Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gMpFBzWuidHfBKpE90zj5gtBvnY.roa
File: gMpFBzWuidHfBKpE90zj5gtBvnY.roa (raw, json)
Hash identifier: R4uNViWxU219vZ5k5nmX0gg9ZlxI9Mr59iPrdcSTxK0=
Subject key identifier: 80:CA:45:07:35:AE:89:D1:DF:04:AA:44:F7:4C:E3:E6:0B:41:BE:76
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBCDAFB4FE4CDD39ACE9A53D35A617
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gMpFBzWuidHfBKpE90zj5gtBvnY.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396589
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cd:af:b4:fe:4c:dd:39:ac:e9:a5:3d:35:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80ca450735ae89d1df04aa44f74ce3e60b41be76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:20:ba:7e:3a:8d:88:47:45:5a:18:47:28:
ac:fd:e1:c4:76:b1:59:52:43:da:27:83:82:c9:48:
ac:f4:ff:74:fe:99:f6:78:1c:a7:5f:70:73:ba:36:
81:5f:86:1b:ae:40:86:cd:12:43:40:ab:e6:53:ee:
09:b5:68:20:ed:14:65:d3:f0:a1:f9:80:16:9a:c2:
4b:98:9a:5b:cd:c4:00:29:62:d0:a2:1b:15:e7:2c:
d5:79:c9:b1:82:71:fd:98:03:de:a6:cf:c5:f7:fe:
72:42:df:e5:ed:09:b2:1b:56:f3:a2:1f:35:f3:f3:
87:d1:a7:33:41:07:e0:38:28:d3:38:75:3f:80:e7:
bc:e1:9a:3a:59:94:30:05:30:62:e5:7f:b5:43:fe:
d5:d2:48:ed:51:64:f8:cd:72:88:62:dd:b3:40:27:
27:b8:cb:85:2f:ef:0a:a3:73:c9:2a:58:d7:43:b8:
8b:73:67:e6:9f:8f:a8:c5:55:91:5e:34:20:58:1d:
34:c1:db:7d:e7:f4:16:42:a2:fd:64:2e:e1:64:0e:
c1:44:64:17:05:35:4f:62:ad:56:d7:79:26:89:f7:
b5:a1:55:ec:84:6f:48:e3:8b:2e:c3:2f:be:34:70:
04:55:8c:23:21:4d:5d:c7:88:73:2b:8d:27:c1:0c:
69:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CA:45:07:35:AE:89:D1:DF:04:AA:44:F7:4C:E3:E6:0B:41:BE:76
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gMpFBzWuidHfBKpE90zj5gtBvnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
23:7f:71:b6:9f:67:0d:4c:25:77:af:72:75:dd:90:e0:d3:8f:
99:71:8e:a2:57:25:55:3b:f2:1a:26:9d:ca:12:59:71:3c:31:
03:e8:5d:1e:70:20:c4:ea:e5:2d:85:46:3b:10:a9:04:ab:9e:
14:2b:ba:4c:7e:d9:6a:cb:ef:cb:a7:27:8b:b6:16:d5:36:34:
d6:03:d1:7b:87:55:95:08:1c:61:d8:32:6d:4e:cb:5a:1d:2f:
52:cd:ad:b4:a5:57:3d:81:74:2b:bc:3e:ef:d0:07:c0:17:ed:
18:ba:f8:60:cc:19:53:3c:b2:81:af:52:34:d2:cc:64:e8:7d:
05:98:16:30:eb:ad:90:89:53:09:2c:d1:d1:52:f0:00:34:48:
11:84:4b:19:73:d7:77:a3:9d:cf:81:0b:01:b7:8b:18:71:0e:
64:3d:3c:9c:bd:40:ee:41:7e:91:e9:7c:5b:f0:ba:44:e7:c1:
a6:1d:77:3d:d1:98:62:d2:40:3b:4e:b9:47:4e:10:e9:a5:23:
f6:67:98:69:4c:41:e6:83:f6:2a:a6:5e:8a:ad:b5:51:7e:4e:
45:01:ae:01:8a:0b:b4:28:c1:2f:f0:68:d1:d7:0b:27:13:c5:
9a:82:0d:71:d9:e3:83:13:1f:d1:73:0f:fb:0b:3d:d2:54:2e:
e7:d7:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:03 2025 by rpki-client