Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xkUlkCpDzCypOtL4ZlHs1pWKoqY.roa
File: xkUlkCpDzCypOtL4ZlHs1pWKoqY.roa (raw, json)
Hash identifier: 8L9E8zvJWQFnLw15AH8V3jY91viUZULt1mgLIPlIhi8=
Subject key identifier: C6:45:25:90:2A:43:CC:2C:A9:3A:D2:F8:66:51:EC:D6:95:8A:A2:A6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF03F622D01587174FB5CFDCA5D3B6
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xkUlkCpDzCypOtL4ZlHs1pWKoqY.roa
Signing time: Tue 26 Nov 2024 13:35:20 +0000
ROA not before: Tue 26 Nov 2024 13:35:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396595
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:03:f6:22:d0:15:87:17:4f:b5:cf:dc:a5:d3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c64525902a43cc2ca93ad2f86651ecd6958aa2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:8c:50:43:4f:5d:ab:bc:e4:b9:e7:1f:fb:
69:9c:1e:97:5c:f3:84:03:df:43:59:9a:87:0d:9b:
86:bc:f4:d2:9b:cc:c0:e9:57:be:29:b4:91:a1:cd:
08:2c:70:90:9c:09:ca:f8:43:ac:3d:e7:ed:a2:ea:
34:43:07:ea:cd:fa:da:32:c2:3c:0d:fb:91:9a:e3:
e4:68:23:22:80:26:3c:0c:e3:e1:29:21:d1:68:e7:
a3:47:e5:b3:72:6c:7e:85:c7:f3:3e:36:79:30:12:
ed:cf:4d:e8:1c:92:7f:2b:54:a3:8e:a5:76:02:90:
65:ac:df:9a:51:17:18:f7:7a:ee:e4:13:6e:2f:72:
2d:a5:9e:c8:df:00:d8:46:8d:a2:79:8e:c4:95:e3:
21:95:88:37:21:99:a5:b7:a6:0f:6d:e9:86:fa:4e:
fd:f2:ad:46:22:eb:77:a2:ca:bd:08:34:25:bb:f6:
77:fc:9b:66:00:30:47:56:93:dd:49:1d:7c:26:0b:
68:1a:59:d4:81:e6:86:c6:4b:be:3c:c5:e1:46:2f:
b1:92:bb:45:ac:2f:e0:29:9b:dc:38:36:e2:4e:0c:
79:f0:5c:3f:74:05:11:ae:27:98:7f:a7:cb:e8:a5:
c9:24:12:fb:c3:f2:2f:3e:18:85:13:fc:ac:c7:0c:
c0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:45:25:90:2A:43:CC:2C:A9:3A:D2:F8:66:51:EC:D6:95:8A:A2:A6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xkUlkCpDzCypOtL4ZlHs1pWKoqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
6f:f2:1a:dd:4a:34:1f:04:53:1b:51:fd:5c:57:d0:eb:bd:3b:
47:9c:b4:92:f9:81:ea:50:94:6d:91:3e:bc:5a:a7:44:bc:b6:
db:70:5f:fe:0a:ff:44:07:c7:06:5d:36:c9:06:2a:4b:e7:e9:
84:72:21:e5:ea:23:fd:50:f9:39:d0:f3:7f:bb:16:87:75:53:
00:9f:ad:79:10:a3:ac:3b:17:23:5c:cf:d0:75:9e:89:00:3b:
5d:a0:55:b1:6b:22:82:f5:17:d5:4d:26:a2:c1:34:4d:60:4e:
fa:36:74:df:19:a9:64:c8:9d:ff:43:76:bc:9e:42:28:2e:4f:
13:86:b7:74:7c:aa:06:6d:18:12:31:c5:96:7f:4c:4d:75:e0:
c3:7f:7c:b5:ba:82:09:11:88:75:e2:64:ce:43:06:b4:4b:20:
ec:f0:e3:73:86:ba:05:1c:f2:07:01:f9:da:36:f0:91:42:22:
43:2c:e2:c4:4a:50:18:d5:52:a5:12:83:2a:db:ab:1d:96:a0:
9d:74:42:3c:d5:79:bd:7d:84:ad:90:c8:a2:55:dd:f5:c8:37:
be:71:c4:c2:fe:87:a2:08:7e:71:b1:64:19:3d:c1:20:a0:30:
4e:be:84:bb:4c:11:18:ed:bf:af:bd:08:62:5a:2a:09:55:d6:
5d:9f:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:21 2025 by rpki-client