Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/k3g_0ZOOM9HSWRMnbMZNoEs67YY.roa
File: k3g_0ZOOM9HSWRMnbMZNoEs67YY.roa (raw, json)
Hash identifier: z2veGdByKN5sh+MLAX9F2RjmdVT42Sjj/Lime18W7mw=
Subject key identifier: 93:78:3F:D1:93:8E:33:D1:D2:59:13:27:6C:C6:4D:A0:4B:3A:ED:86
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEE8C956DCBFF7F506A0AA383709E2
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/k3g_0ZOOM9HSWRMnbMZNoEs67YY.roa
Signing time: Tue 26 Nov 2024 13:35:13 +0000
ROA not before: Tue 26 Nov 2024 13:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36629
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:e8:c9:56:dc:bf:f7:f5:06:a0:aa:38:37:09:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93783fd1938e33d1d25913276cc64da04b3aed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:8b:9f:d8:a5:24:8e:45:cd:75:6c:8c:7e:
e1:05:8e:86:61:04:52:bb:31:a1:b2:de:95:12:9a:
df:35:37:c3:d6:cc:cf:cf:95:80:d4:53:a1:53:e0:
f0:11:ae:f2:70:17:de:a1:56:8a:5f:11:ef:d0:35:
55:88:aa:14:83:cb:1a:3d:97:e2:5d:6c:08:2a:a5:
75:99:0d:37:f7:4e:99:03:df:56:e8:f8:2f:eb:41:
3b:3e:9b:35:47:4f:2d:37:ac:35:31:5f:e6:bb:d2:
7d:65:16:d2:5f:ce:a1:cd:4d:d6:13:1c:15:a0:e2:
1f:1e:e2:7a:0c:a3:36:6f:ff:9e:f2:95:a6:88:bf:
ad:85:ee:7d:6c:0b:cb:21:47:71:ac:4e:be:16:4a:
50:fe:19:6b:ac:49:6f:f4:b7:35:2a:61:6c:bb:c9:
bb:dc:c9:28:a1:16:28:b9:77:1d:45:25:8d:1b:92:
79:19:ff:08:cc:fe:63:61:29:63:f7:e0:c0:c9:aa:
70:1c:4c:cf:53:50:16:72:37:5f:8c:d7:26:9d:b4:
fd:28:3b:97:0a:a9:e3:72:bc:1d:5d:71:fc:8d:95:
62:69:da:08:bd:4a:66:4c:75:8a:c7:1b:6b:9c:c3:
45:eb:c5:b2:45:93:56:52:09:44:7e:82:73:16:f3:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:3F:D1:93:8E:33:D1:D2:59:13:27:6C:C6:4D:A0:4B:3A:ED:86
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/k3g_0ZOOM9HSWRMnbMZNoEs67YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
81:9f:03:16:34:1a:61:6d:07:ea:87:89:b0:d3:d9:c2:0b:c4:
90:fe:50:28:72:5e:11:e0:ec:f7:49:f8:10:c6:a4:f9:de:7b:
e9:fc:b6:9b:64:70:4d:47:d2:13:3a:34:b2:2b:a2:6c:8b:ad:
6a:44:2a:7b:1b:f8:ab:91:a3:07:51:a9:be:9f:64:69:bd:f1:
8d:51:fb:be:02:07:f4:82:dc:22:7a:b6:b9:09:86:68:ad:b3:
1b:83:0b:e5:4a:34:a4:73:96:07:e5:38:3d:ad:3b:38:ba:33:
83:fa:70:ff:1c:c5:e1:47:20:b1:62:14:8e:6d:9f:4c:d6:f1:
78:25:ef:78:f9:07:f6:a7:9a:54:7b:40:a5:81:d8:c0:66:d8:
d8:e2:e0:e7:2b:0b:18:1d:48:45:51:b1:8d:74:94:b2:b3:c0:
fe:b0:27:a2:fc:f2:6d:dd:7f:b2:67:35:52:8f:3e:da:e4:e1:
86:43:74:39:6a:67:83:94:6c:e8:2f:bb:9c:27:de:79:9b:94:
44:73:47:d0:ce:40:34:39:a5:04:03:21:c9:52:0e:08:a9:e3:
48:db:1e:31:0f:35:c3:2a:fd:96:db:89:80:38:3e:d4:3e:97:
c9:fe:20:87:9e:8e:66:b1:ea:17:79:07:62:09:0c:db:bf:90:
d2:f0:fb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:35 2024 by rpki-client on console.sobornost.net