Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iZTbZvH3KiWH-YyQxZyypGk1Nt0.roa
File: iZTbZvH3KiWH-YyQxZyypGk1Nt0.roa (raw, json)
Hash identifier: zHmiIYIW1L7390+bu6QB73qZtLOYf4nD8spo27GZaGk=
Subject key identifier: 89:94:DB:66:F1:F7:2A:25:87:F9:8C:90:C5:9C:B2:A4:69:35:36:DD
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE21C9FFA9616DA8185773D2C5EBE
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iZTbZvH3KiWH-YyQxZyypGk1Nt0.roa
Signing time: Tue 26 Nov 2024 13:35:11 +0000
ROA not before: Tue 26 Nov 2024 13:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36616
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e2:1c:9f:fa:96:16:da:81:85:77:3d:2c:5e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8994db66f1f72a2587f98c90c59cb2a4693536dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:d5:da:80:cd:96:08:d2:41:d8:06:23:d6:
4f:7e:11:c2:d2:51:da:1c:86:e7:4f:4e:ce:7c:c6:
83:e9:ed:e4:02:d4:1d:2f:5f:ca:8d:fc:83:b9:6e:
cb:ae:54:14:81:09:77:d6:c9:f8:06:5e:10:c9:b3:
27:95:8d:f6:0e:6c:1a:05:cd:de:42:ce:c0:1b:be:
05:04:5c:cc:16:63:f0:ec:1c:19:ad:53:c0:1d:b7:
a4:3b:02:b5:d7:9c:62:73:45:f9:a6:b2:5c:22:53:
24:93:4e:c5:f5:a5:de:55:bd:ef:ac:d6:46:13:3d:
0a:fe:09:c3:b5:72:47:12:55:8f:41:5f:69:bc:f6:
51:75:4d:d4:b9:30:0d:26:37:0c:b4:31:69:d5:10:
41:3d:8c:89:41:64:9f:cd:5b:f7:9c:da:a1:2b:6c:
73:07:1b:9c:b5:a6:a4:0f:31:e3:9d:de:8a:92:e4:
0c:e0:e5:51:dc:a7:cb:39:df:5d:c9:34:c4:45:4f:
0d:ad:ed:8d:1f:21:fa:ab:92:be:6f:ec:eb:89:0a:
45:ac:d8:8b:d0:36:f5:dd:63:19:48:35:e2:d2:a7:
97:01:96:a1:0b:72:9e:44:27:17:57:aa:b9:a6:62:
d3:91:9f:e1:72:b5:78:41:eb:2b:99:d4:1e:49:d7:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:DB:66:F1:F7:2A:25:87:F9:8C:90:C5:9C:B2:A4:69:35:36:DD
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/iZTbZvH3KiWH-YyQxZyypGk1Nt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
7a:fb:01:de:48:28:45:9c:41:d9:fe:4b:25:d3:9f:9c:50:16:
11:0d:d4:0e:c1:03:6c:5e:d0:5b:f5:1c:a5:dc:d5:06:ec:f4:
c7:d8:e9:90:a5:68:ca:0a:47:bc:06:0c:24:35:d2:ca:02:33:
37:a0:5a:a4:f6:51:4d:fb:6d:de:a8:ac:91:6e:c1:b0:2e:ea:
f3:6e:85:fd:94:73:ff:80:cd:d6:fd:2a:52:02:37:dd:81:ae:
43:e5:b5:ec:89:6b:d0:0b:ea:ae:db:82:45:08:3f:1f:a5:95:
20:63:73:06:b5:2c:dd:a3:53:27:0c:84:73:c9:61:18:3e:4d:
a2:b6:a0:ec:15:10:11:0b:37:3e:c2:39:13:6c:4d:18:35:e4:
37:de:4a:22:44:81:a9:bd:f2:52:96:8a:74:fb:19:04:80:84:
99:e3:60:36:bc:36:47:af:02:de:ee:5f:cb:2b:49:4b:12:f2:
e2:d5:f5:06:0b:9f:8c:1f:ef:78:13:ff:2d:99:00:15:b2:4c:
7a:d8:33:fb:86:50:33:3e:00:b1:db:74:62:43:73:26:e6:be:
21:44:55:c3:ea:2b:a1:c0:8a:8e:b0:bf:73:74:b8:3d:6d:7a:
85:47:b0:e9:2a:27:4c:c8:e2:32:6a:51:95:2d:b3:bd:01:ff:
53:74:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:29 2025 by rpki-client