Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_msDK6F3-134iYsF-74DXy4QChg.roa
File: _msDK6F3-134iYsF-74DXy4QChg.roa (raw, json)
Hash identifier: phgDy4Cu/03d2vI5xzzFYw8M3RmN+espa7vgOvTLUPE=
Subject key identifier: FE:6B:03:2B:A1:77:FB:5D:F8:89:8B:05:FB:BE:03:5F:2E:10:0A:18
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDCC204AE12D8FAEF0E19CD6F2830
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_msDK6F3-134iYsF-74DXy4QChg.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397195
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dc:c2:04:ae:12:d8:fa:ef:0e:19:cd:6f:28:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe6b032ba177fb5df8898b05fbbe035f2e100a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:df:32:ff:7b:58:ff:c5:ad:31:df:fb:ec:
65:94:cb:ef:44:c8:77:26:f2:58:07:bb:2d:db:8b:
64:69:ed:98:e2:45:bd:4c:71:4b:03:67:de:d4:ff:
fb:3d:7a:2c:3e:bb:dc:c7:28:3b:fe:d8:88:93:cd:
42:bd:ff:17:eb:d5:c4:dc:39:52:a8:d3:a2:b1:00:
6f:c3:a5:46:4f:93:54:fa:7e:15:2e:9e:ea:f3:e7:
e7:7c:da:a7:d1:a9:54:d3:3a:1e:97:e2:2e:5e:ee:
9c:98:d1:d3:3b:b5:86:f1:ed:c2:13:9a:d7:8e:6b:
e7:83:14:95:f4:54:84:c0:1c:18:1d:3f:61:f7:db:
7d:3f:d2:5a:da:d2:5d:ba:1b:c3:42:1b:46:ae:dc:
23:d1:b9:ba:b6:17:93:76:f5:9a:df:0e:58:e7:51:
26:82:17:9a:03:9e:ba:e3:2d:f0:60:52:e1:66:67:
a4:11:9b:db:10:cf:06:fb:f2:fe:48:94:2b:77:22:
81:02:ea:d8:84:0b:ca:d4:e7:c2:71:dc:b0:bd:7e:
e0:0c:5a:f5:24:5e:b9:6b:95:8a:2c:fc:cc:69:ac:
30:63:f5:82:3c:d2:db:94:9a:cd:81:50:f8:a8:2a:
78:54:fa:0e:31:e6:04:ca:c9:e9:2b:58:06:de:38:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6B:03:2B:A1:77:FB:5D:F8:89:8B:05:FB:BE:03:5F:2E:10:0A:18
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/_msDK6F3-134iYsF-74DXy4QChg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
77:09:4e:f1:34:63:93:c6:38:b5:05:2a:6c:a4:17:aa:9c:50:
26:c7:7e:7a:2b:75:e0:17:9b:d0:a4:2f:68:7f:71:a7:d2:14:
3b:03:e2:f8:62:0d:55:1c:fc:ef:42:86:23:d1:4e:5c:e5:84:
80:b3:35:07:ad:1c:9d:2b:9d:a9:78:e0:43:a3:eb:a7:af:85:
9e:68:cc:a8:76:39:11:55:f6:72:27:80:5c:2c:b3:0d:35:ed:
15:45:a7:f4:05:97:0e:8f:84:ac:7e:ff:49:00:7f:c4:f5:3b:
08:a0:d5:43:35:0e:f7:8a:76:5c:22:63:27:c3:42:8b:cc:9e:
f1:6d:04:31:39:5b:d6:ee:db:ce:b0:4d:8d:9f:a0:fe:26:23:
81:09:b1:01:47:ea:ed:f5:47:e6:04:0d:35:b4:f0:d7:1b:2e:
cf:fc:01:f2:20:8c:91:d9:a3:2a:9f:74:5f:d1:64:e3:e3:75:
5c:c0:85:72:36:fa:b6:7e:44:bc:7f:84:be:15:a8:d7:47:32:
20:33:00:7c:f1:e4:31:da:39:0a:6f:13:2a:a9:fb:f7:7c:aa:
79:82:4f:7a:1f:3f:bf:65:7b:15:96:bd:21:58:95:8e:dc:62:
52:e6:07:a2:e0:8f:c4:13:48:1d:ff:52:c7:14:79:37:93:5d:
72:37:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:46 2025 by rpki-client