Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ck8Mi4CRjFSHFfTAx2ev6REkmSg.roa
File: ck8Mi4CRjFSHFfTAx2ev6REkmSg.roa (raw, json)
Hash identifier: 9Sv/q9XKweHgUtXcsQ5rlV6i84kS7hdKkL7RDihTMEA=
Subject key identifier: 72:4F:0C:8B:80:91:8C:54:87:15:F4:C0:C7:67:AF:E9:11:24:99:28
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB73B07C276065B38D36E7AD113AA
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ck8Mi4CRjFSHFfTAx2ev6REkmSg.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40717
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b7:3b:07:c2:76:06:5b:38:d3:6e:7a:d1:13:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=724f0c8b80918c548715f4c0c767afe911249928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:05:3e:06:f1:3d:70:cf:2b:db:1b:80:ed:
c4:d1:d9:ba:ef:c1:b4:5e:2a:b4:64:2e:9c:67:d8:
33:8e:c7:00:68:b0:28:e3:dd:2c:18:b0:74:55:60:
d1:37:46:e4:d0:8d:c2:f7:55:03:10:f1:dc:1b:fa:
68:1d:ef:9c:63:16:77:66:de:e8:88:f0:b2:a0:d2:
47:0f:5d:00:a1:58:1d:4b:70:30:8a:97:c0:ef:fd:
80:3b:88:ed:02:47:53:c0:95:a1:ab:cf:2c:95:b9:
27:10:cc:c5:7d:ef:d5:2d:28:4b:95:d6:59:f4:10:
79:e7:d7:66:7b:17:91:85:e2:89:20:aa:0d:8a:07:
7f:3a:97:ab:e0:57:d4:b2:64:99:59:56:55:2f:1d:
c0:2c:d8:77:ff:56:f3:0a:8b:0b:a3:7e:2a:4f:60:
29:63:da:3c:c5:5b:9e:43:fe:c3:a6:84:a0:3f:22:
bb:d4:34:d2:2d:40:e7:69:e2:ee:94:38:87:c9:f6:
23:81:61:15:4d:3b:49:43:9b:02:3a:e5:b3:4c:24:
f1:16:88:ac:1a:54:ab:fd:cd:ae:d1:1b:c0:82:3f:
57:98:81:0e:00:48:43:12:f3:4e:b5:5c:b8:51:11:
ba:4a:ce:e4:e6:17:ac:6a:41:eb:a1:7b:4e:b4:79:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4F:0C:8B:80:91:8C:54:87:15:F4:C0:C7:67:AF:E9:11:24:99:28
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ck8Mi4CRjFSHFfTAx2ev6REkmSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
09:45:6b:12:9f:17:4c:81:20:ba:4c:12:f8:9f:aa:28:66:ea:
37:f3:a8:be:37:77:05:40:f1:80:af:96:62:65:30:f1:98:62:
50:8f:26:30:7d:b8:6b:aa:77:64:e0:c2:0e:bd:55:56:e5:1f:
91:97:37:2b:94:98:a0:02:6f:93:26:a2:dd:32:f2:d7:5a:b7:
02:9e:dd:27:d6:22:77:ad:b4:2c:c3:bf:43:cd:29:02:e3:85:
44:21:30:a6:ba:7e:72:b1:23:d6:14:b2:d8:ca:cd:3f:ee:25:
75:9f:f7:e2:f1:68:38:cc:8e:bf:31:34:34:66:61:68:57:98:
96:4c:29:8b:c7:8c:b9:8c:60:09:29:7a:16:9a:86:80:73:67:
5d:f5:4d:83:75:6c:c7:2c:52:ec:2d:cb:62:98:61:29:b8:c3:
b5:58:50:e2:16:3c:25:29:21:d4:ab:cc:f1:af:6f:7c:44:6b:
d2:df:18:56:b1:33:d3:76:cf:71:40:1a:dc:9b:a9:28:0a:21:
7b:5c:23:25:d9:97:b6:5e:bf:69:e2:18:ec:14:eb:c8:dc:43:
7b:bb:72:3a:30:e8:8e:38:f5:b3:21:4b:0a:c8:8d:14:36:37:
e1:32:f4:4a:1d:02:b8:8d:c8:5e:5c:42:68:cc:1a:fd:95:57:
fa:c4:f1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:50 2025 by rpki-client