Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WggFXeWh0W33kEi7NfcO9PVHIGc.roa
File: WggFXeWh0W33kEi7NfcO9PVHIGc.roa (raw, json)
Hash identifier: Gyyt88ihiSbm6V5tG8++y+c+k3VjC7bymaWJU0o/Xt0=
Subject key identifier: 5A:08:05:5D:E5:A1:D1:6D:F7:90:48:BB:35:F7:0E:F4:F5:47:20:67
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD52F7835288CEB15268F729C4875
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WggFXeWh0W33kEi7NfcO9PVHIGc.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396606
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d5:2f:78:35:28:8c:eb:15:26:8f:72:9c:48:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a08055de5a1d16df79048bb35f70ef4f5472067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:dd:a5:ed:33:e9:ca:da:3b:63:d5:71:f5:
3f:52:3b:3b:ab:cc:c5:14:32:47:cd:d0:b8:1a:15:
d1:2e:2e:c8:1f:f7:78:69:4b:d2:ca:c3:48:80:79:
c7:89:32:7a:f1:b3:03:3b:fa:c1:97:d3:2a:95:47:
7c:68:2a:36:5f:a7:6f:c0:8d:e1:68:e5:07:82:b0:
d7:3a:45:9f:e3:42:ec:e3:b6:17:14:37:fd:3c:4e:
62:0f:f9:82:2b:0f:7d:75:11:bf:0e:b3:d3:dc:23:
b1:ff:37:8a:76:1b:ef:1b:dc:5b:33:fb:3d:fc:9a:
66:47:3c:72:51:4b:7f:4c:f4:2e:ab:71:3b:bd:f5:
39:62:36:48:50:f8:3a:d9:19:f1:33:63:12:f3:3f:
35:f9:e4:05:f7:4c:7b:68:41:25:91:ad:8f:68:c3:
7d:52:7a:28:06:84:ea:5e:a7:fc:a1:46:09:99:8b:
44:6f:ef:68:73:7b:e1:e6:02:40:b5:5f:0d:87:5a:
6b:5b:3b:36:52:3e:b5:ac:54:31:d4:4e:63:78:5e:
12:0e:72:37:23:50:c7:a2:4d:d2:fa:58:53:5c:55:
a0:16:e1:02:02:b1:2b:57:39:a6:0e:09:36:ed:9d:
c1:87:71:31:33:e5:56:33:eb:02:45:89:57:57:55:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:05:5D:E5:A1:D1:6D:F7:90:48:BB:35:F7:0E:F4:F5:47:20:67
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WggFXeWh0W33kEi7NfcO9PVHIGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
88:94:4c:dc:72:d8:fc:b6:c4:6f:42:90:9f:59:98:f2:93:1f:
ac:d2:75:0b:28:73:1f:83:73:2b:de:23:e8:a4:6e:95:b2:dd:
03:d9:5e:36:65:79:76:c2:19:d3:21:21:f7:6e:a9:6d:c2:e4:
ea:50:3d:2e:53:e1:6f:e7:3f:ed:83:c8:f3:ed:44:14:54:4f:
43:72:91:69:3a:bd:fd:af:d1:4d:5d:37:97:dc:3a:1c:7c:0a:
f5:fb:db:cb:20:5b:2a:c6:b0:47:57:d2:03:ea:c0:5c:48:96:
cc:db:8d:c2:1b:4a:40:d2:ad:83:d2:be:b4:b8:9c:0c:71:06:
95:58:6b:41:98:b7:03:28:0c:c5:e5:be:7f:84:c3:64:14:e9:
a3:a6:6e:80:97:7a:b5:20:5a:0e:d0:7d:f0:39:42:01:02:97:
32:6b:fb:a3:70:fe:9a:b6:b3:76:9b:bd:3f:b3:28:4c:da:73:
bb:e5:11:90:d3:cc:8e:fc:a1:ea:c2:4a:90:f4:e8:c3:6d:bd:
20:e5:1c:ab:81:3a:9e:9c:f3:aa:f6:54:6c:06:47:9b:c7:73:
e9:70:9f:34:7e:b0:11:9c:4d:ae:0f:9c:d1:15:db:47:03:f6:
7c:e2:bb:07:d1:c6:a0:ab:e7:3c:62:b6:1c:98:63:09:f5:da:
93:64:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:33 2025 by rpki-client