Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kZXaNQIzt7a-i7DVzVOFbT_cWeY.roa
File: kZXaNQIzt7a-i7DVzVOFbT_cWeY.roa (raw, json)
Hash identifier: T5sr7VQi6KmNXziROQUfFqb9Z7un2OvzmFDWzg3Gbcg=
Subject key identifier: 91:95:DA:35:02:33:B7:B6:BE:8B:B0:D5:CD:53:85:6D:3F:DC:59:E6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB835BC8A87FB90F088875028A741
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kZXaNQIzt7a-i7DVzVOFbT_cWeY.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396542
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b8:35:bc:8a:87:fb:90:f0:88:87:50:28:a7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9195da350233b7b6be8bb0d5cd53856d3fdc59e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:df:0b:2c:1c:50:a9:4a:f4:b0:e0:93:ee:
c4:ad:f4:a1:06:85:71:6c:6a:06:52:ac:9f:cb:c6:
68:36:dd:7b:57:48:c9:c7:28:eb:d6:0c:a3:0e:af:
40:f2:e9:54:80:1b:a8:e3:46:e9:a4:ff:b3:35:14:
72:4a:6c:5c:11:a5:41:75:58:be:31:28:c5:fd:fe:
dc:bb:1f:79:03:cd:a3:03:e2:bf:17:41:d9:8f:a0:
66:8a:83:be:d1:73:04:1f:ed:b5:2b:85:56:19:20:
e5:f4:b8:37:c6:72:83:84:f2:00:3c:07:85:b3:d3:
72:a6:bf:cd:e1:74:66:b6:01:5e:c1:69:8f:24:1b:
8a:84:81:a8:1d:7f:64:ca:02:8d:11:63:4b:4d:d7:
7c:8e:f3:77:56:e5:c0:08:a2:a8:ec:3b:84:3a:04:
c0:71:c0:0d:c3:97:a5:b6:f6:f0:f3:cb:e6:c4:8c:
0a:9c:da:93:73:11:78:c9:30:0e:b3:8c:7f:df:b8:
c1:53:77:f4:04:eb:31:5a:db:bc:d0:09:db:a3:4f:
23:ae:b3:cf:a9:42:c0:8c:06:01:0a:a9:75:08:4a:
6d:47:86:7a:18:3d:13:92:ff:5e:53:86:46:65:83:
e1:46:5d:50:51:23:be:65:1d:5a:49:41:a5:52:88:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:95:DA:35:02:33:B7:B6:BE:8B:B0:D5:CD:53:85:6D:3F:DC:59:E6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kZXaNQIzt7a-i7DVzVOFbT_cWeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
40:f9:43:7e:3d:2c:75:1a:43:69:fa:17:83:9b:c2:40:5c:ba:
1b:a8:88:cc:24:cc:df:76:69:33:1c:9b:31:f7:83:bc:4a:2f:
8f:eb:8d:72:b2:3a:30:b4:ce:7b:39:d3:c6:eb:13:7f:58:7d:
46:77:2b:b4:0d:3a:92:e2:18:78:1d:0f:35:4b:33:0d:26:31:
29:e6:30:05:b5:45:c7:5c:32:37:ea:07:cc:f8:d9:19:3a:cd:
5d:e4:78:07:08:56:9b:fb:e7:d5:1c:d5:ee:64:18:99:90:60:
f2:50:56:b9:7b:47:72:9e:3e:4e:d6:73:f2:e5:57:90:df:87:
e1:66:7d:a4:ad:42:a8:2e:8d:1b:cf:ff:b0:26:d4:d2:9b:f2:
85:d1:7e:dc:ee:c7:a2:90:e6:be:2a:08:f5:45:e6:fb:0d:f8:
7c:ab:dc:2d:84:37:cc:39:f9:aa:e4:80:72:ce:87:e5:3f:a9:
80:3d:e1:c5:8d:07:cd:04:2d:a2:7f:c9:fa:58:1c:ac:88:d3:
7f:01:6c:80:bf:e0:9d:b0:73:11:ad:1c:15:d4:da:d9:0b:ad:
91:ec:d6:e2:33:dd:b5:a1:b9:9c:f8:f0:10:a2:47:9b:a8:65:
ed:15:1b:a8:ae:47:7a:78:bc:0b:da:fc:62:a6:d0:df:9e:18:
68:6a:e6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:32 2025 by rpki-client