Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xFC2h1mpiPALpLhj6dxQSaQVTlo.roa
File: xFC2h1mpiPALpLhj6dxQSaQVTlo.roa (raw, json)
Hash identifier: sI34wu7Iub0wGTX69SagYxP/rPZJCQ5ixIPHGTHGROM=
Subject key identifier: C4:50:B6:87:59:A9:88:F0:0B:A4:B8:63:E9:DC:50:49:A4:15:4E:5A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEEDFB8AE838CA339799294AAD9A1A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xFC2h1mpiPALpLhj6dxQSaQVTlo.roa
Signing time: Tue 26 Nov 2024 13:35:14 +0000
ROA not before: Tue 26 Nov 2024 13:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396546
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:ed:fb:8a:e8:38:ca:33:97:99:29:4a:ad:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c450b68759a988f00ba4b863e9dc5049a4154e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:0d:d7:1e:50:0a:a2:fd:f6:2e:02:15:4f:
4e:44:72:4f:9a:10:e1:0c:7c:d3:c1:37:a7:1a:c2:
30:5b:a6:f6:d8:09:bf:18:63:04:1d:59:76:cd:1e:
87:27:8a:de:b6:95:61:d6:d7:76:f1:b3:e6:a9:cc:
39:0e:6f:0c:1a:ed:77:55:60:01:2d:57:15:b2:01:
a3:0e:fb:a0:00:04:96:c1:f7:0e:96:74:6a:34:7d:
bb:23:69:d6:51:87:2c:79:23:31:cb:d1:17:ab:c7:
d0:1c:a6:79:3d:5f:20:91:79:55:11:fc:77:a8:3d:
0f:03:04:3a:7d:4f:00:89:4f:36:ed:36:72:b5:9d:
da:34:14:ae:93:fb:c9:70:64:20:32:60:d3:f6:ae:
8e:31:a8:8e:dd:b7:a6:6a:47:42:be:23:2c:35:d6:
cf:7a:7e:82:d9:9a:6f:b2:ee:34:70:c1:13:c3:a4:
23:4d:22:36:69:92:de:fc:97:59:29:e7:11:f6:47:
6c:f1:68:19:04:d5:c5:24:da:f7:35:53:ab:a5:89:
60:a1:fe:80:d6:80:ba:4b:24:bb:ab:e4:bc:c1:93:
79:36:fc:c6:35:67:c8:05:ee:e2:ca:e5:83:ce:1c:
b3:9d:92:ee:4a:c1:df:05:1a:7f:af:e0:b0:22:5b:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:50:B6:87:59:A9:88:F0:0B:A4:B8:63:E9:DC:50:49:A4:15:4E:5A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xFC2h1mpiPALpLhj6dxQSaQVTlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
33:a7:26:d6:e2:ae:73:b2:b0:1e:13:24:9d:b0:dd:8b:8d:9a:
f7:3c:4a:c0:14:6b:c8:43:f4:36:dd:5a:4f:63:c2:02:f3:b8:
50:dd:5a:42:6d:01:cc:89:33:4d:7b:81:f1:a5:4c:31:ec:49:
e6:75:88:ff:0d:71:56:b9:8f:33:49:35:f6:b1:31:a8:74:ac:
e8:30:8e:3f:66:4c:5b:ae:56:00:00:9a:55:b3:16:26:3e:7c:
16:a1:61:12:69:63:73:05:09:6a:9a:e4:83:76:49:33:9b:46:
75:c7:11:52:61:98:22:4e:cb:99:1b:13:6f:03:9d:25:fa:c8:
69:14:1a:50:e6:b9:d2:88:c3:fa:48:df:58:a2:e9:a5:5d:b1:
79:05:bc:b0:2b:08:d3:e0:ef:a2:9f:b9:cf:de:0f:8f:0a:8c:
95:14:c7:f4:f2:cf:1f:55:fa:25:a8:49:0a:3f:86:e6:64:f7:
54:62:24:b4:3f:0f:9e:18:49:dc:0c:98:3b:28:eb:b4:47:53:
94:f0:d3:8a:31:ab:05:fd:22:a0:8f:01:c3:77:7e:2f:81:71:
2f:ac:e0:d2:27:9c:6a:da:ca:33:25:35:55:30:4c:05:a9:c8:
06:c1:a9:5d:8f:c2:94:30:ec:65:63:98:3e:5a:02:32:92:39:
cf:51:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:35 2024 by rpki-client on console.sobornost.net