Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/w1Gw8yvJhJTplC4toJ12UIUnwec.roa
File: w1Gw8yvJhJTplC4toJ12UIUnwec.roa (raw, json)
Hash identifier: i+8rHM0WG6JLsnrTOQwhFiT4jFm4di3FoOQGT01Kuuk=
Subject key identifier: C3:51:B0:F3:2B:C9:84:94:E9:94:2E:2D:A0:9D:76:50:85:27:C1:E7
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEECA98628083C24CD9BCEFE426A62
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/w1Gw8yvJhJTplC4toJ12UIUnwec.roa
Signing time: Tue 26 Nov 2024 13:35:14 +0000
ROA not before: Tue 26 Nov 2024 13:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396543
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:ec:a9:86:28:08:3c:24:cd:9b:ce:fe:42:6a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c351b0f32bc98494e9942e2da09d76508527c1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:43:e4:f8:52:7d:7f:f5:21:12:0b:77:da:
0a:20:24:71:bf:c5:30:2c:74:af:b1:3b:49:49:de:
3d:c9:b5:1f:3e:eb:4a:7a:54:e5:13:d8:c9:e2:22:
58:6a:da:ae:3e:8d:59:6c:95:4e:99:11:8b:37:0b:
d8:48:33:98:b9:97:b8:26:4e:a4:ca:65:cd:8f:80:
b6:1d:91:3d:e2:9e:34:4b:1c:d9:9c:28:d0:0c:cc:
34:d3:2d:ef:08:52:79:e6:42:13:13:ea:b4:31:94:
84:a4:58:e2:e1:79:67:fc:ce:c1:4a:81:7d:8f:90:
24:07:68:71:50:03:cb:32:0c:46:82:8b:23:71:ca:
ed:9d:8f:e9:ae:8f:42:d5:2a:a6:7e:ba:0e:44:17:
8e:4b:43:f9:aa:e0:df:02:c3:83:77:04:c2:61:d0:
f6:ef:5e:28:0e:88:92:9a:a1:a0:ee:21:3c:02:7b:
54:9a:5f:ac:2b:bc:86:03:51:ee:09:1c:11:0f:ba:
37:4e:ea:7a:b0:1e:35:d3:a3:14:ef:b2:a6:7e:ba:
6b:2d:ef:64:21:da:3f:10:ce:37:1f:8b:b2:28:2c:
8d:50:c7:b9:70:96:93:12:ae:65:55:0b:15:3d:63:
f9:f7:27:8e:0f:8c:53:ba:0d:78:a8:4a:12:6e:f2:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:51:B0:F3:2B:C9:84:94:E9:94:2E:2D:A0:9D:76:50:85:27:C1:E7
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/w1Gw8yvJhJTplC4toJ12UIUnwec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
72:6f:d4:f0:1d:de:32:df:59:c9:43:be:f0:99:2f:d0:96:12:
92:22:80:71:51:f4:20:b3:2d:34:eb:b5:2a:56:73:ec:37:12:
50:56:db:3c:91:ed:ec:4b:0c:a6:ce:fe:65:13:09:49:b3:c7:
c1:74:1c:98:33:26:47:69:02:22:f0:7a:c4:b6:5a:c0:e7:1f:
47:51:d1:8b:21:37:be:3e:a4:81:40:4a:5b:1c:ab:c9:85:cb:
8a:dd:4a:34:12:c2:2e:83:0f:ab:99:a3:8b:f6:36:7f:2a:2d:
42:af:24:6c:4e:7e:83:aa:91:29:27:9d:08:af:96:f9:fa:93:
cf:ef:de:09:86:2b:b6:3e:d9:a6:d5:3e:e2:b7:6f:97:7f:cd:
ed:3e:2b:c5:2b:5c:47:33:4f:0a:bd:54:f9:02:29:50:22:7f:
5e:13:0c:b2:9e:fa:c0:8f:9c:d4:c0:d8:d1:a5:08:cf:3a:2b:
51:44:de:0e:5e:05:1a:0e:c0:ee:64:e5:d6:fc:b4:3c:b4:a2:
b9:ff:b2:27:d3:94:ea:17:4e:26:a6:14:7f:ee:38:86:f3:20:
b1:43:51:cc:bf:f1:9c:86:e3:35:01:99:4a:5b:2d:4d:11:8f:
6c:aa:63:72:c9:db:c2:89:74:61:04:ea:f2:2c:d1:a5:20:42:
a3:b0:1d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:47 2025 by rpki-client