Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RfdNW1GmJZ3sDG-Kwtjjm6M6fgw.roa
File: RfdNW1GmJZ3sDG-Kwtjjm6M6fgw.roa (raw, json)
Hash identifier: Ar+uz/hu995StBvqIImoo66sEaGJI2g88yI2u5fDSDE=
Subject key identifier: 45:F7:4D:5B:51:A6:25:9D:EC:0C:6F:8A:C2:D8:E3:9B:A3:3A:7E:0C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBAD7F6167E78FB42D423E8830F60E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RfdNW1GmJZ3sDG-Kwtjjm6M6fgw.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21313
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ad:7f:61:67:e7:8f:b4:2d:42:3e:88:30:f6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45f74d5b51a6259dec0c6f8ac2d8e39ba33a7e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:08:45:36:41:65:bf:2d:ef:82:41:35:0a:
1e:c0:43:9a:36:bd:d6:cb:e2:34:c7:59:d0:27:be:
37:29:89:9e:95:3b:09:9c:fe:2e:77:95:20:26:cc:
c2:70:58:fd:d1:30:c8:5c:4c:3a:ac:46:42:15:ec:
b0:70:31:dd:81:f4:1d:d2:de:ce:2b:92:66:04:8a:
ed:15:75:fa:9b:14:67:e7:cb:65:05:7e:35:e7:7d:
ff:28:24:31:d8:64:f1:f0:ec:2b:aa:41:ac:3c:db:
fe:f1:67:87:b1:e3:e4:f8:2f:c7:dd:8b:a2:d5:b9:
00:9b:2d:e0:dd:1b:e9:ea:7f:7f:20:8c:06:e4:a6:
ee:97:8a:1b:59:eb:6f:ab:90:62:60:d3:e7:01:70:
15:33:83:c7:5c:ea:ec:e2:85:02:7d:71:0c:b8:95:
98:8f:ce:8f:44:8b:e1:50:21:0e:f0:ab:be:38:4b:
b8:3d:c9:88:f8:d3:21:dc:f5:e7:1a:dc:fa:89:b5:
70:6e:c2:43:f4:b5:08:a2:6e:94:b0:14:d4:3d:56:
ec:fe:9f:11:55:ff:84:1e:f4:22:b3:4c:d6:a0:23:
8d:11:f2:a9:d6:3e:c6:cf:78:0b:bc:4b:1a:75:8c:
32:c5:ff:65:e1:b2:50:4a:06:80:e5:3e:8e:ab:82:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F7:4D:5B:51:A6:25:9D:EC:0C:6F:8A:C2:D8:E3:9B:A3:3A:7E:0C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/RfdNW1GmJZ3sDG-Kwtjjm6M6fgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
51:dd:79:5a:d9:92:ad:51:35:fd:c9:e8:9d:df:79:34:83:7f:
c6:d7:8c:20:33:f4:55:62:95:d6:31:38:58:df:c4:a2:96:6c:
53:33:c4:d1:81:d2:bf:2f:4b:d9:c4:3c:f5:0b:aa:16:a3:84:
8b:d7:fb:5a:a8:b0:3c:fc:79:81:db:2d:6b:fb:c4:e9:4e:94:
52:5f:29:c6:2e:fa:0d:1f:76:0c:03:d8:e2:29:8f:95:39:54:
16:69:45:51:58:0c:c7:23:11:f8:a6:1a:82:16:0f:f7:4f:cc:
c9:99:f8:00:6a:97:2b:6d:15:d1:19:ac:24:c1:64:49:df:21:
29:85:a8:ce:45:74:8a:04:cc:87:94:93:54:20:ac:bf:d2:29:
a6:73:dc:86:be:2a:19:30:8d:47:7b:0c:6b:f0:0c:37:e1:87:
d1:dc:eb:f5:fb:c8:bf:98:70:96:b1:1a:91:d6:01:12:e2:03:
d5:12:28:c6:a2:00:fb:0a:33:42:03:2d:96:fc:3f:ca:93:39:
be:ed:7a:93:0a:63:72:51:85:b4:b9:46:eb:2a:46:28:1f:2b:
30:d2:5f:09:3c:4c:61:71:53:c8:24:b5:51:e3:91:8a:3d:71:
ec:16:98:42:aa:29:d3:e0:c8:89:22:e4:ff:d6:b4:e5:ba:09:
e2:c2:e4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:40 2025 by rpki-client