Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/m9HZ1XV68lgHm-EEvc4O6CmBFX0.roa
File: m9HZ1XV68lgHm-EEvc4O6CmBFX0.roa (raw, json)
Hash identifier: hjHBXMBgpzfTy5T1HzlkQCjFMW4t40lSlnnu9TeBF/A=
Subject key identifier: 9B:D1:D9:D5:75:7A:F2:58:07:9B:E1:04:BD:CE:0E:E8:29:81:15:7D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC17A89C41A8C8AF0338737E1C50C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/m9HZ1XV68lgHm-EEvc4O6CmBFX0.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396563
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c1:7a:89:c4:1a:8c:8a:f0:33:87:37:e1:c5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bd1d9d5757af258079be104bdce0ee82981157d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:d7:74:ad:5f:3f:fa:c4:7a:a9:04:bc:85:
7d:56:b8:12:7a:d6:8a:29:ba:4a:6c:22:00:00:cd:
a2:c8:df:0a:fa:63:40:89:39:9c:08:4c:d5:65:fb:
01:19:2e:45:61:f4:74:5d:60:97:de:c7:bf:aa:5a:
5a:7a:54:ca:7a:91:e4:21:79:f4:fe:c3:f2:9e:99:
f1:fc:dd:7b:58:f3:02:b3:8c:e1:93:da:41:55:ad:
22:e8:32:9b:5f:c0:65:72:ed:47:7a:44:00:85:a3:
a9:52:24:eb:fb:ae:38:6c:60:07:d9:5b:32:32:8f:
6d:8f:e5:a7:4f:f6:92:74:3b:77:ac:16:24:8f:f0:
4b:35:e2:d3:a3:13:5c:4b:a8:65:2e:b3:f9:ca:63:
7f:a1:d9:9a:a7:82:a3:00:d4:8f:30:e7:d8:49:01:
b2:c1:0f:82:d9:cb:3c:21:f9:3e:2f:31:67:7f:00:
3e:98:d3:a0:e6:44:9e:7a:a1:e9:bc:83:81:23:21:
40:55:8d:6a:92:0f:32:98:3d:63:98:cc:9f:e9:68:
cd:5b:e9:91:8f:8e:11:3e:67:78:8d:f9:32:df:9e:
d7:44:43:25:50:97:2d:56:ed:39:5c:4f:f2:e9:17:
47:87:f8:c7:c9:cf:28:25:a6:b4:2a:ba:a7:e4:d6:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D1:D9:D5:75:7A:F2:58:07:9B:E1:04:BD:CE:0E:E8:29:81:15:7D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/m9HZ1XV68lgHm-EEvc4O6CmBFX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
63:aa:4d:d4:72:93:07:cb:cb:93:e4:49:bd:4b:61:ff:2e:25:
1e:e1:2a:55:b7:89:ff:be:42:a9:d0:d2:ec:af:31:7b:a7:09:
00:f6:c6:ec:21:41:8e:2a:2a:5f:2f:72:bb:3d:50:11:db:1b:
fd:6d:8d:74:4a:cd:83:44:6c:1c:3d:31:7d:e7:70:46:b7:ab:
41:d8:74:7e:ed:33:ec:46:5b:e2:ce:9f:b3:9d:0e:04:d1:f6:
f2:4f:65:96:87:7e:61:74:84:50:b8:f9:e2:9d:e1:71:06:46:
97:d6:41:24:bd:53:3d:d6:94:93:a9:df:cf:23:10:f5:ee:e2:
b0:96:c4:4b:33:ca:d3:1c:01:d8:87:2e:05:3f:3a:63:84:8b:
52:ae:0f:ab:80:40:20:1a:d7:c5:2d:52:1e:3b:ef:9b:1a:db:
49:e1:a0:52:95:38:a9:d2:6c:9f:b3:89:5c:97:69:fc:37:ee:
0d:5d:bc:de:aa:0d:ae:68:99:80:58:15:25:70:cf:1d:a6:e4:
c4:71:31:ee:58:5b:e1:28:d6:9e:ef:db:ec:4a:06:fb:b8:96:
79:87:dc:43:c3:ac:ea:e6:31:e6:3d:80:ed:c8:ab:e1:b5:b9:
21:44:97:28:6b:2d:f1:22:0c:b7:2e:a1:02:48:22:f1:39:d9:
a7:70:2c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:32 2025 by rpki-client