Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zvXWAGUJX4P1jAVnKeSpJGbBj6Q.roa
File: zvXWAGUJX4P1jAVnKeSpJGbBj6Q.roa (raw, json)
Hash identifier: j/yuIx3rEnDskATwUVlLgN9zK51s14fmVyI3MkznNNQ=
Subject key identifier: CE:F5:D6:00:65:09:5F:83:F5:8C:05:67:29:E4:A9:24:66:C1:8F:A4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBBCE0E13748395459F31FBAB69A3C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zvXWAGUJX4P1jAVnKeSpJGbBj6Q.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396553
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bc:e0:e1:37:48:39:54:59:f3:1f:ba:b6:9a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cef5d60065095f83f58c056729e4a92466c18fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:41:7c:70:a7:56:f3:b4:07:56:de:45:81:
ce:9f:c4:0f:39:2a:f1:b8:1e:cc:1e:55:21:01:d6:
6d:c5:13:42:1f:40:c6:91:73:f9:da:af:66:db:5b:
21:b0:9b:d8:c6:62:b7:b7:f7:09:ac:6d:27:74:1c:
a9:a3:96:48:e8:ee:9b:b6:76:cf:8c:b6:a7:69:a2:
a4:45:96:7b:fd:80:1d:1d:c6:00:92:25:16:3b:9a:
f6:58:39:e3:7f:e0:49:7f:b3:e2:7c:b5:b4:46:9b:
82:38:5e:4b:c0:b3:32:eb:c8:4d:8c:07:fb:f5:b4:
70:ef:c7:6a:3f:51:06:b0:f9:17:57:ba:69:10:77:
83:bd:eb:5a:d0:53:08:b6:66:0a:72:2e:24:04:10:
f0:48:fb:bf:34:6d:9f:e2:d0:7f:5e:6e:60:5a:2b:
f6:9a:a2:a3:77:2f:c1:5e:f4:41:44:1b:63:22:01:
72:e5:60:2b:e3:1c:c8:c8:2d:7f:37:1e:7e:66:d6:
e0:77:83:05:a2:ff:88:17:fa:f3:ac:d6:87:36:67:
a2:29:21:ec:ef:6e:72:b4:9b:47:2d:51:b9:f7:ef:
fe:ee:4d:32:85:ab:f6:a6:a2:1a:18:7d:1f:92:de:
64:df:9e:ae:87:26:66:e6:bc:0c:a6:b5:23:b8:fe:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F5:D6:00:65:09:5F:83:F5:8C:05:67:29:E4:A9:24:66:C1:8F:A4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zvXWAGUJX4P1jAVnKeSpJGbBj6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
87:79:05:96:0a:0a:90:59:91:49:29:a4:94:f9:0e:bf:05:46:
c9:6c:d9:91:9b:ec:d8:75:df:23:2e:53:ca:b6:43:f6:59:93:
39:2e:f3:b1:fa:b4:fc:b9:cd:90:a2:1a:05:ca:52:b9:a2:7b:
81:41:ef:ab:15:de:fd:5a:f4:45:26:8a:d4:9c:0b:95:64:15:
50:ae:d6:da:f5:90:42:fb:14:9b:cf:6a:8a:d6:4d:84:b3:42:
f3:75:f2:df:5a:8b:1a:60:6a:01:b0:6a:f6:b7:20:8f:87:a8:
3c:18:8c:55:7d:a4:fe:fd:8c:51:56:88:0c:e5:65:11:5f:02:
7f:1c:c6:10:26:0b:bc:e5:57:3c:eb:0a:60:bc:7a:bd:99:bf:
16:34:91:d2:03:10:e1:6f:8b:d3:2a:ed:bd:fb:ee:bc:e4:31:
5a:e6:cc:8f:61:58:63:c5:c7:82:c3:10:9c:1d:0b:e8:f9:b7:
72:cd:d3:37:06:21:da:f3:10:a5:6a:49:df:2d:27:84:dd:78:
4e:f5:53:88:e4:ea:ee:74:dc:68:b3:70:c9:d1:03:48:3e:a6:
54:a9:9c:00:d0:95:af:b4:2c:1e:a8:cd:44:b5:c6:a4:f1:a9:
6b:55:68:53:0a:0b:ad:25:7e:45:eb:9d:25:de:c8:b6:86:03:
0a:6f:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:47 2025 by rpki-client