Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/csbt34fuIroBGN0YMonkg0wSQ6s.roa
File: csbt34fuIroBGN0YMonkg0wSQ6s.roa (raw, json)
Hash identifier: GQCZjowKRWRuOCtjJbif99eJyeIx5ZgBvBxb//HWSBE=
Subject key identifier: 72:C6:ED:DF:87:EE:22:BA:01:18:DD:18:32:89:E4:83:4C:12:43:AB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE58A76221FD6A8C598559B920837
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/csbt34fuIroBGN0YMonkg0wSQ6s.roa
Signing time: Tue 26 Nov 2024 13:35:12 +0000
ROA not before: Tue 26 Nov 2024 13:35:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36622
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e5:8a:76:22:1f:d6:a8:c5:98:55:9b:92:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72c6eddf87ee22ba0118dd183289e4834c1243ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:8c:5c:9f:d5:fd:46:0b:d8:6c:19:d4:fb:
c8:4e:5c:10:2e:8a:72:57:f6:fb:0a:b7:69:a4:b4:
6d:cd:23:27:a5:bd:09:f4:74:9f:65:9d:83:b3:45:
38:bf:5c:cd:99:08:cb:92:0e:17:b1:e5:f6:83:e8:
44:d6:fb:20:d5:5a:09:06:eb:69:e7:e0:51:e9:e8:
14:69:3b:bd:17:96:e9:49:0d:8c:38:4c:25:1b:ce:
32:7a:7f:f3:86:a5:61:6a:e3:f8:97:c7:bd:07:f9:
18:bb:3a:4b:c7:d1:07:a6:ed:fd:98:7a:7e:4e:59:
02:b0:4a:23:31:2d:3d:cb:24:91:c8:2a:bd:cf:52:
14:de:f0:09:1a:5d:9c:a1:22:6a:28:05:37:55:9f:
8d:8b:c3:7b:94:d4:1a:42:0d:75:ec:8a:99:0f:b8:
32:e9:0a:29:b6:c3:74:08:2a:d7:a4:50:0e:2c:6a:
f5:70:4c:d2:56:72:94:50:d0:3d:8a:40:45:37:af:
57:5f:a7:48:3e:57:40:e8:e9:f1:30:79:cb:0e:ad:
53:df:8a:6f:54:2a:3e:66:3d:d9:c9:91:3a:6d:b6:
43:f9:51:26:89:8b:98:db:ea:4e:6b:21:f0:5e:92:
3b:de:05:77:9d:cc:3a:1c:94:e6:4a:37:39:89:b9:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C6:ED:DF:87:EE:22:BA:01:18:DD:18:32:89:E4:83:4C:12:43:AB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/csbt34fuIroBGN0YMonkg0wSQ6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
62:35:63:cf:a3:4a:bd:e5:f8:28:b1:7c:98:d9:04:ee:e7:f1:
53:54:59:9d:ea:9e:94:0f:d7:9c:be:80:c3:e4:f5:c8:4b:8b:
38:6a:6b:35:d6:a2:71:3c:1b:14:66:7f:df:01:39:f7:e8:93:
f0:fd:1f:f2:da:3d:36:f1:9c:13:08:6d:ae:05:d9:48:5f:6f:
ab:eb:04:ef:74:e7:4a:dc:1b:48:a1:1a:bb:c7:83:9d:a0:c8:
6e:31:93:63:f5:43:55:5d:72:fc:0b:89:4f:32:f1:83:ff:ef:
a7:4c:3c:9a:15:34:23:d2:0b:c0:1a:d6:d6:3c:ef:dd:24:14:
ab:05:1a:a2:0f:4a:3e:65:6f:0a:08:0e:b5:e5:af:c1:d8:3f:
67:cf:a7:45:50:8d:71:89:99:2d:28:a7:d2:f0:eb:27:6b:50:
ed:8d:4a:2b:27:d0:a1:90:75:44:9c:81:9f:2a:66:b0:e5:43:
b8:85:7f:74:36:a3:77:c7:00:f4:2b:9a:f7:33:d6:6a:7e:1a:
63:2d:28:26:64:f4:b9:bb:dd:2c:6b:53:fd:1e:6a:3b:a9:36:
44:3a:90:c4:e5:da:1a:5e:49:f4:8a:08:da:c3:45:86:38:a0:
f7:5e:05:d3:e0:c3:ea:b2:30:93:ff:44:48:97:68:06:be:56:
e6:4f:d5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:45 2025 by rpki-client