Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/r5GDbUnL8XfgFbRTLCjMVUwVU4g.roa
File: r5GDbUnL8XfgFbRTLCjMVUwVU4g.roa (raw, json)
Hash identifier: xLVki7mVd/jqt4eag3iFUcnfcD4DEWkw8psdHOPCDDk=
Subject key identifier: AF:91:83:6D:49:CB:F1:77:E0:15:B4:53:2C:28:CC:55:4C:15:53:88
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB4532E46BAE60A06457DA1B64480
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/r5GDbUnL8XfgFbRTLCjMVUwVU4g.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36628
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b4:53:2e:46:ba:e6:0a:06:45:7d:a1:b6:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af91836d49cbf177e015b4532c28cc554c155388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:0d:c0:4d:42:c4:31:7a:45:ba:8c:29:67:
97:7f:b0:78:61:e4:cf:26:41:e3:39:52:bd:45:f3:
c4:62:83:3e:aa:0e:bb:bd:25:48:75:6d:21:5b:34:
85:ee:c1:bd:47:ec:d9:e4:46:9e:1c:09:68:44:dc:
4d:f5:36:c2:cc:a6:78:b5:5a:36:23:2e:e9:a3:c3:
19:2f:09:fc:91:83:10:3a:52:2f:fb:8f:06:3f:89:
d7:f9:c1:85:55:e6:9c:12:91:c0:1e:d1:b9:f3:cd:
24:39:b8:2b:86:0e:3f:a9:6c:ca:fc:9f:24:8d:c3:
c7:5e:06:fa:a2:5a:8e:2a:0f:ae:02:8c:1b:ff:03:
49:9a:61:f1:2a:40:b2:77:1e:1b:9d:9e:c7:b4:a5:
7c:0f:3c:56:84:24:75:c7:84:1e:11:8a:bb:6e:71:
f6:b4:02:37:c4:7d:e4:b1:3d:b8:99:ef:43:76:fa:
fe:4a:9b:eb:3a:29:fa:49:53:63:e9:22:05:4f:51:
4a:51:80:63:41:9d:1c:9d:df:19:d4:e6:39:f5:db:
2f:db:60:67:1b:76:b5:3e:48:98:07:b4:7d:19:7f:
1a:c4:94:8e:aa:45:34:20:0d:b6:ed:af:be:68:aa:
07:6c:6d:1b:47:c2:0b:70:3a:50:58:b6:3f:0b:12:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:91:83:6D:49:CB:F1:77:E0:15:B4:53:2C:28:CC:55:4C:15:53:88
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/r5GDbUnL8XfgFbRTLCjMVUwVU4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
c4:23:1e:1f:80:e7:f9:58:96:1c:f8:a8:42:65:b3:47:17:bc:
8f:e3:69:e2:3c:dd:5a:fb:3b:ac:65:63:4b:bd:3a:86:10:ff:
08:a8:3b:a2:a6:a6:1b:6f:fb:8c:0a:47:6d:eb:d4:f4:5f:ad:
d7:bf:d3:5c:12:be:cb:13:b4:86:85:68:cd:f1:74:a3:cd:e6:
a2:b2:96:da:ea:14:22:6b:06:c8:c4:9f:d1:1a:70:ab:13:29:
b1:12:f1:37:97:5b:46:21:5d:cf:ee:1a:0a:e6:c2:7a:ce:c4:
7d:d1:51:a3:c8:ea:cb:b3:67:8a:e9:02:42:a4:39:cd:42:ce:
28:b2:89:d6:5b:49:a3:33:a7:6b:fd:1a:4c:ae:7d:09:e6:69:
8c:c6:80:55:fe:8e:c1:8b:6c:2b:c5:b2:c4:9e:32:14:62:98:
c7:e2:b4:c0:47:99:d2:8e:d7:d3:8d:bb:3e:0f:f3:80:5d:63:
d6:b9:ae:8e:14:44:69:b7:0f:5a:0e:17:7f:ed:75:df:71:ca:
7c:78:54:48:01:82:c7:1a:90:e4:2e:95:e1:54:31:b4:2d:3f:
6a:0a:43:19:62:c5:ff:2d:b4:ac:a6:05:89:b7:cf:eb:f8:d3:
34:6e:54:89:98:70:0e:98:71:f9:00:bc:58:25:bb:05:34:fb:
df:ef:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:01 2025 by rpki-client