Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_gqserd2IGkdqo1NpKV9soxrdxI.roa
File: _gqserd2IGkdqo1NpKV9soxrdxI.roa (raw, json)
Hash identifier: WnfrydDUA6OXrvJXh1+bjKBcZi07zXToyxYOFYOxwpE=
Subject key identifier: FE:0A:AC:7A:B7:76:20:69:1D:AA:8D:4D:A4:A5:7D:B2:8C:6B:77:12
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDA297F72BAB4B22B7A1A907421C4
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_gqserd2IGkdqo1NpKV9soxrdxI.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396826
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:da:29:7f:72:ba:b4:b2:2b:7a:1a:90:74:21:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe0aac7ab77620691daa8d4da4a57db28c6b7712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:65:c6:81:5d:fc:68:5c:e0:b8:eb:bb:f5:
41:50:f7:14:e7:ee:22:25:2f:67:77:43:08:4e:7b:
77:89:c3:95:15:8a:8b:4d:ba:03:3c:a6:90:8c:b7:
f2:ce:82:df:98:30:c5:fd:db:e7:5d:23:6c:c0:0a:
80:04:4e:e6:e6:21:99:26:47:67:ae:25:6e:eb:99:
bd:3d:30:ac:15:4b:c3:b8:3a:a5:22:cd:02:57:0c:
07:45:ae:0b:e4:40:cf:ea:6c:ae:e9:12:97:f2:06:
72:12:a2:50:03:d2:02:ab:5d:7f:b6:03:59:7b:eb:
a5:ef:98:9f:2e:76:90:f0:f4:f9:85:b2:42:f3:aa:
c6:ea:f0:9b:8f:bd:78:1f:8f:31:a9:2a:73:bf:fd:
9e:3f:83:a3:11:53:35:d8:9e:ec:bb:61:fb:ed:60:
a7:30:41:92:8d:8f:7f:72:8b:b5:a0:c8:6a:ab:bf:
50:00:b5:6b:23:6a:c3:a6:5c:04:f9:96:02:5e:58:
55:ab:1a:00:28:f4:0b:e0:67:45:13:d4:d3:d5:2b:
11:16:5c:4d:0c:3f:76:bd:af:97:e0:6b:31:d5:02:
0f:fc:e6:be:49:d2:52:cb:94:db:ae:13:3a:1e:db:
8b:4c:8f:40:54:19:4c:20:75:f7:4e:c9:4b:fe:c9:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:AC:7A:B7:76:20:69:1D:AA:8D:4D:A4:A5:7D:B2:8C:6B:77:12
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_gqserd2IGkdqo1NpKV9soxrdxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
87:37:34:1e:44:e5:9c:09:7c:de:a1:0c:4d:b7:e0:83:88:1b:
0a:8f:15:f5:1f:ee:fd:36:33:94:b1:66:f1:89:ac:ac:57:fb:
91:e6:99:9f:3b:1c:e2:c7:ca:f8:7f:f4:c0:9f:a5:8d:6f:8b:
97:29:8d:4a:88:19:74:91:6a:bc:30:99:75:c6:53:9b:4b:2c:
26:b6:3c:eb:4e:e7:6e:86:c0:75:e2:c1:8b:6b:c2:20:b3:fc:
c3:58:fc:8b:ee:5d:31:48:62:ab:2a:68:72:39:94:5f:df:3d:
f2:46:ce:9f:20:cd:6f:2b:bf:40:d9:a2:e1:4f:ce:10:29:b7:
8f:6e:08:13:0e:a4:18:d5:2d:c0:30:4f:82:95:5d:63:1e:b9:
2e:79:92:ac:8f:7c:ce:24:91:26:b5:a1:09:22:ee:7b:08:4f:
88:ac:bd:30:c0:f6:98:0c:cb:b6:95:6e:51:23:c4:f1:d1:15:
d1:00:98:0b:35:09:e0:17:7c:26:99:dd:f1:af:90:e1:db:87:
6f:1e:92:f4:a5:38:a4:39:f3:35:a9:6a:17:6c:a9:2d:ce:b7:
0f:4e:83:8a:25:24:b8:3b:26:44:d2:18:98:1f:75:38:1e:ee:
5c:76:b4:3f:83:9d:86:d3:73:7f:2c:4b:1b:0a:f0:9c:66:ea:
92:d9:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:24 2025 by rpki-client