Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sJQaYFy4K8iqHvSE5BsRY4N3j58.roa
File: sJQaYFy4K8iqHvSE5BsRY4N3j58.roa (raw, json)
Hash identifier: xCVpECI21nQs8HxO4CroI/TAADuTfWJ9i2cDDJ4t0iw=
Subject key identifier: B0:94:1A:60:5C:B8:2B:C8:AA:1E:F4:84:E4:1B:11:63:83:77:8F:9F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF7AA76427A7337D7BD6DC49CD8AF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sJQaYFy4K8iqHvSE5BsRY4N3j58.roa
Signing time: Tue 26 Nov 2024 13:35:17 +0000
ROA not before: Tue 26 Nov 2024 13:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396571
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f7:aa:76:42:7a:73:37:d7:bd:6d:c4:9c:d8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0941a605cb82bc8aa1ef484e41b116383778f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:dc:94:e2:fc:09:bf:0c:cb:93:6a:06:d2:
da:2b:91:ff:a3:81:bb:0c:4d:43:ba:8c:7a:df:a8:
aa:0e:11:62:6d:8d:c9:43:16:2a:14:2b:44:0a:ee:
46:d4:08:16:cc:b2:73:ba:53:5a:39:60:db:fe:2f:
74:7b:73:44:cd:1e:0c:bf:97:5e:6c:68:ca:2e:09:
46:9d:b0:ba:90:12:6c:bb:95:69:a6:8b:77:c3:22:
6a:05:f2:f6:89:15:db:60:bf:4c:a7:f8:26:60:c7:
b0:6a:63:01:6a:14:0d:92:2f:c4:08:0f:58:16:02:
ee:43:7d:69:40:6d:d9:71:96:0c:5c:56:56:8b:fe:
11:0f:93:15:1e:16:e5:5b:29:a0:c6:f1:8e:3a:0f:
b7:64:76:bc:cb:4f:4b:1c:3f:bb:d4:73:51:91:e6:
2e:56:77:ef:95:5f:df:f3:e0:87:03:97:05:63:7b:
3b:d6:21:f9:0d:1b:ba:0a:50:d7:20:f4:42:82:ca:
85:e3:33:72:ac:8e:c9:1e:aa:5b:1e:4d:a4:09:bc:
37:aa:e6:c4:88:ce:45:99:f0:11:ce:2e:2a:4a:07:
81:a9:ba:0a:ed:cb:81:c8:36:99:96:47:75:6d:5a:
91:8a:c9:14:11:b9:51:53:64:96:5f:a7:30:65:b5:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:94:1A:60:5C:B8:2B:C8:AA:1E:F4:84:E4:1B:11:63:83:77:8F:9F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sJQaYFy4K8iqHvSE5BsRY4N3j58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
48:c7:97:db:52:b5:f7:2a:f5:5a:ec:b4:85:76:64:bc:68:8c:
63:70:da:7d:8c:1c:1c:30:10:44:ce:63:a2:b3:f3:57:ec:a5:
2c:73:28:be:0c:09:83:0e:5e:52:16:c6:96:00:98:d3:06:8a:
08:20:c2:eb:86:a8:db:a7:59:aa:b3:0b:61:56:8b:c9:6a:c4:
d0:ea:bd:f3:85:6f:d0:58:93:42:14:62:f1:1e:e8:33:d0:39:
c1:70:62:85:33:39:50:df:c8:05:2c:53:6e:03:3d:1f:ad:8b:
eb:65:aa:fc:f5:d4:54:bf:b9:f8:95:09:90:f3:25:68:ff:a2:
ff:29:0a:4d:ea:d1:9d:e0:c4:49:42:66:d3:08:bf:e9:44:7d:
16:cf:ed:48:8e:d1:a6:e3:77:37:47:66:98:ef:f9:ff:a2:9c:
0f:f1:e0:c2:12:33:16:38:81:e6:12:74:66:05:e7:28:b5:8c:
18:65:bf:5e:fd:f0:da:34:cf:15:30:b9:d7:df:8d:51:c5:f7:
37:78:6c:fc:49:8e:f9:4a:db:03:44:37:4e:06:cf:28:49:2f:
42:96:6b:65:88:c6:65:82:28:f0:a8:d7:72:78:39:91:c9:38:
48:f8:7f:2f:72:65:6a:50:4d:1c:ba:8f:0f:05:8c:30:3e:84:
10:b0:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:33 2025 by rpki-client