Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/d8dWw_LXDSSAaUplQQifp6wg_YU.roa
File: d8dWw_LXDSSAaUplQQifp6wg_YU.roa (raw, json)
Hash identifier: zLKqBEZhClYcv3XoqDDVNGk/5A13jolm6AzMJkOtLrQ=
Subject key identifier: 77:C7:56:C3:F2:D7:0D:24:80:69:4A:65:41:08:9F:A7:AC:20:FD:85
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF9E4C6C85D7C9BCD5966B43ED44A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/d8dWw_LXDSSAaUplQQifp6wg_YU.roa
Signing time: Tue 26 Nov 2024 13:35:17 +0000
ROA not before: Tue 26 Nov 2024 13:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396576
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f9:e4:c6:c8:5d:7c:9b:cd:59:66:b4:3e:d4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77c756c3f2d70d2480694a6541089fa7ac20fd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:de:64:44:47:a0:41:36:8e:75:6d:e8:24:
40:43:44:0f:29:61:e8:81:d7:e7:29:79:b5:19:5d:
b4:34:ae:f9:a1:1e:25:88:ff:81:6a:fe:98:e9:92:
12:3d:56:68:df:60:78:c7:70:8c:18:0b:e4:6c:69:
a0:53:e8:da:2d:6c:0f:85:97:28:95:9d:ce:06:82:
6b:99:56:ec:50:ce:74:1b:ad:c4:3f:6b:3a:6c:bf:
94:e3:93:19:ea:15:9c:f1:ba:28:74:30:8c:e7:11:
9c:2c:82:70:0a:b4:82:23:8d:64:ef:10:80:92:77:
07:bb:98:1f:7f:89:fc:5c:68:20:1f:45:06:4f:7f:
8a:b6:b5:b7:6b:4b:67:4a:4d:9b:90:76:15:f1:7b:
eb:74:03:10:6a:a1:41:55:66:93:23:58:a7:9f:d6:
2c:23:86:8a:ba:12:94:6c:05:8b:5a:0e:8b:e1:0a:
8b:e6:32:9f:14:d8:4b:92:2f:6d:51:b2:ea:50:54:
5d:54:ea:05:ad:32:0d:34:35:4f:bc:26:57:be:01:
ee:55:95:19:95:6d:09:5c:7b:fc:1d:a0:d1:53:f9:
bb:d2:6b:6f:67:84:3e:34:43:28:e5:97:08:01:3a:
09:cf:32:ba:1b:eb:77:56:47:18:76:0b:7c:36:ee:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C7:56:C3:F2:D7:0D:24:80:69:4A:65:41:08:9F:A7:AC:20:FD:85
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/d8dWw_LXDSSAaUplQQifp6wg_YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
04:4a:55:d2:fb:8e:81:71:35:ac:56:36:01:4c:f0:e4:43:47:
28:a2:6d:1c:90:40:b3:23:eb:75:fa:2c:89:ff:a6:c5:de:79:
1e:1d:76:30:04:ff:21:c8:e5:61:44:1e:39:93:cf:58:74:29:
3b:1e:50:ef:1d:17:a8:24:c4:5f:83:b6:6a:db:10:dd:19:e7:
1c:75:b2:cf:3a:b8:0f:a9:62:a8:b3:e7:b4:07:6f:a1:d7:a9:
77:c9:1f:27:9d:23:82:be:cd:34:3b:09:b4:73:21:36:8e:6f:
b2:df:be:20:41:76:61:cd:b8:aa:3e:2f:b4:9f:61:93:ee:eb:
46:ab:49:a5:e9:d5:36:bc:b9:25:99:63:21:2e:78:75:2e:64:
e1:4b:9f:d9:1e:d6:15:70:f1:e4:80:ca:1c:4c:10:19:b4:d6:
06:2d:70:da:dd:a3:8a:8e:53:ac:a1:b0:f4:d6:8d:20:aa:b5:
86:32:7a:d0:8e:1b:06:ab:0e:72:49:c7:c9:70:75:92:09:00:
13:21:56:80:c5:61:a4:5f:02:fe:39:3c:93:5a:e3:78:1b:5c:
b7:9d:c4:84:3b:71:87:8b:65:42:9a:e5:1f:a8:1a:05:b6:a9:
d2:8b:0b:40:9b:fd:02:c2:dc:6c:79:57:04:ab:24:56:c5:01:
72:cb:b2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:42 2025 by rpki-client