c6:12:5f:b3:d1:68:04:65:f2:e6:
53:c5:bc:09:e8:04:d7:b9:7d:d8:a5:e9:c0:b1:41:
71:79:f1:a4:0e:5a:11:52:6a:1b:59:31:55:72:a8:
3c:af:2f:d7:4a:c1:14:1c:b2:81:90:bc:fd:ff:d4:
44:d7:1b:d8:95:5d:e8:ae:68:74:d5:a8:b2:7b:77:
e0:a9:51:32:f8:a1:0a:30:68:63:93:e6:85:49:50:
1c:8d:bf:4b:67:ae:ea:6d:ad:be:c3:41:56:95:4a:
f7:c3:97:fd:fa:94:d2:c5:93:2b:d2:f4:9d:2c:22:
76:5b:42:5c:60:17:0a:10:3e:9e:14:c0:19:2a:c8:
fe:78:b3:0d:ad:bc:02:9a:55:09:ca:a6:61:29:18:
84:1a:ab:63:d4:b9:d0:3d:dc:38:90:5b:ca:46:9f:
35:47:96:f3:ad:4f:99:7c:37:e4:ec:99:66:1e:f1:
88:67:a2:99:4d:c3:9a:1a:18:66:56:b6:09:f6:6e:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DE:61:4B:29:E1:95:F8:63:DE:E8:F6:78:A0:7E:15:8B:3D:97:3C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Nt5hSynhlfhj3uj2eKB-FYs9lzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
a0:19:fb:76:a1:1b:2b:2a:3a:86:14:90:93:18:e4:29:73:07:
35:73:a3:97:f7:69:e0:f8:03:1a:2f:17:d7:de:d6:ef:4b:94:
6c:5f:84:09:20:ae:1d:56:38:22:69:c4:de:5b:00:91:a9:b2:
3d:c3:dd:c9:66:5d:1f:25:da:4a:a0:f2:7a:38:ef:70:cb:bb:
f3:83:08:92:2e:58:3e:49:09:c3:22:25:5b:a2:0d:c5:de:32:
8b:c6:5a:ff:7d:ca:6c:f3:0c:13:d3:ee:ad:a5:e8:45:6e:53:
a2:31:84:52:d5:ba:8f:e4:06:39:0e:94:eb:8a:ed:c0:83:b8:
06:91:ac:85:c4:53:5f:b6:e0:a7:a8:b6:46:5c:15:ee:f9:ce:
e6:5a:72:76:06:1b:cf:34:5d:cd:19:fb:12:fa:9d:2e:43:91:
09:e0:6c:cc:a6:15:52:21:99:f8:e5:08:c7:bc:04:ae:92:b1:
1d:8d:5b:3e:a3:a9:e0:ab:d4:c0:67:0b:38:f2:97:fd:b1:6b:
a8:81:36:a0:f3:95:a8:2b:dc:0d:16:22:a4:ae:b6:55:8f:cd:
1a:7c:b3:64:3a:7d:a4:9b:15:c3:3f:0c:cf:dc:fb:05:4f:02:
12:5f:8c:82:81:06:30:c7:d1:5e:ac:84:b2:d3:58:85:b0:ae:
47:6a:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:07 2025 by rpki-client