Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ubwsN1q9vvOZo84j_3x33F9nARI.roa
File: ubwsN1q9vvOZo84j_3x33F9nARI.roa (raw, json)
Hash identifier: 6iWuiaICyWfcjTiKZfcIY88Trgp7haTGyHs6KUpx42A=
Subject key identifier: B9:BC:2C:37:5A:BD:BE:F3:99:A3:CE:23:FF:7C:77:DC:5F:67:01:12
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD18B82FAE81346870EF3E921E8BE
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ubwsN1q9vvOZo84j_3x33F9nARI.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396597
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d1:8b:82:fa:e8:13:46:87:0e:f3:e9:21:e8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9bc2c375abdbef399a3ce23ff7c77dc5f670112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:25:1a:80:e1:5e:29:1b:df:e0:32:58:b4:
a4:81:3d:f6:4e:47:4b:5f:76:ac:35:e9:ab:ab:a0:
df:79:3b:6d:b1:68:f8:00:1e:27:af:c1:a9:33:f4:
94:cc:ae:8b:90:23:0e:b1:57:f3:bc:8c:b1:eb:3a:
55:82:ad:c2:a8:93:c9:8c:b4:8c:c2:f4:cf:be:11:
b9:5f:e1:19:36:ea:59:42:18:02:d8:7e:fe:eb:ce:
bc:e5:93:5d:90:48:e7:e6:d0:24:ba:b8:8e:ae:38:
17:48:d5:34:27:7a:55:fc:e0:aa:d6:c0:33:2e:01:
6b:bd:aa:56:08:aa:13:57:5b:f4:dd:da:97:fd:df:
71:68:64:d7:5e:46:2c:6f:7c:d9:ff:1b:73:bc:a3:
78:e8:ba:70:22:4c:3e:cf:39:c1:a0:14:1a:81:67:
a5:3b:f5:88:be:41:fd:99:91:e9:c9:ff:a8:39:17:
2b:d8:92:e0:69:15:56:90:6d:b4:14:6f:12:b3:99:
62:01:48:e4:10:66:99:8c:7d:b1:28:13:ad:b5:e4:
95:bb:a8:0b:00:dc:64:4e:16:94:84:cd:08:e7:d9:
d0:6e:e0:0c:6d:d5:44:50:f5:83:32:27:bf:a6:34:
39:47:75:2b:8d:4c:0a:9b:40:11:ac:7d:c8:9b:b2:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:2C:37:5A:BD:BE:F3:99:A3:CE:23:FF:7C:77:DC:5F:67:01:12
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ubwsN1q9vvOZo84j_3x33F9nARI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
a8:f3:a2:a6:ba:54:0b:b9:1d:42:ff:d4:36:30:4d:af:12:4c:
24:9e:1a:fb:11:13:6f:c7:09:4c:03:09:d4:e9:7b:95:78:ec:
cc:c6:43:8b:95:f1:26:1a:fb:df:d3:c8:44:94:af:c1:07:57:
69:9d:99:52:d2:e6:ef:97:c0:ce:dd:42:51:ff:7e:98:28:ef:
d9:01:67:90:a4:c3:2d:4a:3d:23:b7:35:4f:7f:f2:3b:28:9d:
86:ea:cd:5e:4c:54:9a:eb:17:04:51:9f:c7:4c:95:a1:74:31:
82:bd:2b:be:41:74:b2:96:52:60:d0:8a:eb:b9:ef:22:6a:e2:
5c:3f:1e:7d:01:c3:cf:8c:0e:0c:8b:61:27:51:a3:c9:f5:53:
e3:5d:71:1e:7f:c0:5e:15:94:a6:96:6c:fc:ef:6a:90:b6:bb:
6f:df:32:9f:46:0a:a9:a4:c7:3c:16:db:f0:7c:36:ca:a0:b0:
5b:99:a1:76:bf:32:eb:b1:2b:e2:1c:39:dc:3f:66:23:d9:d5:
6f:01:d0:2b:d6:a0:1c:b9:76:dc:e8:fd:6c:6e:f2:e8:8c:52:
00:fc:a3:9a:80:4f:12:10:9b:10:e9:ac:2f:ad:ce:d2:04:3d:
f2:7a:32:9e:c0:31:c3:27:cb:c1:b9:d2:08:ac:d1:ca:ab:15:
3d:0a:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:56 2025 by rpki-client