Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6aDOKlyiFV6moQPOemxYAZUy9Ls.roa
File: 6aDOKlyiFV6moQPOemxYAZUy9Ls.roa (raw, json)
Hash identifier: g0P0Pkbms2mie5IMyJfagTdR0S2of9fspZygeRFrk2Q=
Subject key identifier: E9:A0:CE:2A:5C:A2:15:5E:A6:A1:03:CE:7A:6C:58:01:95:32:F4:BB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEFE75AE34BEE4E77A44516ABBE022
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6aDOKlyiFV6moQPOemxYAZUy9Ls.roa
Signing time: Tue 26 Nov 2024 13:35:19 +0000
ROA not before: Tue 26 Nov 2024 13:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396583
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:fe:75:ae:34:be:e4:e7:7a:44:51:6a:bb:e0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9a0ce2a5ca2155ea6a103ce7a6c58019532f4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:ef:97:18:8b:53:1f:f2:7e:fb:38:a2:32:
c6:0f:4e:97:40:7c:16:2c:74:cb:5c:41:21:8f:d6:
70:f0:5d:9d:6f:06:f7:8e:8e:48:26:b8:32:79:13:
d1:45:fd:80:c1:cf:83:dc:3e:0c:90:82:c4:68:ff:
33:54:51:6b:c4:fa:b3:d0:af:16:a0:52:45:9f:a0:
20:a8:2d:4c:ec:0e:dd:cb:37:11:83:3f:c2:49:ea:
44:19:8f:c7:4f:d8:b0:92:23:e3:ee:2d:36:a1:fb:
10:bf:77:f2:b9:d5:b2:55:af:c5:c4:31:38:68:3f:
3a:5d:a3:df:8d:c9:21:70:5f:0a:15:83:f8:73:99:
29:a4:4b:9d:96:58:fb:1a:d8:ef:0e:fa:b6:0b:0e:
47:19:03:70:cb:17:9f:da:d9:4d:5d:42:fa:a1:d1:
4a:f7:d2:ab:26:d2:75:5f:01:20:bf:d4:2a:04:13:
78:ad:38:b5:0d:22:49:a0:c4:18:b5:72:22:ce:af:
2e:67:d2:a7:0e:5b:9c:71:1b:e7:05:99:99:03:5a:
24:8c:9c:06:92:e3:00:a3:f9:60:78:8c:55:a3:bf:
a6:cb:c5:92:7a:28:50:cd:d1:01:f3:ab:c3:50:78:
1b:13:d2:5b:52:f5:95:7d:b4:8a:a9:38:e4:7a:dc:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A0:CE:2A:5C:A2:15:5E:A6:A1:03:CE:7A:6C:58:01:95:32:F4:BB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6aDOKlyiFV6moQPOemxYAZUy9Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
79:1c:82:3e:c5:25:8d:88:c1:f2:da:7e:84:47:95:34:81:a4:
13:bf:29:fb:ea:56:e4:ef:d0:f3:77:15:28:e2:bd:31:be:98:
d8:53:53:28:43:b9:46:f2:70:ce:c1:9c:ce:b6:10:ac:65:cb:
36:88:fd:6c:31:95:f2:3f:a1:99:4e:ff:fa:b5:2b:52:73:01:
3c:11:bc:51:d5:aa:8c:d9:e3:5a:c6:86:7b:71:92:5a:21:73:
33:93:65:03:92:24:fe:73:03:41:cf:5d:e1:18:a0:a6:48:cd:
0e:0c:36:35:4f:73:be:52:23:b2:a8:74:4d:08:cd:60:4f:55:
30:c0:6e:e3:66:79:8a:47:e7:1b:82:02:00:89:96:7d:bc:0c:
49:7c:9d:d0:b0:0f:5e:dd:71:56:7d:1a:4f:92:eb:d9:06:c2:
4f:4c:c5:6f:c1:3a:f2:22:6b:ed:80:1d:1c:d1:1f:5e:9f:df:
c0:a5:37:19:c8:ea:8c:2e:01:a0:24:9c:d2:ad:d7:0f:d2:14:
b9:15:e3:a7:ce:bd:13:e4:a5:fa:37:9c:16:b9:e7:8d:a5:d9:
e5:04:76:c3:b0:1a:59:17:0c:5c:c7:30:ff:f3:58:cd:0e:df:
b6:7c:ac:3b:1b:5b:35:79:5f:c7:29:56:0f:aa:df:94:ba:6b:
32:9b:de:a2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorv51rjS+5Od6RFFqu+AiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWEwY2UyYTVjYTIxNTVlYTZhMTAzY2U3YTZjNTgwMTk1MzJmNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG3vlxiLUx/yfvs4ojLGD06XQHwW
LHTLXEEhj9Zw8F2dbwb3jo5IJrgyeRPRRf2Awc+D3D4MkILEaP8zVFFrxPqz0K8W
oFJFn6AgqC1M7A7dyzcRgz/CSepEGY/HT9iwkiPj7i02ofsQv3fyudWyVa/FxDE4
aD86XaPfjckhcF8KFYP4c5kppEudllj7GtjvDvq2Cw5HGQNwyxef2tlNXUL6odFK
99KrJtJ1XwEgv9QqBBN4rTi1DSJJoMQYtXIizq8uZ9KnDluccRvnBZmZA1okjJwG
kuMAo/lgeIxVo7+my8WSeihQzdEB86vDUHgbE9JbUvWVfbSKqTjketzaswIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOmgzipcohVepqEDznpsWAGVMvS7MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvNmFET0tseWlGVjZtb1FQT2VteFlBWlV5OUxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAHkcgj7FJY2IwfLafoRHlTSBpBO/Kfvq
VuTv0PN3FSjivTG+mNhTUyhDuUbycM7BnM62EKxlyzaI/WwxlfI/oZlO//q1K1Jz
ATwRvFHVqozZ41rGhntxklohczOTZQOSJP5zA0HPXeEYoKZIzQ4MNjVPc75SI7Ko
dE0IzWBPVTDAbuNmeYpH5xuCAgCJln28DEl8ndCwD17dcVZ9Gk+S69kGwk9MxW/B
OvIia+2AHRzRH16f38ClNxnI6owuAaAknNKt1w/SFLkV46fOvRPkpfo3nBa5542l
2eUEdsOwGlkXDFzHMP/zWM0O37Z8rDsbWzV5X8cpVg+q35S6azKb3qI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:01 2025 by rpki-client