Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WBWKSa1fyBy_63vMPGkTLIZuJiM.roa
File: WBWKSa1fyBy_63vMPGkTLIZuJiM.roa (raw, json)
Hash identifier: ZCP9Kt2a1QdSJoLgXrrhyXJsv/an3sS9DhUmjzvfViA=
Subject key identifier: 58:15:8A:49:AD:5F:C8:1C:BF:EB:7B:CC:3C:69:13:2C:86:6E:26:23
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB6A58AA49DDFA27586E7BB81783F
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WBWKSa1fyBy_63vMPGkTLIZuJiM.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40647
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b6:a5:8a:a4:9d:df:a2:75:86:e7:bb:81:78:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58158a49ad5fc81cbfeb7bcc3c69132c866e2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:fc:f8:d0:4a:b8:46:1b:84:dc:e4:ee:c9:
83:09:a9:d3:e7:eb:33:ea:35:eb:de:4a:97:bb:7c:
bb:5b:27:d3:ab:eb:9a:31:17:dc:02:6f:c6:32:ee:
4f:87:79:0a:46:64:56:4d:52:d3:fe:e4:2f:13:4c:
e8:23:37:d5:d2:e4:53:8a:98:be:c1:26:ac:36:13:
a3:2f:a9:77:55:76:7d:65:17:39:76:11:13:d1:66:
df:cf:e1:dd:86:7b:d3:60:d7:21:87:0f:62:e6:63:
1c:8c:bd:ea:7b:92:49:ed:59:4c:61:09:69:1e:31:
e8:42:18:12:c3:ca:5d:c7:b9:e5:aa:ab:69:4a:4e:
9c:6d:7b:70:5f:75:18:e6:3d:d2:42:b1:6d:95:32:
06:f5:d0:31:b5:ee:95:df:4f:49:d2:e1:04:92:e6:
a5:22:a6:36:c1:2c:1b:90:b2:d6:e1:6e:ae:a5:d2:
dc:3d:44:46:d9:d1:66:df:ec:52:43:e2:5a:5f:df:
9b:76:03:69:f1:63:c0:c0:e8:7b:73:33:ed:71:22:
86:cb:85:ba:fd:92:b9:91:3c:c0:64:81:e2:90:4e:
e5:42:a8:5f:48:ff:e3:2e:fa:02:72:ba:fd:53:47:
5b:b9:6f:36:5d:85:48:7a:6d:15:57:7d:e6:63:7e:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:8A:49:AD:5F:C8:1C:BF:EB:7B:CC:3C:69:13:2C:86:6E:26:23
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WBWKSa1fyBy_63vMPGkTLIZuJiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
a3:2f:dd:4b:86:12:d4:b6:4e:4e:51:30:cc:54:54:a3:a2:94:
42:8f:1c:f7:f3:2f:6d:be:9b:cd:0a:42:30:c5:ad:ca:ef:bd:
ce:16:93:2e:1e:66:cf:40:e9:af:a5:1b:44:2a:12:64:02:7e:
83:c2:dc:af:9e:f4:a7:c3:65:d8:ed:ae:96:c7:1e:78:9a:93:
aa:7c:52:2c:e0:dc:4d:9a:5a:ec:e6:4f:86:16:ce:e1:20:17:
b1:a8:e3:b5:39:7a:e8:02:0e:c1:ca:50:8a:41:c9:90:78:fc:
35:bb:11:c2:e4:93:c7:31:32:0d:4a:2c:55:13:38:cd:49:0e:
88:f6:47:d7:c5:32:64:36:3e:f2:7b:77:a5:b9:3b:a4:08:93:
aa:bb:1c:1f:2e:b5:48:83:6c:fe:21:f4:3e:eb:42:b6:c2:d8:
57:c1:72:e0:09:29:f7:73:c0:e3:dd:56:af:f6:7a:af:2f:63:
0f:02:0f:a7:ca:6b:8f:5c:e6:f1:c2:08:a2:6f:91:12:db:9d:
35:dc:f7:b1:c3:1d:81:b8:3a:6a:ae:03:f4:d9:f5:96:8a:28:
47:c5:2a:8c:35:99:62:e3:4c:46:7f:fe:b6:19:9f:72:0e:33:
40:5c:29:4c:69:e9:ea:3a:97:4a:0c:7d:cf:1c:f6:d0:3b:60:
28:b4:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:08 2025 by rpki-client