Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/heXcHnyufUDpHRBxX7FG_7WO6fQ.roa
File: heXcHnyufUDpHRBxX7FG_7WO6fQ.roa (raw, json)
Hash identifier: MoRRJg7RN2JYbsCOO+jxDBEPT21jUiuPKLk0kY1OBxk=
Subject key identifier: 85:E5:DC:1E:7C:AE:7D:40:E9:1D:10:71:5F:B1:46:FF:B5:8E:E9:F4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD0857EE1A0B797242E63192CEF21
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/heXcHnyufUDpHRBxX7FG_7WO6fQ.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396594
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d0:85:7e:e1:a0:b7:97:24:2e:63:19:2c:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85e5dc1e7cae7d40e91d10715fb146ffb58ee9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:e1:ea:73:9a:06:11:58:14:74:a6:c9:5b:
bc:53:4e:67:44:6d:e8:ec:3d:40:bb:16:d0:82:a9:
28:e0:97:55:d4:b5:79:ef:17:7e:35:64:f6:db:07:
3a:06:b7:67:1d:ca:b5:bb:e5:fd:87:61:ad:df:6b:
ef:6a:42:cf:4c:57:b2:8e:5a:13:d8:c9:6e:56:19:
f0:63:da:37:29:05:34:91:ae:e5:81:68:f4:38:21:
5a:62:96:23:41:d0:34:0e:c0:81:ae:e3:80:ce:5b:
49:9f:d7:c3:6c:d6:af:ff:49:85:4e:f0:39:aa:86:
b3:bf:27:68:84:9d:3e:39:59:ed:a9:e0:c8:d3:ea:
66:37:7e:9c:00:f2:bd:20:76:9c:f7:2e:d7:86:1c:
6d:be:0e:a6:e9:f7:58:ac:a2:c6:28:72:bc:2b:25:
70:3d:5b:e9:68:e9:44:a9:dc:bb:6e:06:11:8d:44:
98:fb:bc:47:87:70:0d:a5:5c:bb:5c:32:9c:09:68:
9b:3f:bc:cf:6c:4a:2e:e8:55:0a:94:cc:eb:07:87:
60:47:7b:eb:6a:82:02:f8:65:8b:d8:50:ab:01:a4:
75:00:ff:6c:9d:11:29:b9:29:0b:8b:74:ae:e3:c4:
ca:6e:8b:31:42:09:5d:96:1f:b0:37:08:d8:0e:aa:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E5:DC:1E:7C:AE:7D:40:E9:1D:10:71:5F:B1:46:FF:B5:8E:E9:F4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/heXcHnyufUDpHRBxX7FG_7WO6fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
58:7d:9e:4b:41:d2:24:9a:56:73:e3:e9:89:47:1d:85:46:c7:
bf:4d:33:04:f1:98:e8:c8:e2:d1:e2:6b:9b:10:e6:44:e0:9f:
2f:f7:01:22:17:21:7b:6e:d1:3b:6c:7f:dc:4c:78:02:35:b2:
2a:56:d9:4a:14:89:c5:c7:0f:b5:ed:b7:9e:37:fe:64:d4:bf:
97:a4:1c:b1:be:3b:ad:6b:95:e8:e7:c0:3b:df:2c:1a:6d:61:
4a:25:b9:3e:85:e1:4f:5e:05:21:fd:ac:f5:e4:64:df:75:d4:
0a:59:28:78:69:50:f1:4f:9d:3a:ac:23:37:c0:9d:a3:63:58:
b6:f5:4d:06:91:95:55:1c:7d:d1:41:bc:35:88:92:95:18:46:
55:c9:f9:0f:fb:2e:de:b6:c1:6f:79:7a:3d:5a:0a:1a:6b:31:
95:7c:c3:55:60:1b:2b:59:5f:f0:ca:a7:48:ef:d5:c0:4c:d5:
dc:c3:b0:c3:d1:bc:1c:47:3f:06:ee:b5:44:ae:0b:be:c8:39:
c4:ac:f5:a8:3c:a3:42:7f:5e:de:82:30:4f:07:9a:87:0e:07:
fd:76:a5:66:33:be:82:72:35:1c:aa:08:6b:63:c1:fc:77:d7:
96:38:b5:78:5e:3e:ad:2d:98:4e:0c:bf:29:dc:89:e4:d2:a5:
cd:05:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:56 2025 by rpki-client