Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WiyHyVAd0JmJVbexj9miq5nkPVI.roa
File: WiyHyVAd0JmJVbexj9miq5nkPVI.roa (raw, json)
Hash identifier: pRTf0HD8lXP2kFwQQN/YhbhgvmE6h1s9AYLSvd0G/Bw=
Subject key identifier: 5A:2C:87:C9:50:1D:D0:99:89:55:B7:B1:8F:D9:A2:AB:99:E4:3D:52
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0BFF184F30B095FD47E96AB6E3C7
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WiyHyVAd0JmJVbexj9miq5nkPVI.roa
Signing time: Tue 26 Nov 2024 13:35:22 +0000
ROA not before: Tue 26 Nov 2024 13:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396613
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0b:ff:18:4f:30:b0:95:fd:47:e9:6a:b6:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a2c87c9501dd0998955b7b18fd9a2ab99e43d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:d2:b3:1a:de:7e:91:7d:b5:82:52:f5:b0:
45:53:fd:4f:24:12:5a:fe:b0:2b:92:e8:38:e5:17:
84:b2:68:b7:87:33:93:72:61:5f:80:f0:6d:1f:18:
2b:21:57:ac:3c:53:f0:f2:33:21:2f:aa:1d:93:43:
8c:06:1f:6e:f1:48:63:74:20:f7:88:9c:e8:00:c2:
dc:74:19:2f:bf:5f:e4:00:3e:05:e1:e0:28:e8:88:
1e:8c:4a:a2:0f:a4:fa:50:4b:1b:13:b8:07:17:c7:
cc:a0:63:a2:33:01:1b:97:31:7f:92:89:57:e3:3b:
29:a4:ff:14:e2:5c:a7:36:5d:cd:7b:e2:4e:ed:e4:
eb:ca:98:b0:c0:fe:6d:ec:e5:ec:8b:a7:57:e0:14:
31:39:a0:c8:1a:26:56:22:89:0a:47:54:02:13:55:
24:d2:a4:fb:bf:5b:24:fe:8a:40:c6:07:c4:d0:f5:
3a:0b:cf:c8:5c:1d:a2:a0:06:10:dd:64:b1:c5:43:
e9:16:9a:73:7e:49:25:bd:07:fa:d2:30:18:d8:45:
83:fc:18:c8:55:e0:10:c1:5c:05:6f:4e:12:7d:66:
67:4e:b9:d2:4f:19:0b:ba:dc:8d:c7:df:1a:c1:c3:
31:41:d8:ab:7b:6c:3c:4f:9d:cd:e4:ce:46:f2:fe:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:87:C9:50:1D:D0:99:89:55:B7:B1:8F:D9:A2:AB:99:E4:3D:52
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WiyHyVAd0JmJVbexj9miq5nkPVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
aa:bd:3d:bf:9f:ac:f8:6a:cf:24:88:44:25:6e:00:8e:12:b3:
da:99:54:c8:fa:8e:f4:b6:a1:9b:41:df:60:bf:86:08:68:2c:
a3:69:22:81:7e:d7:5f:1c:52:e1:e0:ac:e6:04:27:fd:9a:1b:
74:6d:2d:8f:7d:38:94:19:bf:13:af:dd:0a:9d:9d:22:5e:e6:
a2:2e:3c:06:ab:04:1a:97:8a:90:ac:21:cd:a6:23:51:60:f8:
4d:3d:b4:5c:c6:81:e3:cb:ca:90:06:65:bc:9b:4f:e2:f8:0b:
ce:3a:ff:d5:70:ec:f4:a2:11:6c:55:eb:cf:87:c1:ec:8f:4a:
83:a0:b0:34:1f:74:f0:d6:9b:47:93:42:84:bf:31:d5:c7:de:
41:a2:1e:3f:f0:6c:a2:96:f0:c5:6f:c8:11:15:bf:12:0c:7b:
75:4a:f1:df:aa:ec:2d:02:4b:dc:14:58:43:79:91:95:d5:07:
a0:fa:86:99:ce:e6:c4:4c:50:f9:4a:b5:3d:c8:d1:7e:6e:fd:
92:66:f7:af:a8:60:c1:5f:c6:f3:0a:60:f4:89:a4:bd:4b:06:
a0:e2:e9:b0:70:0b:ab:9d:1e:43:f6:fd:b7:34:c5:9c:08:b5:
41:f5:58:dd:8f:29:e0:39:bc:9e:de:cd:f5:66:d2:94:78:8a:
75:43:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:50 2025 by rpki-client