Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hymV5lVWGQ8tfNQ1DWFBpR_LHDI.roa
File: hymV5lVWGQ8tfNQ1DWFBpR_LHDI.roa (raw, json)
Hash identifier: n1+q+Ys5KiSRqlEcku6LTiVgDHSwXbkGsmRyqYHYy9I=
Subject key identifier: 87:29:95:E6:55:56:19:0F:2D:7C:D4:35:0D:61:41:A5:1F:CB:1C:32
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDEC2AD79E1F4281458C020071E6F
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hymV5lVWGQ8tfNQ1DWFBpR_LHDI.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397200
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:de:c2:ad:79:e1:f4:28:14:58:c0:20:07:1e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=872995e65556190f2d7cd4350d6141a51fcb1c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:de:bd:fc:20:48:c4:fa:8b:59:1f:df:c8:
3d:06:6e:dd:68:9a:68:c5:80:79:d0:af:15:3b:ba:
d8:67:a8:da:bb:7d:7f:28:96:cc:5b:80:8a:ff:97:
6b:95:6e:49:3f:13:fb:60:8a:ad:21:9d:1a:2c:d6:
8e:c6:c2:0d:b7:f4:f0:b2:51:7c:8d:1e:ae:9b:f4:
2d:99:2f:5f:f9:ef:a8:a5:f5:a9:27:3b:5f:8c:e8:
c9:c9:4e:40:5e:f2:33:58:a5:c1:aa:73:92:fb:3c:
5f:0c:38:88:5e:9d:43:11:61:13:90:20:24:1f:90:
26:35:32:48:b8:63:01:b3:60:2b:f0:5e:1e:e5:d8:
7a:00:81:47:34:08:74:42:95:61:9c:ca:50:c6:15:
b9:31:a1:b5:30:23:f5:0e:63:7a:55:fb:21:e3:71:
e6:5f:d5:b9:88:bd:79:44:40:ea:13:fa:2e:b2:e6:
61:ad:3d:d0:60:d8:2b:74:02:15:6c:03:7c:60:2e:
e9:d0:5e:37:6f:e2:09:ba:29:6e:d1:57:cb:9f:64:
0e:3e:6c:36:ac:4b:d9:6d:a9:23:6a:cb:50:cf:6d:
57:40:96:c5:c4:8b:79:cf:64:8a:dd:a6:0e:af:05:
0d:6f:c2:e8:29:38:ed:69:a3:57:25:19:7c:4f:84:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:29:95:E6:55:56:19:0F:2D:7C:D4:35:0D:61:41:A5:1F:CB:1C:32
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hymV5lVWGQ8tfNQ1DWFBpR_LHDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
2f:18:cf:8f:48:bc:5a:83:b2:1a:db:a0:d4:fe:20:76:5a:63:
1c:ae:69:b9:62:53:03:58:70:cc:80:94:3c:18:74:fe:61:8e:
d5:77:40:55:4e:a2:7b:18:24:47:39:8b:cf:fa:d9:84:cf:55:
e3:13:9b:1a:53:ee:f7:8b:0d:23:3f:aa:76:a3:dc:59:0e:45:
c9:f1:f5:d2:72:c1:70:33:a6:cb:a8:d2:39:bc:c0:1b:24:60:
ab:f2:07:02:17:76:16:2e:50:c3:39:b7:8c:74:28:b5:64:17:
46:6a:5a:32:b2:d2:1b:50:46:0c:b4:bc:06:28:97:af:f0:92:
29:34:6e:b8:1b:95:39:00:94:99:ee:7d:6b:bd:52:76:05:37:
c8:29:23:ce:92:4b:3d:65:10:c6:c7:ea:83:a3:45:df:46:1e:
26:06:8d:38:98:aa:7e:0e:fc:91:1b:aa:33:c0:55:3d:0f:de:
16:ca:ab:3e:ff:74:c8:07:49:af:da:e9:de:f1:6b:64:47:d4:
27:ed:22:63:17:67:83:a3:03:47:77:e3:5b:84:b2:75:9e:37:
82:57:c7:a4:03:56:db:fc:9e:17:7e:2d:76:8a:88:6f:01:3b:
de:2b:a2:94:86:d8:89:f3:50:33:a7:1b:d0:c0:14:f7:3d:41:
d2:05:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:39 2025 by rpki-client