Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Ziz0ZkNFNw2k_4e-blCfV-z3U_c.roa
File: Ziz0ZkNFNw2k_4e-blCfV-z3U_c.roa (raw, json)
Hash identifier: tPJZUC0yW8GDo4dM+f0Okl/rUb5CfcK2zBb+sNY9ywY=
Subject key identifier: 66:2C:F4:66:43:45:37:0D:A4:FF:87:BE:6E:50:9F:57:EC:F7:53:F7
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF17632A6B74AE765BFDCDB8A959A6
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Ziz0ZkNFNw2k_4e-blCfV-z3U_c.roa
Signing time: Tue 26 Nov 2024 13:35:25 +0000
ROA not before: Tue 26 Nov 2024 13:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397210
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:17:63:2a:6b:74:ae:76:5b:fd:cd:b8:a9:59:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662cf4664345370da4ff87be6e509f57ecf753f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:61:0b:5a:63:a3:7e:ce:22:6d:ba:e5:14:
6c:9a:2f:a9:a5:50:d8:74:51:83:d4:15:54:f2:59:
ef:4a:1a:96:71:46:a6:48:67:e2:37:e6:80:6b:de:
92:03:be:11:8b:81:16:fa:f8:1e:7b:00:1e:29:7d:
95:14:76:33:08:b8:c8:87:fa:f7:1b:79:fc:f0:2f:
07:ec:50:46:9a:81:0b:94:49:19:37:8d:63:06:b3:
1d:41:cf:42:20:a4:84:13:9e:98:d7:88:18:63:20:
1c:09:60:ae:69:80:48:7e:96:3d:9d:d9:29:1b:a3:
0b:59:dc:73:64:6b:e1:7d:d7:4f:2b:e3:fa:7f:44:
fa:a4:82:59:e2:f3:c1:36:f3:74:9e:85:5e:d2:4d:
7e:ce:3f:28:13:0c:96:02:34:24:7c:9e:06:93:53:
a5:96:6a:42:4e:ae:aa:a0:f0:dd:94:b2:dc:26:70:
85:eb:d0:5d:9c:92:8a:a4:8c:dd:82:60:05:95:9e:
af:f9:d3:2d:77:ae:41:3e:0e:7a:49:30:e4:46:02:
09:8b:de:43:4f:99:a8:ce:c0:38:98:c2:3e:31:e3:
08:d7:01:72:40:88:7c:b8:83:99:a5:dd:c7:96:eb:
f8:28:46:22:dc:f6:d6:15:bc:5d:dd:8a:25:37:7a:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:F4:66:43:45:37:0D:A4:FF:87:BE:6E:50:9F:57:EC:F7:53:F7
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Ziz0ZkNFNw2k_4e-blCfV-z3U_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
4b:7f:a9:9e:cb:3a:f6:fe:b1:8b:f3:4a:83:7f:3e:84:f5:24:
64:bb:28:4a:fa:ce:ce:26:4f:f5:be:f0:bb:e1:38:2d:2e:6f:
6a:65:2e:63:48:bd:d4:8d:76:19:01:2d:00:dd:86:f9:c4:8a:
c2:ef:92:d7:85:f4:d9:b8:e9:7f:32:62:2a:66:5c:8d:6f:27:
6c:4e:a1:dd:c3:56:f8:da:df:bf:28:68:44:cc:f9:ab:1e:45:
c9:9e:cd:43:2f:2b:ca:52:98:53:ef:e4:35:47:00:a9:49:2f:
b1:53:a6:88:2b:a2:11:a5:ef:9a:e6:db:4f:ee:eb:3c:bb:ff:
9c:85:0c:15:5d:0f:d1:7e:5d:d0:e9:5a:3b:6a:2e:9c:f1:64:
ed:bf:12:99:1e:42:38:a4:1a:2a:89:83:0b:fe:be:18:4c:f5:
7d:c3:85:96:d5:e5:a7:46:02:78:a1:c6:b3:c4:51:4b:9c:6b:
77:1e:cd:b1:78:0e:af:de:08:f2:6e:63:56:68:fb:fe:5d:f2:
d3:60:79:b5:43:10:1e:8d:f9:60:54:82:4c:74:9f:56:11:f9:
b2:f1:dd:47:eb:09:95:63:31:4d:0d:5e:11:c9:c1:66:b9:e5:
73:da:7a:e7:ce:62:2a:13:89:d2:03:0a:bf:f7:ce:f2:59:41:
e4:03:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:35 2024 by rpki-client on console.sobornost.net