Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/w148Vo81ctXU3VKzr-VIFPHmRGs.roa
File: w148Vo81ctXU3VKzr-VIFPHmRGs.roa (raw, json)
Hash identifier: vbxNZW9xF3WxVC7q/hAIu1PbbHBNBLYoA/JPjc4P0LI=
Subject key identifier: C3:5E:3C:56:8F:35:72:D5:D4:DD:52:B3:AF:E5:48:14:F1:E6:44:6B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF134BEF09DBB521EBBC611BF45075
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/w148Vo81ctXU3VKzr-VIFPHmRGs.roa
Signing time: Tue 26 Nov 2024 13:35:24 +0000
ROA not before: Tue 26 Nov 2024 13:35:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397203
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:13:4b:ef:09:db:b5:21:eb:bc:61:1b:f4:50:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c35e3c568f3572d5d4dd52b3afe54814f1e6446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:36:e3:17:f5:87:89:93:c8:d5:83:b3:fc:
70:f0:a2:e7:68:cf:f7:39:b4:3d:c3:b9:f2:e6:d1:
7e:e4:0a:c1:02:15:4f:64:aa:e1:ce:8a:01:ed:c6:
0c:3b:77:6c:4e:b9:35:5d:15:52:f9:2c:6e:13:a8:
a8:fe:e9:b4:b5:0b:62:99:6b:22:7f:34:3b:b8:6c:
cb:8e:dc:c0:40:f4:d2:26:86:f2:9f:8f:51:71:f1:
e7:83:a0:52:29:65:d2:e6:21:02:e5:70:dd:9d:ff:
46:59:04:d1:c0:97:af:15:93:0b:2c:3e:2f:62:bb:
0e:c5:e8:73:e0:91:55:67:f7:c8:05:31:07:d0:16:
75:5b:10:8e:e3:c6:ab:ca:dd:f1:2a:2c:5b:ab:e5:
98:76:d8:33:df:09:7e:6f:07:72:1b:81:b2:55:5f:
75:29:fe:4c:8f:ec:bd:c2:fd:d8:15:e4:9e:f2:6f:
2e:23:ec:4d:f8:4f:78:95:da:83:e5:26:e4:91:a8:
db:36:73:33:84:1f:55:8f:c3:d3:c9:d2:cd:18:ec:
7e:51:3f:f5:0f:03:a7:83:89:1c:e0:3e:c9:d7:4c:
8f:c1:98:7f:24:62:07:c2:a9:2a:3b:d6:48:07:12:
a4:10:a4:06:a8:6d:95:e2:ff:53:58:5d:98:23:51:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5E:3C:56:8F:35:72:D5:D4:DD:52:B3:AF:E5:48:14:F1:E6:44:6B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/w148Vo81ctXU3VKzr-VIFPHmRGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
75:53:81:1c:f2:75:a5:f3:0c:ff:05:9f:5a:a8:51:49:08:cc:
61:68:7b:44:2c:58:39:6e:80:8c:8b:3a:5b:cc:ea:ec:6c:e4:
bb:43:82:2f:6e:94:17:84:df:96:23:29:10:73:7b:e9:ef:8a:
ca:fa:be:09:cd:7e:0f:ee:7f:f3:1f:14:f1:c0:12:5a:fd:d0:
71:3e:13:c5:22:81:4b:d7:b7:34:aa:ac:a5:80:b0:79:7c:fb:
6c:06:74:62:fc:08:0c:54:4f:4d:e7:4c:e6:09:79:1a:e8:33:
b2:f0:e1:5c:d4:36:6f:3b:3a:a1:9c:3e:ed:2b:c5:03:83:14:
d4:d7:c8:7c:f7:7b:a8:f8:d0:92:01:f7:76:31:49:f4:0e:a1:
7b:be:42:90:53:2b:2a:b7:01:f5:97:6a:5f:46:1d:f0:39:cd:
09:fd:c0:df:83:a1:49:47:e0:84:80:b0:3b:52:86:58:e4:53:
d8:51:e1:a3:c1:1a:98:cc:52:a6:72:a0:a1:3c:58:24:44:e5:
84:44:b0:e9:d0:1f:00:7d:d8:86:4c:ad:2d:89:07:bb:0a:fe:
35:0c:2f:e7:ae:d0:f0:5d:3c:16:2e:d1:94:33:d0:3e:9d:06:
eb:82:c3:29:8d:c3:2f:28:3e:5c:30:0b:12:a7:64:94:af:ce:
76:c1:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:16 2025 by rpki-client