Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YReQ3R615rb4ucgR6XSK20tCrxo.roa
File: YReQ3R615rb4ucgR6XSK20tCrxo.roa (raw, json)
Hash identifier: Q0IcBp21Pyat8jau8jrQ2ArKL3rItldU2LL5TrRwFo0=
Subject key identifier: 61:17:90:DD:1E:B5:E6:B6:F8:B9:C8:11:E9:74:8A:DB:4B:42:AF:1A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD13024651C83F76324B8B7F6B441
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YReQ3R615rb4ucgR6XSK20tCrxo.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396595
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d1:30:24:65:1c:83:f7:63:24:b8:b7:f6:b4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=611790dd1eb5e6b6f8b9c811e9748adb4b42af1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:a8:8f:92:79:de:c7:f5:9f:c4:1b:eb:6f:
8a:cd:1a:e8:07:22:62:ee:d3:b6:dc:02:37:fa:96:
d8:64:8d:fe:ee:c2:bd:48:2a:90:95:1b:a7:62:4e:
ef:f8:10:06:10:16:f1:a4:12:e6:57:ff:b7:27:c2:
6a:62:03:29:4d:3a:13:5a:8e:15:37:bf:55:8d:62:
85:31:16:84:f3:e5:9c:44:ed:33:80:29:92:4f:81:
f9:62:be:23:22:d8:27:e0:4b:3f:1e:b0:d6:7e:56:
f6:b7:0d:01:3d:82:c6:63:be:c7:8d:e6:3a:7a:7c:
d0:ad:ef:6b:8c:f7:5c:cd:eb:ca:50:52:57:94:ef:
bf:06:91:c5:14:c2:d0:67:22:ce:d4:12:83:4c:ec:
a4:4f:53:49:d0:5f:d3:a6:cc:7f:3b:22:d1:76:3f:
45:49:fd:3b:20:18:be:15:50:a6:81:03:fa:15:99:
b5:33:16:88:cd:ff:24:0d:a2:bf:68:ee:89:9c:0b:
25:a6:14:a4:9d:f6:af:a3:42:e7:9d:79:89:b5:91:
79:05:c5:12:c6:9f:8b:d2:9b:ca:af:ee:fb:b5:78:
26:63:95:c0:da:ef:fc:7b:2d:87:e9:3a:12:43:8c:
65:ff:74:d2:b8:8b:04:e9:b2:45:0e:31:21:0a:20:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:17:90:DD:1E:B5:E6:B6:F8:B9:C8:11:E9:74:8A:DB:4B:42:AF:1A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/YReQ3R615rb4ucgR6XSK20tCrxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
98:62:2d:6b:f5:c9:82:f2:b9:dd:b8:6c:6c:d7:fc:f2:c2:08:
21:5e:e2:2f:e5:f0:ba:8d:eb:31:4f:7f:52:60:47:b4:25:52:
f2:92:0d:24:eb:cd:a2:76:91:00:3f:e5:6f:33:c1:34:2f:e3:
0d:61:51:09:66:c5:21:e5:c6:ee:a0:70:d9:40:08:b6:7f:5e:
e2:c1:13:d8:c8:cc:2e:de:8b:7e:37:08:64:51:fc:96:b5:fe:
26:e9:29:6b:c7:22:20:60:8c:0c:b0:6e:8c:df:79:99:5a:33:
63:a0:ab:dd:f9:04:8e:4f:9f:7b:37:4d:7f:da:58:8e:19:f9:
39:44:bd:a1:18:e3:77:90:87:46:d2:ce:b6:db:2f:7d:0c:42:
c3:a2:3c:f3:e8:b4:9e:f8:e2:64:5d:34:74:a1:50:4f:9e:75:
71:5a:01:7d:c8:37:c0:de:13:8a:6d:0b:9d:41:4c:ef:fb:dd:
8a:12:75:10:3f:d9:34:86:cd:ee:ad:b3:0e:49:f1:5d:ec:03:
a0:8c:51:7f:2c:a6:e4:5f:49:f3:cb:aa:6b:de:6c:ec:8f:fb:
fb:c0:f3:31:5b:60:88:36:d9:18:e9:82:c6:08:93:db:4f:60:
97:c8:b0:5b:9e:27:ad:9b:cb:dd:6f:2b:42:89:a2:18:41:1b:
88:56:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:45 2025 by rpki-client