Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zc2ymV8WNIKYzOlKvhwRctDARQg.roa
File: zc2ymV8WNIKYzOlKvhwRctDARQg.roa (raw, json)
Hash identifier: IM7nwLB5/npxQdyjlwU4CdDB45KxjyrZ+ZLd0XoS64k=
Subject key identifier: CD:CD:B2:99:5F:16:34:82:98:CC:E9:4A:BE:1C:11:72:D0:C0:45:08
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF005B67BE464CA8A22327797E7A9A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zc2ymV8WNIKYzOlKvhwRctDARQg.roa
Signing time: Tue 26 Nov 2024 13:35:19 +0000
ROA not before: Tue 26 Nov 2024 13:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396588
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:00:5b:67:be:46:4c:a8:a2:23:27:79:7e:7a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdcdb2995f16348298cce94abe1c1172d0c04508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:35:8d:10:35:25:79:f5:d3:ca:81:5c:24:
cb:ee:cf:09:28:c6:ee:c2:7d:82:48:6a:72:02:70:
47:52:5c:fb:4d:40:6b:f1:58:39:71:5a:a9:05:44:
20:46:a0:0d:56:20:c0:65:81:df:a6:b8:87:ef:d6:
bc:49:26:cf:53:e8:95:68:40:dd:8d:bb:52:20:f5:
ad:d2:a5:f5:ed:6d:cf:a2:d9:78:fa:29:03:27:0d:
25:14:28:50:ca:68:f1:ea:6c:f0:a5:47:32:52:0a:
79:f9:9f:54:f6:db:f9:68:e9:d4:1a:4d:73:f6:38:
18:4d:4e:f6:34:eb:a9:a2:9d:08:31:97:3f:a3:50:
a7:aa:2e:94:d4:57:c8:34:a6:7e:4a:e7:0c:da:6c:
68:ba:73:15:bb:b1:98:b3:29:a4:3b:28:f3:5e:a9:
4d:8a:30:44:83:f4:80:7f:9c:10:64:5f:d6:57:f3:
e4:84:b2:d7:53:ef:18:c3:32:16:0f:76:00:ef:61:
99:fd:cb:32:93:35:ed:cb:86:d4:3a:0b:c7:a3:d4:
e6:21:b2:8b:1f:93:22:94:e4:e6:f3:b4:38:d4:09:
a2:5f:87:35:36:48:39:4d:db:b8:5c:8e:20:87:c2:
f7:30:29:4a:cd:ce:4e:d0:e4:5e:2a:57:c9:88:e4:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CD:B2:99:5F:16:34:82:98:CC:E9:4A:BE:1C:11:72:D0:C0:45:08
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zc2ymV8WNIKYzOlKvhwRctDARQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
3b:e1:18:5e:02:02:22:f9:f4:b3:11:56:f8:75:bb:66:82:20:
4a:01:e5:69:c1:42:5c:a4:39:96:3b:d1:31:b3:fc:95:16:fb:
ce:4f:bb:5e:b1:0c:b7:a4:3a:55:ce:ec:59:81:a0:d2:32:d3:
cf:8f:10:9e:15:50:27:fb:40:2f:74:1a:fd:d6:0b:70:82:79:
51:56:96:01:3b:d0:5d:db:ef:75:6b:12:b1:b5:15:51:3c:36:
79:59:47:d8:c6:cc:fc:94:a1:86:da:1c:25:bf:1c:dc:f4:d8:
be:4f:74:83:cb:17:fd:0a:9b:20:1a:0f:ed:d2:f9:ac:cf:b4:
98:77:d5:d5:89:68:7a:ce:a3:25:c9:2b:07:11:0c:d5:cb:fe:
89:99:2d:c0:57:b3:da:36:bc:e1:df:c7:b6:3a:b0:8f:1e:4a:
ad:8a:64:5f:9c:81:93:ef:06:a0:b0:be:ce:58:9e:50:e7:65:
f7:7f:78:19:a1:f8:71:be:26:4e:b9:f0:2d:23:39:fc:88:72:
bc:9d:db:bd:8d:28:62:5d:19:ef:b5:b5:88:b8:2b:4d:1b:f7:
00:3f:a9:8f:c3:d9:6b:47:6c:ce:94:b7:29:41:fc:6a:8d:59:
a3:05:a0:bf:09:58:5e:07:68:d4:22:61:1e:f2:cf:5b:7c:b9:
7d:29:69:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:05 2025 by rpki-client