Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YMlH766Rffw14QAyLXlZcTKfu-M.roa
File: YMlH766Rffw14QAyLXlZcTKfu-M.roa (raw, json)
Hash identifier: UxVTe6yJ3IU6BHZOubZKz8GRVj+HFyVtkJ4wuPpvHac=
Subject key identifier: 60:C9:47:EF:AE:91:7D:FC:35:E1:00:32:2D:79:59:71:32:9F:BB:E3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDD162E05B8CDE74AF657322F0808
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YMlH766Rffw14QAyLXlZcTKfu-M.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397197
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dd:16:2e:05:b8:cd:e7:4a:f6:57:32:2f:08:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60c947efae917dfc35e100322d795971329fbbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:e7:72:da:45:3f:8a:7f:3c:c2:7a:63:a5:
66:44:c3:4c:35:66:0b:88:e3:19:99:44:96:21:ec:
d0:6f:6b:9b:ff:a8:3f:42:f5:c9:d1:5f:24:73:c2:
8d:e2:ba:9d:4c:4b:b7:2f:c8:bd:a6:3e:e3:83:33:
90:1b:1b:88:88:e1:e1:31:ca:c0:ed:59:fa:de:c0:
44:5d:bd:8f:77:71:43:bb:46:97:b3:cb:3c:03:ba:
ed:25:42:c0:10:55:2e:f0:56:c4:57:3b:5e:8f:9e:
e4:37:6a:f5:1d:13:76:00:ae:7b:12:9e:b2:60:88:
20:3d:28:38:6c:c8:c5:d5:cc:e1:a0:cb:f2:1f:02:
a3:91:f0:a3:36:ad:09:dd:89:b2:67:dd:3f:37:7d:
ec:d6:01:c9:d8:1a:57:c1:3a:56:ac:82:46:21:c5:
5b:7e:f7:2d:6f:08:e3:0b:b5:9f:1a:8a:2a:fe:b7:
db:ed:82:67:03:77:8a:48:d0:f8:24:a5:09:61:7d:
c7:58:82:9e:5e:bd:dd:38:10:97:4e:ff:61:93:0d:
0e:a3:e5:4e:f4:7d:90:d4:40:60:0e:3b:be:39:33:
02:12:d2:20:40:54:08:cf:1a:4c:4a:03:27:df:35:
f6:f8:7f:51:da:64:ae:02:05:ef:6c:40:de:ba:7f:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C9:47:EF:AE:91:7D:FC:35:E1:00:32:2D:79:59:71:32:9F:BB:E3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YMlH766Rffw14QAyLXlZcTKfu-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
84:ee:cc:11:8b:da:bc:2d:7b:c7:a1:c4:3f:7f:81:ae:1e:f6:
f3:14:40:ee:ae:95:8e:73:9c:ea:15:97:08:43:a3:2e:ae:0d:
20:1c:bf:c7:0a:0c:09:e8:3f:4c:bd:e4:64:bb:7c:b8:57:04:
b7:fa:6e:35:e6:b0:1f:15:be:89:51:29:f3:ad:eb:de:c6:4c:
1c:ce:e4:99:c4:5a:9c:05:cd:46:64:9d:c7:1e:65:ea:1a:a0:
9a:67:ff:7b:96:02:96:35:a7:f2:a1:8e:23:84:65:eb:50:bf:
06:a5:d0:1c:72:34:f0:47:71:94:e8:93:b5:a7:0a:96:c7:70:
12:8c:83:3c:e6:0c:7b:a9:93:b0:72:80:bf:e4:e7:e3:24:61:
60:43:ae:cf:71:18:b3:f8:d3:63:7a:be:a9:24:f4:79:a6:85:
d2:ba:46:76:db:a3:99:21:05:d9:06:73:06:96:94:66:ba:6f:
f2:d4:43:6c:c9:8f:9e:ec:cb:9d:ae:e9:7e:c6:e8:54:6d:e8:
fe:49:8a:e8:06:d0:7d:ff:ba:2d:5f:24:36:49:69:92:cf:d1:
f9:63:df:a6:c4:48:5e:c7:20:8c:3d:ac:d7:d6:f5:66:b1:25:
2d:9b:60:a4:82:65:b4:b3:95:48:eb:b5:69:cc:b6:f5:9b:f5:
e1:8c:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:01 2025 by rpki-client