Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RH-JWnDdF-IRadFf7ZpDZo1p684.roa
File: RH-JWnDdF-IRadFf7ZpDZo1p684.roa (raw, json)
Hash identifier: go6ngoA7ai+6SWn6M48YEnbCJWOSNtwszTy7vGxne6Q=
Subject key identifier: 44:7F:89:5A:70:DD:17:E2:11:69:D1:5F:ED:9A:43:66:8D:69:EB:CE
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD5D8787E37D2791EC10A123F3DD7
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RH-JWnDdF-IRadFf7ZpDZo1p684.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396608
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d5:d8:78:7e:37:d2:79:1e:c1:0a:12:3f:3d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=447f895a70dd17e21169d15fed9a43668d69ebce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:0a:bb:37:fd:0c:5c:a8:33:80:aa:0e:5e:
71:a2:a6:65:7a:9e:3a:d6:c6:2b:e9:d3:4c:34:08:
64:fe:e4:78:35:87:70:ea:ae:c0:ff:b0:a1:98:05:
e5:a5:5d:d2:94:b1:2b:ed:4a:5c:28:54:70:fa:10:
b0:44:1e:a5:e9:9c:46:5a:12:89:71:b1:20:a6:2b:
3e:c6:a6:72:c5:da:c2:40:96:d1:f9:e2:5b:a0:30:
ab:85:2c:d7:52:6f:82:df:5c:77:1a:df:12:60:f1:
2d:fc:84:f9:44:a9:93:9a:98:9c:13:53:f2:cc:2d:
34:49:42:cd:1b:22:98:b1:f2:3e:a6:56:b1:d9:73:
ee:ce:fc:df:4d:4c:e2:9d:15:2a:f0:53:64:fb:a0:
87:3f:aa:1f:b0:fe:02:b4:4e:b0:80:cd:c6:1e:3c:
7a:2b:71:c9:c9:ce:84:96:f8:8d:aa:18:f0:09:d3:
5c:07:2a:dd:a1:de:38:d0:bc:60:f4:dc:d2:36:69:
99:9f:9a:13:16:67:6e:dc:e4:a9:6b:72:e5:37:a6:
ec:d8:1b:41:c9:f4:63:f1:4c:97:c2:91:fe:84:53:
1d:1d:82:7a:f3:e0:09:30:e6:e8:03:33:0d:57:06:
fa:a9:42:4e:3e:f0:a3:33:88:93:d3:26:76:bd:8a:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7F:89:5A:70:DD:17:E2:11:69:D1:5F:ED:9A:43:66:8D:69:EB:CE
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RH-JWnDdF-IRadFf7ZpDZo1p684.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
3e:e1:16:59:ab:38:aa:32:a9:98:de:04:39:79:c3:b0:07:3f:
05:ca:58:be:52:8d:de:eb:4f:aa:c6:6d:3e:02:e9:8a:02:88:
14:02:3c:6f:f8:06:3d:33:5c:94:a9:dd:2d:e0:3a:47:2a:10:
40:ba:9d:da:4f:9a:19:83:8d:51:a1:18:ed:17:65:d7:52:fd:
50:d8:ca:ab:27:ed:08:cb:0e:dd:80:d8:ac:28:66:f0:86:a9:
f8:5f:a7:ca:8b:38:b9:5c:81:e1:be:d0:b7:75:4b:12:3c:d9:
a4:fe:37:bc:1d:3c:d6:af:c5:08:a5:43:42:b1:ed:f2:9c:53:
e4:5b:24:01:f9:0d:0c:48:4f:fe:9d:f8:b2:54:ee:1d:73:0b:
b1:19:7c:08:3e:5e:2e:f1:36:1d:13:60:55:0b:03:b5:f2:20:
7c:1e:5a:2e:26:83:a7:9e:62:fc:5f:4a:3b:9d:64:a4:bb:d3:
a7:23:6a:ae:77:2d:5b:e6:5a:1b:4c:6e:c2:32:46:37:35:8f:
fb:ba:e9:bf:42:58:f4:4a:19:de:1e:c3:f9:9d:a8:42:05:8f:
75:4d:2b:1e:1f:4d:2b:68:10:54:d7:40:23:c9:be:0c:eb:31:
95:1f:4a:86:1f:01:86:cd:5f:59:60:9d:e2:58:cc:ae:9d:a8:
b4:1b:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:24 2025 by rpki-client