Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/V88i4pMUoAxSoihRGgx9LnipE08.roa
File: V88i4pMUoAxSoihRGgx9LnipE08.roa (raw, json)
Hash identifier: SHIun1zO+jq57GAU9VZQs9pcEBVGhblDtDUbr/gHIrs=
Subject key identifier: 57:CF:22:E2:93:14:A0:0C:52:A2:28:51:1A:0C:7D:2E:78:A9:13:4F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF093A740EED96D78BC58FBD2AA6DD
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/V88i4pMUoAxSoihRGgx9LnipE08.roa
Signing time: Tue 26 Nov 2024 13:35:21 +0000
ROA not before: Tue 26 Nov 2024 13:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396609
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:09:3a:74:0e:ed:96:d7:8b:c5:8f:bd:2a:a6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57cf22e29314a00c52a228511a0c7d2e78a9134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:36:f1:2e:8b:03:4d:ef:9f:ef:40:10:79:
5c:e3:4e:d8:28:f7:1a:c0:fe:42:82:a2:d9:81:84:
c9:92:07:c4:00:bf:cc:32:17:5a:a7:35:27:99:f8:
ff:ce:44:41:b3:ef:be:83:62:84:4a:a8:fb:f0:c9:
ba:29:cf:36:2e:9b:b9:53:e0:45:85:9c:14:82:24:
a5:ba:61:82:8b:0d:56:4b:c5:e2:b6:73:bb:dd:0f:
46:e0:8e:44:7e:7f:05:51:c1:96:5b:a0:b0:b1:f9:
dc:c1:01:70:a9:f6:c4:53:84:11:61:9b:fb:3a:6d:
bf:88:42:89:c2:e0:6a:11:18:ce:36:47:d5:10:2e:
bd:71:98:1b:4e:72:7f:2c:5a:8e:d6:a6:e7:a3:eb:
e1:8a:d9:f2:58:f8:2a:5c:17:4e:ea:10:da:6d:9f:
74:ee:b0:8b:d2:1a:55:1d:09:82:7a:c8:0c:2b:4e:
ee:30:ff:02:cb:15:45:b3:9d:eb:36:ea:77:08:eb:
d5:5e:c8:73:29:0a:20:3e:98:49:79:d7:52:f6:ed:
0d:4e:92:d2:68:b8:10:f2:9a:d6:5e:50:8c:fb:36:
cc:42:4c:de:0e:46:1f:73:6b:73:6b:1f:8e:40:f4:
dd:0a:d4:a4:5f:0d:f3:0f:02:21:ff:c2:72:be:5f:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:22:E2:93:14:A0:0C:52:A2:28:51:1A:0C:7D:2E:78:A9:13:4F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/V88i4pMUoAxSoihRGgx9LnipE08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
bc:6e:65:37:c6:0b:0e:9f:83:8b:5b:de:3d:b4:58:83:13:31:
0c:1a:16:df:ea:d5:4b:ab:d2:af:b4:6b:4c:97:a2:b1:a3:95:
b3:7e:d7:c5:72:24:14:45:d7:b3:06:b9:31:8e:f1:72:52:42:
e2:27:04:6f:89:db:48:7f:ce:04:60:89:03:12:53:ac:12:84:
91:8f:e2:dd:8f:83:30:45:fd:9c:76:ee:e2:32:e4:86:e0:68:
49:f9:20:32:a2:7f:1f:8c:76:06:03:a3:9b:84:2b:cc:fc:b2:
d7:fd:cc:3c:12:a4:4b:f6:01:65:c7:3f:75:21:a8:02:fa:b6:
36:0d:98:9e:16:d4:eb:85:44:a7:23:17:1c:bd:e7:50:3b:01:
ab:7b:b6:ec:ac:65:43:c7:9a:65:e6:4c:73:0a:97:7a:b3:72:
e9:1b:22:a9:b0:6b:c6:59:dd:d9:36:bd:37:70:57:c6:4c:4a:
de:84:65:c3:a2:ed:64:dc:75:11:41:90:03:e0:3b:f7:24:64:
a5:de:33:75:67:bf:53:ef:b1:8b:41:d4:18:52:a3:29:9d:8d:
58:35:44:d3:f4:b3:ff:bb:c7:59:7f:66:07:d9:31:5b:1f:22:
66:3d:6e:bb:06:7f:2c:c8:ae:de:f5:72:4d:40:7a:e3:86:8e:
65:bb:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:24 2025 by rpki-client