Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ieews8L5gPPH-hCo0ShOV9DQmcA.roa
File: ieews8L5gPPH-hCo0ShOV9DQmcA.roa (raw, json)
Hash identifier: FSJ47+pSAm2IfmvI40clRCmur65yQjSHtGTLac/8Y1s=
Subject key identifier: 89:E7:B0:B3:C2:F9:80:F3:C7:FA:10:A8:D1:28:4E:57:D0:D0:99:C0
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBCC69A2B7FE5DEADDD8B650287E15
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ieews8L5gPPH-hCo0ShOV9DQmcA.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396584
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cc:69:a2:b7:fe:5d:ea:dd:d8:b6:50:28:7e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89e7b0b3c2f980f3c7fa10a8d1284e57d0d099c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:5c:fd:97:a0:33:d8:ea:49:a5:4c:69:99:
b0:d4:4e:47:96:ca:65:13:4b:c4:a5:3f:79:8f:93:
c9:d1:85:29:94:7c:8e:d3:27:77:77:61:98:1c:b5:
7b:2f:0c:5f:31:7a:e0:13:77:f2:2e:e3:57:87:0d:
bf:07:c6:1d:38:7a:a9:ef:46:d8:91:cf:9b:7a:8e:
94:2e:57:81:3b:f1:f2:77:91:11:36:56:c7:c2:dd:
79:45:f8:36:ff:db:e7:78:4a:e5:a9:ed:c8:c9:78:
1b:b7:75:bc:2c:9e:dc:5b:f4:f4:99:d0:66:36:2e:
3c:f7:a5:e6:6e:1a:5a:85:70:63:c8:ca:f1:50:a8:
38:1b:88:fa:aa:f3:25:a1:52:e1:4a:5f:56:60:85:
5f:77:4a:1e:1e:7d:2d:81:af:e9:57:1f:5e:c9:03:
66:3e:3a:6b:bf:75:ca:63:58:46:fb:05:cb:40:d0:
3b:72:52:21:b6:09:82:01:e4:2c:fb:46:4d:55:f6:
f5:3d:c7:1e:9f:96:b5:84:24:b6:c7:3d:be:ae:d5:
ad:94:bf:c3:72:ed:05:57:8a:71:85:72:86:e1:cc:
e2:74:d5:03:6c:57:98:64:5e:d3:76:06:01:28:ad:
b2:f0:66:0f:2f:08:24:9d:61:e7:65:2d:fe:91:6e:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:B0:B3:C2:F9:80:F3:C7:FA:10:A8:D1:28:4E:57:D0:D0:99:C0
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ieews8L5gPPH-hCo0ShOV9DQmcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
67:bb:b9:16:6d:54:6c:a9:94:d4:e9:60:e3:e4:fe:14:8a:9e:
7c:2f:67:dc:3d:34:0c:53:ca:00:e6:4b:96:8f:77:40:a8:21:
bf:56:df:98:54:c7:bd:72:8d:ab:8b:82:7d:a7:ae:30:d2:51:
ed:9f:d1:8f:b5:83:d4:67:6f:10:1c:2f:3b:46:3f:15:a7:5b:
40:5a:84:34:61:36:9f:41:b7:b2:1e:4f:a3:62:66:b9:f0:86:
eb:aa:1d:59:21:94:e7:c8:46:1b:f5:73:b5:33:78:28:77:21:
48:23:f6:61:95:4d:b8:31:99:0d:ff:27:e3:8a:3d:6f:cc:5d:
6e:2b:b1:c2:df:fd:39:a6:1f:d3:93:9e:29:e4:e1:59:b5:94:
38:77:85:29:44:68:d1:35:75:fb:34:3b:86:07:cf:d6:ac:77:
d4:4c:ab:9d:62:b7:63:1b:b8:c8:fc:b5:44:7d:22:8d:05:09:
3d:ef:92:72:7b:b5:85:2c:c5:a0:8c:ef:bf:8a:01:00:cc:3a:
3b:18:f8:c0:26:0e:cd:2a:38:ac:6a:07:d5:e6:9c:b0:b8:77:
6c:4c:2a:cf:d5:36:ce:e7:02:3a:8a:9f:69:84:2f:96:f1:ac:
b9:f0:ae:88:ec:04:0b:63:d9:aa:ec:73:ce:d6:aa:ab:71:20:
e2:d9:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:10 2025 by rpki-client