Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/w1QcEOFROZkWzC2ljDpQY3HHKoM.roa
File: w1QcEOFROZkWzC2ljDpQY3HHKoM.roa (raw, json)
Hash identifier: 8SnR933jm9xhOTEQ7VU8MXdVTajsYzKiB/thqeQI2ys=
Subject key identifier: C3:54:1C:10:E1:51:39:99:16:CC:2D:A5:8C:3A:50:63:71:C7:2A:83
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEDFAC42328E9C71111C80B62BDD27
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/w1QcEOFROZkWzC2ljDpQY3HHKoM.roa
Signing time: Tue 26 Nov 2024 13:35:11 +0000
ROA not before: Tue 26 Nov 2024 13:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25485
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:df:ac:42:32:8e:9c:71:11:1c:80:b6:2b:dd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3541c10e151399916cc2da58c3a506371c72a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:62:d1:38:19:f3:a0:1f:f7:2e:20:ca:c4:
c8:7d:4f:91:8b:b3:31:1c:fb:cc:67:71:91:8d:bf:
56:dd:80:0d:63:73:4a:d8:4a:8b:b5:e1:bb:2c:60:
b0:60:0d:af:58:b5:72:4b:19:94:ca:69:74:e4:9e:
d2:2a:11:81:86:22:fd:8a:17:5e:7f:db:cf:69:7e:
54:7b:9a:70:04:57:1f:80:f0:a7:7d:6d:30:7b:b4:
a2:a9:9e:fd:04:67:c3:db:58:99:7e:92:f9:76:fb:
b3:29:d3:87:11:1c:f8:20:3e:7e:49:d9:f1:11:cc:
5a:c9:30:ab:8d:d2:d1:62:c4:4f:f7:a6:6a:25:30:
7a:60:31:99:2d:19:bc:50:ba:30:78:5e:e9:57:b1:
aa:4c:9f:de:19:b8:4d:55:1a:48:3b:95:a4:72:1e:
3a:dd:23:8a:d0:9d:99:be:09:70:3a:65:f2:2f:1a:
9b:ce:a6:0b:f5:29:c0:18:c8:9c:76:32:91:cd:05:
b0:82:47:23:f3:88:53:ee:fc:41:ff:1c:92:06:2c:
a9:be:16:5c:0a:28:f4:6f:ac:ff:54:88:e3:43:da:
34:43:ce:4e:59:45:b4:3e:c5:91:91:d6:5b:ef:cc:
29:00:69:8c:10:a1:76:00:fe:21:23:c9:58:90:e3:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:54:1C:10:E1:51:39:99:16:CC:2D:A5:8C:3A:50:63:71:C7:2A:83
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/w1QcEOFROZkWzC2ljDpQY3HHKoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
8f:fc:d5:f1:ad:69:e6:25:cb:27:b2:53:af:1b:a2:d1:3f:87:
72:d9:ba:d0:1d:d4:e7:c2:5a:0f:96:3d:d5:7d:d2:9a:64:be:
40:03:9c:49:ee:13:90:be:03:a8:23:a4:6a:c1:1c:47:2e:e6:
f9:3e:2b:26:d0:97:52:1a:5c:3b:d1:c6:23:38:be:07:ee:4d:
f8:f1:8b:b0:11:d0:0f:8e:7c:20:d4:fb:c4:1c:1a:06:bf:ad:
e6:f1:93:34:69:6a:f9:c9:55:8b:32:a1:26:b7:ba:5c:d3:c7:
f2:b4:d3:71:65:16:df:43:6f:c5:8e:17:e4:1b:06:6d:81:74:
51:b8:bf:3a:17:79:fa:c1:40:86:b8:1f:f1:88:01:81:e6:cc:
8f:12:bd:cc:15:54:5f:be:ac:24:aa:ba:f6:8d:8e:27:92:d4:
88:da:13:57:ed:f0:54:11:11:1b:51:6a:a3:ef:98:f0:8f:7a:
cd:ee:5d:3c:39:6b:5b:1c:81:a9:0c:0c:16:3e:96:18:88:64:
51:43:98:61:f9:0e:f1:a9:ac:96:59:b9:c5:0a:8e:b3:b0:0f:
0b:6a:41:1e:c6:42:ce:e9:90:d8:f9:74:a9:7c:09:97:6f:54:
b3:ed:ea:4a:94:97:c1:57:89:8b:60:62:69:57:35:2c:d9:08:
55:16:3d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:01 2025 by rpki-client