Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jeAtmrgaircDoU_vI1GxpclRtSs.roa
File: jeAtmrgaircDoU_vI1GxpclRtSs.roa (raw, json)
Hash identifier: WN9X+Q1eu0yj3LXkry/coRXtCUFrqE7qwHYoptDrt7U=
Subject key identifier: 8D:E0:2D:9A:B8:1A:8A:B7:03:A1:4F:EF:23:51:B1:A5:C9:51:B5:2B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB2FDCE2FDEDAF641AAFAF3DA89AA
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jeAtmrgaircDoU_vI1GxpclRtSs.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36625
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:fd:ce:2f:de:da:f6:41:aa:fa:f3:da:89:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8de02d9ab81a8ab703a14fef2351b1a5c951b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:88:d5:61:fa:c9:2f:34:55:e1:63:57:93:
ae:65:72:b0:59:dd:e4:0c:c0:34:02:70:a2:2d:42:
3f:9b:f2:69:e8:18:80:b1:2f:cc:4c:32:01:a2:de:
ae:5a:e1:94:11:ed:b7:b6:70:20:4c:e6:ad:89:e0:
13:7b:ae:74:a4:b1:92:86:91:4a:87:83:87:9d:30:
87:00:2a:45:51:ea:45:4a:04:98:6b:ed:79:f9:79:
60:4d:89:7e:5d:34:cf:45:f1:b4:0a:6c:1f:7f:a6:
c8:d9:5e:34:df:1c:a9:d5:2a:a3:fa:56:eb:e2:65:
16:9c:c4:99:71:18:55:5e:54:1d:c3:03:9b:a1:68:
c0:05:ce:fc:81:1d:00:a9:94:45:7c:a7:ab:18:43:
d9:b8:f9:76:62:2b:a8:59:5c:c2:fe:4b:46:3a:db:
50:36:5f:e9:a7:4e:85:fd:36:3d:58:30:5e:84:dd:
f5:6f:5e:2d:de:06:bc:46:74:88:26:e5:d4:09:17:
04:ec:f9:05:01:81:92:40:b2:53:d7:15:f3:2b:c4:
de:e6:52:06:5b:32:c7:b0:a9:65:21:b2:16:64:49:
dc:8a:d5:5b:a1:ec:88:cf:df:5c:21:1d:de:a6:6d:
89:99:2c:01:b3:ca:3a:40:04:a8:3d:6b:ec:80:0c:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:2D:9A:B8:1A:8A:B7:03:A1:4F:EF:23:51:B1:A5:C9:51:B5:2B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jeAtmrgaircDoU_vI1GxpclRtSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
22:55:35:79:66:4d:1e:b3:78:ad:d0:4f:0c:4b:9c:87:e6:54:
dd:d1:64:1d:cd:c1:6d:71:ec:11:85:60:24:c8:a9:40:32:04:
bb:7c:eb:5c:38:35:19:66:55:8c:fd:4c:08:6e:74:0b:4d:2f:
36:d5:39:34:72:3a:36:06:c9:78:10:7f:79:65:80:56:f2:03:
7e:79:36:ef:fa:81:54:9d:25:a1:42:c8:93:94:e1:74:87:52:
ce:47:68:7c:52:42:e0:7d:ef:b5:76:2b:37:34:28:89:64:6a:
54:4f:5b:19:ec:f5:8e:b3:37:0b:2e:9b:71:3c:fa:66:68:f9:
a5:44:28:8e:d9:33:b4:4e:e0:2f:65:fe:7f:c3:d7:ed:5d:73:
c2:4c:b9:8e:e8:83:47:cd:db:d3:f1:f6:54:f3:c6:b5:c4:21:
81:90:00:a0:9b:d7:21:1c:f6:ee:9e:0b:20:04:1a:dd:b7:b6:
9a:da:a2:b4:79:d8:c1:f2:4a:cf:5d:b9:e4:39:e5:5a:d8:8d:
9d:f3:25:e3:a5:04:ab:cb:c8:81:1d:b9:a9:c0:b5:65:86:2e:
ff:2d:77:c1:7a:f8:30:79:28:8c:eb:b1:0b:e4:82:a8:b1:12:
1e:1d:8a:a6:72:11:1c:57:80:0b:42:1c:89:96:ce:bf:88:a5:
12:21:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:55 2025 by rpki-client