Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RI9W2ypc4ibTXZXgkBtXpJ9tqPQ.roa
File: RI9W2ypc4ibTXZXgkBtXpJ9tqPQ.roa (raw, json)
Hash identifier: YgY0Q6sdhtLkczIk6U/N/QTSGbEVP3StjQdjWOFzTVU=
Subject key identifier: 44:8F:56:DB:2A:5C:E2:26:D3:5D:95:E0:90:1B:57:A4:9F:6D:A8:F4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF48FE9BDBD0E1A52822BC35B15C8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RI9W2ypc4ibTXZXgkBtXpJ9tqPQ.roa
Signing time: Tue 26 Nov 2024 13:35:16 +0000
ROA not before: Tue 26 Nov 2024 13:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396563
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f4:8f:e9:bd:bd:0e:1a:52:82:2b:c3:5b:15:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=448f56db2a5ce226d35d95e0901b57a49f6da8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:04:5e:d6:71:9b:8d:a7:b8:22:6e:9b:1b:
4b:32:40:5b:0e:f7:1b:ff:82:a8:97:45:70:96:2b:
95:56:56:dc:a9:b0:e3:7b:41:9f:29:cb:fe:53:ab:
69:8a:44:62:91:b8:da:ca:71:2a:0c:97:25:dc:6e:
5b:74:4b:2f:b2:eb:ea:20:ec:e4:ab:fc:33:d9:ca:
26:89:d6:d7:00:c2:3a:1d:2c:b0:7f:3c:9d:a1:48:
07:cf:b2:c8:32:30:9a:e9:1a:98:91:66:f9:a7:ca:
7f:a3:63:1c:14:5a:67:98:9f:58:f7:d3:68:e9:7e:
b7:15:26:87:42:f7:22:2b:4e:2e:af:13:87:d1:a2:
61:be:fa:de:63:d1:68:c8:e8:20:9a:f2:b1:b7:a9:
0a:e5:b3:56:84:86:05:fc:a6:94:98:b7:0f:7c:56:
07:e1:5d:b1:4b:57:86:ee:33:df:43:23:08:f3:44:
10:0a:6d:45:21:e1:ff:c4:ab:2f:8d:3d:e2:47:98:
fd:47:49:f6:15:c0:9c:4e:83:59:4d:1e:03:cc:15:
1f:16:96:f8:4a:fc:8c:ff:55:65:ca:c0:7d:39:73:
86:5e:79:13:a9:f3:79:97:b9:51:9c:1e:4e:81:78:
4e:5c:dd:62:af:45:ab:56:c2:f3:1e:b5:86:08:a9:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8F:56:DB:2A:5C:E2:26:D3:5D:95:E0:90:1B:57:A4:9F:6D:A8:F4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RI9W2ypc4ibTXZXgkBtXpJ9tqPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
3e:9f:b6:54:d9:75:f8:8e:de:4b:77:be:75:a0:44:d7:f6:7a:
ac:41:a7:79:2b:b1:03:fc:12:4b:62:71:29:42:7a:47:b0:8a:
a0:0a:b2:59:86:c9:ba:e7:fc:98:21:10:8a:48:1b:de:e0:98:
9e:23:a9:98:aa:50:3d:72:00:2f:35:28:03:1f:92:27:9a:f7:
50:a5:ec:6c:68:47:23:09:af:f3:95:21:9f:ca:3f:ca:92:91:
be:d3:33:08:d1:e0:80:62:d2:50:9c:dd:40:cd:a9:01:53:e4:
e0:dd:8d:db:b4:04:9f:36:8d:b4:ea:0e:19:6f:a9:5d:66:b5:
f3:ff:77:d5:a1:09:e6:17:c0:eb:11:56:6f:84:e2:1d:b2:55:
18:c8:a7:51:6b:53:93:52:c9:b4:c1:da:33:a0:14:66:d1:1d:
a5:9b:bb:70:b7:e5:76:4b:e5:ee:e0:2d:f9:a1:a2:5e:b8:fb:
0d:0c:77:69:53:75:2a:f8:5b:bd:6c:b6:7d:13:4b:f6:a6:d6:
7b:4b:e7:c3:02:a6:d1:11:1a:4a:e2:1f:e8:d1:3b:b2:c2:d2:
84:4f:a5:d6:37:da:28:26:9a:b1:90:fd:db:56:00:ab:01:56:
2f:11:47:2e:3f:b3:2e:f3:2a:3e:65:a6:dc:b8:8b:a2:d6:12:
e2:4f:cd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:08 2025 by rpki-client