Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/pkYA-4E1An0H5mdTspWpi2LZEH8.roa
File: pkYA-4E1An0H5mdTspWpi2LZEH8.roa (raw, json)
Hash identifier: BuV9pgyDPueaSdLc6VGW2qmMGminHJin7efL2w2r6zY=
Subject key identifier: A6:46:00:FB:81:35:02:7D:07:E6:67:53:B2:95:A9:8B:62:D9:10:7F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBE2ED36354E2A7D6D0A4AE31F9725
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/pkYA-4E1An0H5mdTspWpi2LZEH8.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397209
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e2:ed:36:35:4e:2a:7d:6d:0a:4a:e3:1f:97:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a64600fb8135027d07e66753b295a98b62d9107f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:e6:f0:02:74:0b:c1:f9:52:cc:d5:c7:66:
53:6a:67:e7:df:3c:ec:a1:7c:2b:ad:87:15:a4:73:
80:cf:79:2d:da:a3:39:c2:20:f5:3f:43:8c:22:dc:
8a:a9:e3:e1:81:a6:ec:3a:c6:eb:b2:58:bc:d1:66:
2e:71:18:9f:a9:05:1e:eb:16:92:64:17:b5:3c:25:
1a:5e:c2:1c:bb:07:b9:ca:88:eb:8b:e4:09:13:11:
19:1b:55:68:e1:13:c7:d6:c1:18:a3:c6:02:4e:77:
af:7b:95:46:80:fe:ae:cb:5e:bd:eb:ce:98:5f:c8:
d6:5b:4a:87:69:fb:c5:6a:e3:df:5a:4a:79:10:65:
ef:9f:32:63:a4:91:21:0e:a7:9e:25:7f:cb:39:53:
fa:ba:d7:6b:75:09:ae:4c:0b:b1:9a:1b:fa:52:1c:
76:11:4b:63:ea:0d:f5:1a:02:6f:07:08:8e:2e:df:
3a:08:a6:32:22:15:ad:84:3d:57:15:e8:95:98:fc:
ea:5b:40:23:31:ef:7c:53:1e:67:1c:1a:61:c8:ee:
de:44:37:49:9f:29:f2:0c:e5:f2:76:da:36:34:3c:
37:41:d2:d1:24:8a:a0:84:47:19:02:16:09:ac:e3:
d8:3c:5f:29:ab:7b:e2:9a:74:b3:da:d5:b9:78:23:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:46:00:FB:81:35:02:7D:07:E6:67:53:B2:95:A9:8B:62:D9:10:7F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/pkYA-4E1An0H5mdTspWpi2LZEH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
9f:b3:bf:e0:c1:8b:1b:0a:36:82:f4:69:ec:db:ce:75:dc:4c:
6c:a3:9b:b5:27:19:9a:58:5b:97:c2:ab:26:9c:f5:ba:81:98:
7c:96:ef:d0:ca:2d:2e:35:a6:e6:84:dd:9e:39:76:42:e4:31:
75:f4:1d:58:07:d5:22:95:33:cd:33:88:d7:35:b3:7f:0a:72:
50:f0:8c:e0:f7:7d:2e:7e:dc:af:9d:af:0a:ca:c9:ae:a4:73:
62:09:c1:f2:dd:4c:af:2a:81:1b:b6:49:8c:d1:70:75:d9:d1:
74:29:53:d7:98:95:20:fc:f1:0d:e9:df:ec:8f:0a:37:b1:a9:
c0:2f:0a:18:12:0d:3c:92:27:ab:85:cd:f2:5c:10:e2:5a:b5:
bf:3c:c5:a6:a3:f6:dc:74:e7:06:5d:ed:17:fc:2c:51:97:0b:
7f:99:d7:ff:d1:42:c7:ac:f3:21:c3:87:1d:c7:a1:d8:ec:03:
d5:13:26:d7:24:5c:ae:f3:13:33:da:a3:13:e2:c4:93:24:c3:
ff:3b:20:fb:17:a3:f1:63:9f:90:45:b3:b4:e7:10:64:97:8f:
84:d9:7e:f7:bc:cc:6a:43:2d:cb:12:f0:5b:15:85:dd:a5:0c:
3f:84:86:39:9c:c9:97:dc:1c:0b:6d:34:2e:5d:70:28:de:d5:
06:93:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:47 2025 by rpki-client