Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qguert7r0VLN6X_TrBlH7Fe6uaM.roa
File: qguert7r0VLN6X_TrBlH7Fe6uaM.roa (raw, json)
Hash identifier: zvjEWMhjmTbxJdQodAGzC2P50AeYoxPbleVyjjFeE2Q=
Subject key identifier: AA:0B:9E:AE:DE:EB:D1:52:CD:E9:7F:D3:AC:19:47:EC:57:BA:B9:A3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0CA03E66BC75D25682C82CAE0659
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qguert7r0VLN6X_TrBlH7Fe6uaM.roa
Signing time: Tue 26 Nov 2024 13:35:22 +0000
ROA not before: Tue 26 Nov 2024 13:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396615
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0c:a0:3e:66:bc:75:d2:56:82:c8:2c:ae:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa0b9eaedeebd152cde97fd3ac1947ec57bab9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:34:77:45:5a:87:b7:ba:2a:b7:2d:42:d6:
d2:13:fe:b1:63:f8:b6:6e:97:bd:40:38:fe:1b:ab:
54:04:d0:33:46:46:7e:43:56:aa:ea:22:41:47:08:
2b:0d:1a:c4:8d:88:91:ac:9a:d8:ca:3b:68:e7:8b:
43:c5:bc:b8:33:d6:b4:42:36:18:ae:bb:45:ff:05:
12:64:00:e8:c1:d0:51:f7:32:46:bb:42:89:27:85:
a3:6e:a9:e7:b1:e7:52:30:5e:b5:03:4a:f8:2d:1a:
03:d7:0e:e0:ef:9b:60:e7:3e:25:47:43:e4:12:f2:
6e:50:7e:6f:5d:06:1c:2c:6e:c7:6e:23:18:32:7b:
b8:6a:c7:13:8a:e7:bf:a6:4e:6c:80:69:33:a6:0b:
6c:b4:6c:f5:61:95:4d:65:fc:67:a2:09:d4:f2:1c:
e2:86:f3:00:7f:89:1d:28:e4:60:c1:80:1c:ee:d1:
8b:e4:aa:47:51:44:79:37:f8:bf:20:41:22:72:46:
2f:4d:fc:aa:34:56:9b:d2:8e:d5:98:c1:71:22:3a:
4e:b4:37:c3:cf:72:ff:ca:0f:95:aa:53:02:6d:2f:
13:38:b0:4f:62:eb:9d:09:7a:26:45:3c:b9:e5:93:
c5:19:01:a8:a3:09:00:15:c6:31:25:b4:1e:1b:4e:
61:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0B:9E:AE:DE:EB:D1:52:CD:E9:7F:D3:AC:19:47:EC:57:BA:B9:A3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qguert7r0VLN6X_TrBlH7Fe6uaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
0a:a8:02:f1:2e:1e:f2:3d:23:2c:b2:13:79:71:93:3b:8d:3d:
56:48:1b:35:a2:e6:a3:0d:a4:e4:82:2f:93:42:44:78:d3:0c:
fe:de:90:36:a8:a8:7b:b1:95:5f:11:91:6c:16:64:c3:df:aa:
fe:dc:16:01:e2:0c:ff:37:1c:e6:6c:51:31:48:c9:4d:cf:dd:
05:59:f3:4b:94:3d:ad:2f:c8:94:29:06:d3:79:21:43:a5:a4:
3e:ef:92:ab:1c:bf:cd:93:cd:97:b1:af:e9:50:db:26:bb:7d:
5d:72:8d:f4:4d:e0:2f:34:2b:54:67:3b:01:25:b7:83:87:58:
12:c3:de:59:88:54:20:36:55:96:84:c0:f5:b4:45:a2:9d:4a:
fa:2e:9a:20:a9:4e:b3:2a:02:bb:fc:0c:8e:fe:25:6f:de:ba:
c1:40:75:5e:9f:72:2e:1f:e4:12:8e:6f:82:00:b7:99:c8:bc:
4b:b7:28:f2:a7:51:73:54:e6:f0:0c:32:d6:01:14:50:39:62:
a6:1e:25:6c:a0:17:d2:0c:b4:a4:b8:5d:ea:c9:b4:ee:4c:77:
fa:74:44:13:7e:2b:96:2d:c6:f1:16:18:21:a4:f9:71:04:e9:
33:b1:ba:41:f9:22:63:80:e2:c1:bd:7a:d1:77:ee:f5:cc:7d:
91:37:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:42 2025 by rpki-client