Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mmxxFSV7rnN9VXoOl-PZUVCMGYc.roa
File: mmxxFSV7rnN9VXoOl-PZUVCMGYc.roa (raw, json)
Hash identifier: +jilYOU8eroBA6SIf4Gn21WbvCkN0pq6K6zUrkAVJMA=
Subject key identifier: 9A:6C:71:15:25:7B:AE:73:7D:55:7A:0E:97:E3:D9:51:50:8C:19:87
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDCEE3631F98AA03965AE0EC42156
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mmxxFSV7rnN9VXoOl-PZUVCMGYc.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397196
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dc:ee:36:31:f9:8a:a0:39:65:ae:0e:c4:21:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a6c7115257bae737d557a0e97e3d951508c1987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:ea:e7:b0:9a:3a:64:92:38:cf:42:a4:04:
ca:6b:53:a4:22:39:59:83:ad:62:d5:f4:09:25:87:
36:fb:12:5b:1e:c2:5b:79:c0:9c:50:e1:0b:ab:ca:
5c:21:73:79:d3:2a:79:54:30:4d:ce:35:49:b5:d9:
1e:2e:bc:75:22:26:57:47:13:24:63:b0:07:91:d0:
ca:1b:9e:1d:10:7d:c4:f2:54:75:02:72:89:c8:2f:
99:03:c0:36:ae:56:08:cb:2c:56:36:59:ac:09:35:
5f:dd:ae:b3:bc:f9:42:ed:7a:13:7b:2f:f8:85:1b:
91:bb:41:35:bd:75:70:f0:7e:85:86:e6:bf:de:6c:
d0:43:49:6b:f1:4c:ee:f7:f7:69:d5:14:63:a5:10:
78:c9:1b:da:c0:ad:d8:14:98:d1:69:23:e7:ce:a9:
79:6d:8c:c5:96:8e:60:78:7b:3f:ae:25:1c:8f:75:
5f:94:00:b0:db:55:ed:f9:53:1e:5e:28:56:10:42:
cf:15:c9:4f:e7:25:25:ee:90:ba:48:cc:a7:f3:63:
40:54:1d:55:c6:19:45:5e:30:a3:db:c3:a1:7b:4c:
e3:e6:5a:bc:ed:d5:a6:4c:2c:dc:88:29:07:d1:44:
cc:8e:03:47:7e:9c:27:fd:bd:91:9b:ac:4d:da:6e:
c5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:71:15:25:7B:AE:73:7D:55:7A:0E:97:E3:D9:51:50:8C:19:87
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mmxxFSV7rnN9VXoOl-PZUVCMGYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
0d:8e:95:97:8b:06:28:1e:d8:d7:12:a3:ed:50:59:a6:af:8a:
34:2d:b5:52:01:c3:19:9a:c2:fa:cf:12:8d:1e:3f:ba:a5:bc:
9e:3d:ce:2c:cc:7e:15:ab:91:53:a7:aa:35:f7:91:4c:f5:45:
64:c0:c2:88:8f:fb:92:d1:82:84:fc:55:a7:b3:00:5a:2a:bc:
be:d6:44:55:bc:85:10:db:30:85:b7:15:b2:89:ae:11:3c:04:
83:ed:09:7a:5f:9b:d9:85:ab:f9:45:b1:ab:63:71:b5:f2:dd:
68:d0:cd:65:4a:80:1c:93:1d:92:f0:e3:ac:75:c5:6c:d7:31:
d4:57:56:52:57:fe:df:28:e0:71:9c:27:0b:8b:2f:46:b2:8a:
60:b7:c4:0e:cb:12:55:de:b6:4e:b4:31:5b:ad:de:e7:3f:ef:
fc:c9:ba:4e:34:38:18:8e:12:ee:aa:5d:d6:9e:c8:0a:a7:41:
3b:35:b5:e1:5e:43:64:01:85:44:c5:68:e0:7a:02:d0:85:db:
dc:ca:c2:be:1a:f2:a8:33:aa:ae:44:ca:64:aa:ba:fe:5a:45:
0c:ee:d9:31:66:46:73:44:83:88:f6:a4:00:02:8f:c5:09:86:
5f:90:3d:61:bd:49:7b:16:80:d5:d3:d4:33:e0:d1:10:14:0e:
9f:00:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:13 2025 by rpki-client