Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UicIWMfvzchC80F7wjSwh8Vn4oc.roa
File: UicIWMfvzchC80F7wjSwh8Vn4oc.roa (raw, json)
Hash identifier: iWduqdoEHKLfZ1Yk3RTxVUcl/S7ZCZmDkmcWX6piegs=
Subject key identifier: 52:27:08:58:C7:EF:CD:C8:42:F3:41:7B:C2:34:B0:87:C5:67:E2:87
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF17AE9E4450781C73438489D34EBE
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UicIWMfvzchC80F7wjSwh8Vn4oc.roa
Signing time: Tue 26 Nov 2024 13:35:25 +0000
ROA not before: Tue 26 Nov 2024 13:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397211
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:17:ae:9e:44:50:78:1c:73:43:84:89:d3:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52270858c7efcdc842f3417bc234b087c567e287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:1e:e0:73:b1:62:ec:05:da:d2:63:e1:e3:
da:b2:75:a6:64:d4:61:5d:84:75:1b:b7:8d:1a:96:
b1:8f:0f:5f:9a:7f:17:cd:ca:2b:53:25:d5:4a:cd:
82:1e:77:f0:c1:43:16:5d:f0:22:37:1d:05:78:09:
7c:d0:9c:20:5a:36:b7:02:f5:28:3a:cc:28:78:29:
36:88:7d:f4:2e:dd:d0:5d:b0:aa:b8:b7:91:bd:41:
ae:93:55:b5:18:bc:92:60:19:4e:4c:3c:4f:c9:83:
59:67:b5:cb:f2:df:d8:69:ff:e9:fd:a3:75:60:3e:
8b:f1:a8:c4:85:89:6b:fe:0c:ce:cf:2b:ed:9b:55:
dd:e6:cd:4d:a2:f7:ac:f1:58:f9:6e:83:b1:4d:e3:
c9:fe:40:69:e7:2f:50:46:07:72:43:46:65:85:6b:
b8:a2:04:6e:69:ee:39:6a:d5:e2:4c:c1:66:d2:40:
47:29:dd:26:88:9d:d1:99:c4:5e:94:a7:3c:63:c8:
7f:01:84:60:4f:f7:f6:2f:61:0b:18:18:6c:e8:2c:
93:c8:6d:85:25:ae:e3:3a:6d:2f:23:ea:1b:c0:b9:
82:71:03:b8:13:d6:85:f6:be:d3:96:ac:ed:9d:29:
65:77:b4:95:a6:25:0c:2d:fb:05:41:7b:83:42:44:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:08:58:C7:EF:CD:C8:42:F3:41:7B:C2:34:B0:87:C5:67:E2:87
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UicIWMfvzchC80F7wjSwh8Vn4oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
66:f3:01:93:9b:07:5d:ea:9f:13:67:6b:f2:63:1e:82:ad:0b:
6b:fc:67:b6:f5:04:33:d1:a6:0d:2c:a4:ff:4f:51:6d:5e:50:
5a:19:56:09:0c:67:11:61:b1:d0:b2:81:ec:f3:91:61:66:b5:
9e:90:55:8e:b8:26:b7:6e:2c:0a:8b:9b:39:89:59:0e:b9:f9:
04:85:8b:a1:7b:d1:23:3c:5d:4a:06:a6:fe:2a:6b:fc:67:43:
5a:2c:51:1f:9d:52:dd:1b:69:77:e8:89:56:8d:8e:25:93:53:
af:5a:4a:53:2e:b4:93:bb:74:cf:4e:bd:bd:5c:a7:fd:5d:d2:
fe:0d:06:f2:fc:f9:86:03:62:60:28:3e:e4:78:81:80:d8:8e:
4f:83:03:84:46:0d:69:cc:ca:cc:97:68:37:f6:ae:06:ff:0c:
13:8d:77:81:db:40:d9:82:34:a3:da:95:9a:37:a7:ab:78:1d:
7a:48:dd:e7:c4:8a:f4:b0:84:ef:08:3c:80:92:23:a1:2d:ad:
8b:b0:c7:ce:f5:44:fc:96:9c:92:6d:3a:c0:f1:52:91:09:4e:
91:2b:03:ef:d1:67:ed:2b:47:84:be:3e:bf:02:05:91:d7:41:
bd:7e:96:ef:46:9d:7f:a8:cf:1e:a7:9b:18:bf:c6:71:63:e8:
17:ed:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:45 2025 by rpki-client