Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/f62Asx8zBsXVdy40TNKRBejd9II.roa
File: f62Asx8zBsXVdy40TNKRBejd9II.roa (raw, json)
Hash identifier: qvQOTxQ7gnXCuJBCocCg+SVVpQ/72fZH4rS3wAS/bbc=
Subject key identifier: 7F:AD:80:B3:1F:33:06:C5:D5:77:2E:34:4C:D2:91:05:E8:DD:F4:82
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF940E5B579224F2D73F2612B06D6
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/f62Asx8zBsXVdy40TNKRBejd9II.roa
Signing time: Tue 26 Nov 2024 13:35:17 +0000
ROA not before: Tue 26 Nov 2024 13:35:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396574
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f9:40:e5:b5:79:22:4f:2d:73:f2:61:2b:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fad80b31f3306c5d5772e344cd29105e8ddf482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:4d:02:b6:63:cb:ed:17:c0:17:5b:ed:70:
65:44:1c:2b:be:6f:c5:e6:30:f2:99:dc:51:d4:1e:
ee:e3:3d:47:cd:db:75:32:e1:c0:8c:a6:da:05:f5:
93:a5:1b:06:bc:be:6c:f5:50:27:f6:01:5b:74:fd:
91:11:3b:04:95:89:22:c5:49:a1:12:bd:46:cf:de:
e5:61:0f:6d:4d:05:35:d7:e0:63:c9:97:93:a8:be:
97:2c:8c:b4:cd:f4:65:f1:09:ac:8e:c9:52:2d:c5:
dd:e8:54:59:c3:fa:d4:f8:62:29:6c:62:45:99:b3:
65:03:b1:a4:33:a6:85:3b:72:e6:fc:7a:57:50:e2:
c1:f5:1f:af:b4:4d:7e:c6:d4:6e:b6:c6:fe:39:7e:
d2:0b:a0:ad:56:b5:ab:71:9d:39:78:fe:c9:07:4a:
83:87:5e:95:9b:46:4a:82:37:4b:af:a8:d0:71:ab:
d8:00:f3:bd:4e:26:1d:86:e5:36:66:ca:2f:8d:3e:
d0:bd:00:1d:8c:b7:23:23:a8:5f:b6:1f:25:e9:f0:
81:ab:6b:dc:0c:0e:3f:be:f9:09:f0:e2:a9:76:e7:
b7:13:68:7d:2a:79:25:db:a3:14:49:01:17:39:b8:
3e:ce:da:ac:3b:1e:ab:b4:d3:d0:f0:43:f5:b5:76:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AD:80:B3:1F:33:06:C5:D5:77:2E:34:4C:D2:91:05:E8:DD:F4:82
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/f62Asx8zBsXVdy40TNKRBejd9II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
bd:ab:f8:7e:1e:07:8c:7e:d1:f3:1e:0f:cf:66:c0:8a:39:b9:
58:2a:af:5a:13:d9:71:03:60:e3:d1:4c:a9:0a:8b:02:f1:67:
8e:eb:82:21:d4:46:75:63:e5:08:2c:0e:f5:16:df:2d:7c:41:
8b:53:4d:02:1c:19:c1:55:61:df:04:c4:e0:6a:63:ee:40:cb:
bb:18:0b:6a:a7:05:7d:6d:46:03:74:c5:51:95:d1:15:a9:1e:
45:cc:cb:78:47:cc:47:4e:40:13:7f:af:c9:70:79:64:d0:2d:
73:a9:9d:d2:e6:be:73:77:2e:7d:32:ee:a3:69:c9:81:91:ed:
3a:16:e8:73:1c:ff:d0:61:98:5f:aa:dd:94:c5:57:c2:c9:e5:
0e:2a:c4:02:5d:ad:59:d3:a4:ac:64:c9:dc:50:86:67:a3:12:
4c:04:6f:8e:35:fb:27:51:85:ef:c8:0b:68:ef:e9:b8:d6:b3:
91:55:2b:8b:9e:55:c2:cf:50:41:93:b9:30:1e:9e:dd:57:d6:
17:57:11:b1:b1:68:3a:e5:3c:45:58:d5:7b:c1:ce:37:86:48:
4f:b0:7e:58:39:ee:52:49:57:59:ea:1a:93:ea:ba:76:f5:53:
df:91:40:87:c2:aa:c9:26:61:50:2a:73:15:17:83:69:5d:9a:
12:af:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:35 2024 by rpki-client on console.sobornost.net