Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Wq1Q7qnw7yjVYplPAjTR8dIr9UY.roa
File: Wq1Q7qnw7yjVYplPAjTR8dIr9UY.roa (raw, json)
Hash identifier: eYbLQQwDM3GdzZ7ylov8zETin+wjQAboUnmr37dTm6s=
Subject key identifier: 5A:AD:50:EE:A9:F0:EF:28:D5:62:99:4F:02:34:D1:F1:D2:2B:F5:46
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBADEAFFD206260D73E0E293E20B4E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Wq1Q7qnw7yjVYplPAjTR8dIr9UY.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22547
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ad:ea:ff:d2:06:26:0d:73:e0:e2:93:e2:0b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aad50eea9f0ef28d562994f0234d1f1d22bf546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:7b:6b:21:73:08:8b:a3:a1:69:4e:e4:89:
29:46:39:d4:10:43:95:38:04:61:77:fa:2e:5a:66:
8a:d6:87:c4:eb:d1:16:f9:34:26:92:2c:c4:25:1a:
8c:6a:f8:0d:38:9f:84:30:8b:93:c9:e3:80:1b:0e:
41:26:fb:7b:a9:06:52:12:e4:24:73:be:57:56:b4:
0c:15:71:f0:1e:32:78:64:75:7f:c6:7c:a8:9b:2b:
d4:b8:ec:8d:55:ee:84:1c:a6:56:7a:b9:a8:a5:57:
34:b1:f9:ba:61:cb:c6:af:03:6d:f9:a2:f4:bd:6e:
12:c6:f4:da:57:c1:e7:fb:ff:0f:50:60:5d:63:04:
32:70:af:ea:25:98:9f:a9:8e:47:54:fb:d8:9a:91:
36:bf:d5:e8:fb:ce:27:a3:5d:53:09:95:01:11:8d:
c2:0d:91:62:2e:54:55:14:92:ca:3b:20:23:a8:3b:
75:28:77:42:f7:ca:21:58:57:3e:39:d1:d7:52:00:
20:35:eb:9c:e3:fc:18:05:f5:e1:b3:2b:da:68:fa:
df:3b:9c:17:fa:eb:84:ce:84:f0:bd:27:e0:2d:a1:
b0:ca:82:95:63:d1:01:89:d8:e9:92:82:17:4e:6f:
ef:13:5e:0f:b5:ac:9a:e9:f0:33:1f:2c:50:72:df:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:50:EE:A9:F0:EF:28:D5:62:99:4F:02:34:D1:F1:D2:2B:F5:46
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Wq1Q7qnw7yjVYplPAjTR8dIr9UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
7f:99:15:9b:c7:27:40:ea:39:63:59:29:f4:05:02:da:33:ce:
6d:8f:72:48:77:5e:c7:81:d1:8d:62:d6:43:44:e7:01:71:95:
e7:2e:aa:80:26:54:ca:52:d5:b1:6c:69:5b:ad:bc:a6:67:51:
17:64:06:1d:07:a6:dc:75:79:ac:9a:09:aa:eb:a0:b4:51:df:
3a:8b:8e:34:0b:28:bd:d3:ee:1e:05:65:72:91:e2:f3:70:fa:
66:0e:48:40:77:de:25:e5:d2:85:51:0d:d1:84:2f:1a:3f:df:
c4:90:dd:a1:42:21:80:b9:91:5e:7d:58:3c:21:59:41:3c:4b:
a2:c8:d5:f0:0d:c8:8f:ab:77:9c:b9:74:13:1e:9c:ad:7f:a2:
b3:a1:36:79:c3:09:bb:2f:cc:4d:77:58:8b:3b:2f:6f:72:30:
45:fb:ea:a8:04:65:9b:9e:f9:e0:4f:a8:cd:4f:fa:bb:a0:fb:
38:a7:7f:6b:7d:2d:f0:87:6b:77:6a:ea:e0:05:c0:d0:55:18:
80:ad:f5:37:34:16:80:b9:2e:15:19:c8:05:6e:4e:aa:3d:fc:
0b:3f:91:e1:01:07:95:39:41:71:0a:9e:6e:a9:bc:72:77:43:
2a:1e:ab:c2:a1:5f:62:cb:55:46:a6:d8:9f:a4:3a:a2:45:4e:
db:21:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:18 2025 by rpki-client