Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/lgCwWMJp8lYqr5SWYI6JmbGHSOs.roa
File: lgCwWMJp8lYqr5SWYI6JmbGHSOs.roa (raw, json)
Hash identifier: 8JYDdId4U35gYOkFlrVPX3vyMHMQhI1qzhu2AkK0sgQ=
Subject key identifier: 96:00:B0:58:C2:69:F2:56:2A:AF:94:96:60:8E:89:99:B1:87:48:EB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDC1750CFC38557062346AC4A7C63
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/lgCwWMJp8lYqr5SWYI6JmbGHSOs.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397194
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dc:17:50:cf:c3:85:57:06:23:46:ac:4a:7c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9600b058c269f2562aaf9496608e8999b18748eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:88:da:3b:e0:3f:e7:9c:aa:6d:4f:6e:62:
45:a7:0b:42:2e:a9:18:27:8c:a2:6b:0d:f5:19:fd:
f9:3a:0c:a1:5c:18:23:9b:ee:4c:2a:03:7c:d3:7c:
89:e4:62:52:dd:24:39:9d:d5:99:dc:b0:1f:75:6e:
6d:ec:de:55:43:72:a4:37:ae:d9:6c:8f:78:9d:a5:
ed:bf:f5:09:5c:63:f0:d4:71:5d:07:94:f6:c8:64:
b0:8c:cf:a1:a8:e4:42:00:50:f1:4e:39:75:1d:35:
54:3a:9e:44:c4:b0:e6:1c:86:dd:5b:f9:99:c0:02:
a5:97:6a:16:6a:65:13:40:12:0a:43:c7:b4:38:41:
ef:80:91:62:9d:a7:e9:cd:60:8d:36:00:f6:aa:57:
01:33:54:fc:a4:18:f3:10:f1:7e:18:de:dd:78:d0:
c7:c5:a5:f4:cb:aa:5d:59:cc:47:78:10:1c:01:4d:
9f:b2:f0:cb:31:71:da:d5:da:d5:e2:6b:51:73:d8:
56:b9:64:52:27:f5:a0:8e:62:e1:44:25:95:bc:ca:
de:96:50:84:1d:11:51:82:38:58:a6:15:8d:9f:a1:
8b:c7:3b:dc:e8:3f:1f:40:49:19:0b:a5:e2:f3:bd:
a9:fe:11:27:48:68:9e:e0:8f:b1:b2:3b:40:34:c2:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:B0:58:C2:69:F2:56:2A:AF:94:96:60:8E:89:99:B1:87:48:EB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/lgCwWMJp8lYqr5SWYI6JmbGHSOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
72:3b:40:ea:7b:7a:c7:b4:95:d9:31:59:16:55:f2:04:38:1a:
59:55:ee:c0:45:74:4c:59:ef:2e:ae:5b:a0:06:da:17:21:12:
13:cc:0a:98:28:28:18:b5:5a:42:4d:56:d2:0a:ac:aa:d9:00:
3b:0b:a2:b8:2c:60:d1:81:41:12:d1:38:2f:f6:b0:c8:82:39:
94:e3:6c:99:5c:62:34:26:c4:9b:a3:7e:b9:3a:4b:99:6a:ce:
f2:dc:41:a3:58:ae:62:cf:0f:e4:9b:0a:6b:b6:7b:b6:9c:d1:
77:1e:34:0e:d4:9d:21:ce:3a:ff:78:55:79:eb:16:d5:1a:5a:
65:d0:0d:07:74:67:c2:be:60:02:3a:37:1b:bd:d1:62:ad:1d:
ba:9a:af:9d:45:a7:6d:da:ed:f6:52:9a:96:16:2c:e5:3d:90:
d7:81:f9:8b:a4:db:6d:5e:6a:7b:2e:1f:f3:85:32:2d:f5:4d:
e0:a3:a4:0c:3a:f9:ba:fb:44:11:7a:90:bb:37:dd:ab:48:15:
2a:d3:8c:a0:2f:3f:ce:5e:6a:26:b4:45:0a:f0:a5:42:e5:1c:
97:4a:f5:67:d0:46:97:80:82:e1:ae:d8:88:7b:86:06:0b:a8:
69:d9:17:3a:c1:99:33:2b:7c:20:4a:b1:f4:4f:7c:e8:18:80:
ae:a8:f9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:04 2025 by rpki-client