Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rHqJY4Yfp_bWVlpzhbVRNoM6GRA.roa
File: rHqJY4Yfp_bWVlpzhbVRNoM6GRA.roa (raw, json)
Hash identifier: oYZxXPevgC2Jn5IWXyK5rmw0ooNuvASWVGxbZzU/Ks8=
Subject key identifier: AC:7A:89:63:86:1F:A7:F6:D6:56:5A:73:85:B5:51:36:83:3A:19:10
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE73DA69B906668C3D8B39CAAD24D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rHqJY4Yfp_bWVlpzhbVRNoM6GRA.roa
Signing time: Tue 26 Nov 2024 13:35:13 +0000
ROA not before: Tue 26 Nov 2024 13:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36625
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e7:3d:a6:9b:90:66:68:c3:d8:b3:9c:aa:d2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac7a8963861fa7f6d6565a7385b55136833a1910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:4f:93:6f:17:18:bf:52:32:9f:8a:2b:38:
c1:29:14:0b:79:af:b8:ae:da:a5:e7:65:a3:00:48:
a9:c6:e8:70:d5:1d:33:7b:de:b4:0c:a9:bf:0e:de:
38:00:60:d0:94:0d:2a:96:7c:2a:79:57:08:b2:72:
54:2e:22:ae:2e:92:f5:11:bc:64:87:13:fe:27:7a:
66:e8:0a:4f:27:92:51:04:54:00:a7:54:1a:95:75:
ae:a3:a7:75:72:37:b6:85:b4:4d:cf:f6:9e:74:4c:
09:78:91:43:13:b0:a2:a2:6b:fd:b3:d0:71:c0:73:
80:e6:ad:88:83:96:bb:b7:4e:11:7e:08:34:52:97:
73:d2:84:57:4a:17:2b:19:81:82:c8:82:d6:4f:ab:
25:3a:fe:5a:10:d4:b5:fe:45:25:ee:13:2f:7d:70:
60:c9:92:68:75:af:e6:93:df:45:e8:00:52:25:d4:
39:06:a8:2d:ff:6d:44:5a:a4:16:43:fa:d8:19:21:
fb:ba:7a:5b:b1:6c:54:d2:7b:da:bb:98:5d:25:e2:
af:9b:88:9e:63:62:88:de:5a:c3:81:76:36:9a:3b:
1a:36:6e:1c:2d:14:25:c0:a5:ea:c3:ab:02:e6:93:
d8:19:46:6f:fa:ba:75:b5:20:0b:4b:e2:a7:db:12:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:89:63:86:1F:A7:F6:D6:56:5A:73:85:B5:51:36:83:3A:19:10
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rHqJY4Yfp_bWVlpzhbVRNoM6GRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
6b:ce:5e:35:96:e7:60:88:67:82:59:49:84:3e:b0:4b:b1:fb:
cf:bf:97:09:7b:79:b5:8b:fd:84:d7:1f:47:a0:60:2e:e0:4a:
df:35:59:57:55:49:73:97:69:34:4c:be:e7:44:ef:ac:e8:77:
87:2b:8e:0d:ab:52:6c:c8:18:e2:64:8f:1d:2e:aa:a0:47:ee:
37:38:f5:58:47:e8:09:d6:11:f0:62:9d:8c:8e:c0:97:eb:df:
db:d3:8f:8c:78:89:c9:4b:99:98:ce:37:6a:d7:2a:cf:7f:f0:
06:20:d0:80:b5:42:81:9d:e8:a9:43:5b:e3:5d:d3:34:39:48:
4b:c5:7c:c9:37:d3:7f:bc:89:d4:e7:48:01:56:95:aa:b9:36:
0a:10:06:58:f7:49:ae:2e:63:c0:7f:9b:e0:2b:e5:3b:da:66:
e3:7b:bd:17:b8:9e:43:1a:fb:e7:97:c9:20:f8:4f:8b:33:89:
4f:9a:69:2e:92:07:0e:a6:10:75:87:36:4b:ef:c0:87:24:48:
17:3f:68:dc:5a:18:13:57:b1:54:01:a2:98:33:af:90:5e:6c:
9e:06:96:f0:3a:eb:ce:ea:a3:27:bd:6b:9c:4b:c8:31:71:0f:
ac:d9:43:77:c9:00:82:d4:b9:49:d9:74:f3:39:f2:4b:a8:34:
e6:f2:cc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:11 2025 by rpki-client