Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/aWbDfHKJvhbC-TbX7-Nygz_EMGg.roa
File: aWbDfHKJvhbC-TbX7-Nygz_EMGg.roa (raw, json)
Hash identifier: qexhQaMtPFJzCvjhOoEXBB4GHZGrXOpnT/2dcFwets8=
Subject key identifier: 69:66:C3:7C:72:89:BE:16:C2:F9:36:D7:EF:E3:72:83:3F:C4:30:68
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF169F8A518226F0180DC0588F8E3A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/aWbDfHKJvhbC-TbX7-Nygz_EMGg.roa
Signing time: Tue 26 Nov 2024 13:35:25 +0000
ROA not before: Tue 26 Nov 2024 13:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397208
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:16:9f:8a:51:82:26:f0:18:0d:c0:58:8f:8e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6966c37c7289be16c2f936d7efe372833fc43068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:11:8b:dd:ac:08:c3:25:ce:6c:aa:00:0c:
d7:64:f5:0f:3a:26:12:71:be:ca:34:88:40:70:7c:
a2:2d:2b:6c:3e:d6:14:e8:64:f2:fa:9c:fc:ea:db:
d9:4b:d5:b8:60:10:e7:de:b6:0b:52:41:8e:74:29:
45:0d:cf:da:1a:c7:1a:ff:61:5b:0a:c0:ac:ad:36:
26:c8:a2:5c:3c:82:e5:62:37:1c:0d:c9:e2:fd:6b:
22:77:d0:ac:78:cc:c9:fb:42:15:0c:34:b5:01:5f:
24:00:4a:47:5c:4a:e8:8a:c6:d5:4e:10:5d:13:f4:
43:ac:7e:c2:d9:54:3a:66:8a:d3:91:2f:27:74:2f:
0e:38:91:32:61:2c:b2:0d:ca:2e:00:70:eb:27:03:
39:b2:f7:8d:ca:21:d8:f8:a1:52:34:cd:81:92:8d:
b4:3c:88:d2:a2:07:79:fc:2b:44:5a:f5:c6:6e:13:
54:97:b2:a2:b5:98:b6:27:00:e9:84:24:7f:bf:c3:
18:b6:fe:db:22:fe:5e:95:13:b5:c3:06:7f:7a:9a:
32:f8:d8:9f:52:08:c8:b8:bd:05:6d:1e:c4:7f:01:
92:24:33:74:88:60:2a:9c:e8:35:d0:e6:7f:28:6f:
d2:87:51:58:0a:1c:df:89:91:bf:e4:1f:cc:ff:25:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:66:C3:7C:72:89:BE:16:C2:F9:36:D7:EF:E3:72:83:3F:C4:30:68
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/aWbDfHKJvhbC-TbX7-Nygz_EMGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
6c:0d:f3:80:e5:b3:8d:0f:92:a1:d8:0c:c8:29:9d:b8:e3:bc:
80:53:bd:69:74:8b:ce:7f:b7:e7:d3:5b:c4:7c:ba:db:3a:37:
d0:fc:ff:79:01:98:89:9e:65:14:5b:5e:a5:dc:98:a7:f4:c6:
11:e9:57:b8:e0:be:f8:1a:5c:9a:4f:26:98:a8:e3:84:03:14:
43:42:e6:f3:a5:f4:77:64:47:43:e8:d9:d9:b7:68:79:eb:1c:
ab:5e:2b:f1:89:66:3b:cd:69:bf:86:1d:35:58:93:6e:cb:b0:
88:72:b3:3a:54:3a:ca:35:1e:f2:8d:b3:2b:2a:91:fd:eb:18:
76:ab:b8:88:ff:46:1b:92:79:bf:75:f8:2a:9f:14:8f:42:7b:
38:fb:43:8f:00:d7:96:f5:c8:f5:e2:cc:e9:34:3e:f7:4c:de:
ed:c2:16:dc:a1:62:eb:68:17:b5:b7:f3:00:a5:80:7b:c9:d2:
76:82:13:cd:56:44:a2:ec:61:3b:c2:83:c5:8c:a1:a4:fa:0b:
e4:e5:61:97:39:ce:1e:03:d5:94:60:3f:f6:9a:b0:fb:7c:86:
d1:d1:a6:cc:79:29:03:3b:97:e1:72:09:9b:d7:a2:a2:b5:0c:
fa:99:87:c0:c7:f2:74:0c:f4:2c:78:f1:02:8d:09:16:72:6f:
f8:6c:df:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:15 2025 by rpki-client