Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ilvz6NPxCjY_aKKYZ74YwX28F3A.roa
File: ilvz6NPxCjY_aKKYZ74YwX28F3A.roa (raw, json)
Hash identifier: 5WxGgTuOtprXmgyD4R/rlcEj7YMvIyXUhPfonbmzElM=
Subject key identifier: 8A:5B:F3:E8:D3:F1:0A:36:3F:68:A2:98:67:BE:18:C1:7D:BC:17:70
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF170437BAFB0DD9E8194C87E2C12C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ilvz6NPxCjY_aKKYZ74YwX28F3A.roa
Signing time: Tue 26 Nov 2024 13:35:25 +0000
ROA not before: Tue 26 Nov 2024 13:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397209
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:17:04:37:ba:fb:0d:d9:e8:19:4c:87:e2:c1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a5bf3e8d3f10a363f68a29867be18c17dbc1770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:c1:47:57:19:a5:94:a2:cb:b3:dd:5e:d0:
5e:09:d0:fe:b7:e0:e4:f7:55:fa:29:79:68:cf:31:
ed:6f:24:c1:55:42:0e:cf:63:35:68:3f:73:ff:f7:
9b:e1:14:31:31:fe:93:1e:20:0f:36:60:f6:62:fa:
02:0c:5a:2b:bb:27:2f:e7:7d:e3:ba:0d:ef:b5:e8:
af:bb:17:77:f6:08:ed:13:37:16:36:a3:24:1d:01:
d8:e4:9a:ef:8d:d8:bb:04:80:46:eb:3c:f4:69:92:
f1:4f:c8:21:89:b8:2a:3f:3e:39:32:2e:77:d4:e0:
be:fc:7a:03:df:15:cf:7b:4f:de:fd:cd:d6:b3:90:
e3:f1:18:cb:38:64:03:b4:59:30:24:60:49:a2:31:
32:ce:50:81:ef:20:50:ae:ac:df:50:27:dc:12:71:
e5:e9:d6:17:48:1b:e5:28:16:df:9e:a0:39:43:1d:
c1:1e:a2:b5:1e:9c:3b:73:be:99:4f:e1:cd:f3:12:
a4:68:06:ed:f6:a8:ee:fa:13:79:47:b4:cc:90:90:
bd:96:06:f4:db:44:92:b3:56:68:40:16:84:fd:e4:
fd:a5:f5:2a:ed:a3:d5:70:4b:4f:69:33:0d:1d:dc:
d2:17:37:2a:0e:d8:39:59:01:b4:14:50:70:eb:48:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5B:F3:E8:D3:F1:0A:36:3F:68:A2:98:67:BE:18:C1:7D:BC:17:70
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ilvz6NPxCjY_aKKYZ74YwX28F3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
b7:af:1c:ef:8d:ba:5f:bc:ec:81:37:38:54:11:b1:51:84:fe:
06:18:85:52:ad:a9:54:37:35:78:a2:95:da:37:0f:d8:35:98:
ba:f0:76:01:bc:08:24:ea:6a:40:1f:a1:30:f0:bf:49:f7:c8:
0e:c3:95:26:42:92:f3:2b:66:b6:6f:bb:06:73:54:72:10:2c:
83:93:d1:77:6c:97:bb:20:5b:18:54:f7:76:35:2e:ea:22:07:
59:2e:d5:be:52:ee:08:13:21:a3:aa:3c:52:f6:ac:47:7d:37:
99:38:1e:e5:06:07:ee:87:a1:13:39:d1:73:7c:ed:48:71:12:
e9:93:e1:fd:b1:d0:74:ee:4f:01:7d:93:4e:2b:23:b8:36:29:
5d:23:e0:91:c0:72:74:60:0f:39:17:1a:a4:d4:ed:a8:ff:f1:
c4:8a:0e:00:81:37:16:3e:e2:06:3b:ae:df:67:ea:f3:c7:d4:
bd:8f:c7:d5:92:07:d9:02:96:a5:ba:4c:82:03:05:29:6d:1a:
a5:78:31:fb:50:b9:ee:6f:b7:d0:c5:e1:1d:fa:0f:cf:57:20:
86:45:54:ae:0a:9e:b8:e7:9a:a8:64:c9:97:19:65:b2:9a:8d:
d2:ca:6b:dc:7b:88:97:f3:b2:b9:97:b9:bc:da:0f:cd:65:da:
fa:d0:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:05 2025 by rpki-client