Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/H01lULLcXohR0EYDbxxlIlL_QJA.roa
File: H01lULLcXohR0EYDbxxlIlL_QJA.roa (raw, json)
Hash identifier: SDEJBhi84isMX6M2/YBA2RDz50bbzvQSE0ZKKswkoBk=
Subject key identifier: 1F:4D:65:50:B2:DC:5E:88:51:D0:46:03:6F:1C:65:22:52:FF:40:90
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF0B12404D88A8719FCC38399D8189
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/H01lULLcXohR0EYDbxxlIlL_QJA.roa
Signing time: Tue 26 Nov 2024 13:35:22 +0000
ROA not before: Tue 26 Nov 2024 13:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396611
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:0b:12:40:4d:88:a8:71:9f:cc:38:39:9d:81:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f4d6550b2dc5e8851d046036f1c652252ff4090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:a9:f1:c1:f6:52:9b:90:4b:e4:05:bb:dd:
58:da:33:04:4f:bc:03:cd:aa:02:30:e1:67:e6:5f:
d4:44:e9:c1:c4:69:e6:49:24:46:ef:75:62:21:07:
97:89:d3:6c:e6:0a:ef:25:56:98:54:b7:67:4f:54:
ab:c7:bd:a1:49:67:96:1d:e3:12:14:1c:38:06:d0:
41:9c:69:a4:b2:44:40:a9:77:96:ce:f8:ab:42:c1:
46:f7:41:f9:45:1c:1f:5b:a0:26:0d:79:fa:2c:78:
a2:e8:b0:73:13:13:82:a1:9e:36:32:f5:a2:59:51:
a1:8b:f0:85:d9:e3:06:e3:b1:10:0a:bd:2a:9e:e7:
09:40:47:b4:be:8b:e4:e2:d0:31:fa:88:bb:65:22:
c6:c0:a4:3e:c6:d1:a5:48:4f:e3:80:94:aa:7c:ce:
ec:f6:cf:be:9a:40:3b:68:5c:74:56:7a:e0:5a:cf:
cf:2d:bf:f3:7f:3d:b2:6f:f6:71:6e:93:8b:aa:23:
bb:ff:67:5f:36:5b:0c:58:44:b6:1b:86:88:13:88:
33:72:3b:16:56:31:f7:ed:a1:c8:01:36:ec:5d:7f:
51:a8:7f:15:b3:be:f8:f7:c8:bf:f2:28:6e:3b:6b:
28:07:ab:ee:87:ec:07:9f:68:92:6f:61:25:f2:3a:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:65:50:B2:DC:5E:88:51:D0:46:03:6F:1C:65:22:52:FF:40:90
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/H01lULLcXohR0EYDbxxlIlL_QJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
09:dd:ae:d2:5d:7a:65:35:91:a9:5f:54:20:32:df:ab:ac:f6:
c4:ed:48:e9:d8:95:14:f3:cb:58:2b:72:61:cf:f0:0b:38:21:
bd:39:13:6e:9c:42:cc:dc:bd:0f:14:a2:3f:a4:ea:a5:c6:75:
b1:5e:1e:ee:30:3f:32:af:29:2d:bc:ec:78:df:c7:57:74:61:
74:21:20:d1:74:95:bd:41:5a:f7:cd:8c:51:1c:ac:87:40:86:
fc:c0:0f:df:f4:ab:93:10:0f:f7:5b:b2:fc:e6:7e:dc:9c:a8:
4f:9e:7b:43:30:35:af:82:3e:36:48:f2:73:12:2b:6c:5a:52:
22:ad:cd:4a:1f:3a:e4:65:28:e3:05:92:a6:51:a6:32:7a:ce:
28:2d:4a:ab:ad:b1:97:ce:4f:c6:7d:09:ee:83:85:96:4f:ba:
af:d0:6d:78:dc:fa:cc:5a:33:c2:18:d7:9c:b5:9a:8b:be:1d:
8d:51:4c:55:a2:8c:9d:b2:ba:03:a4:dc:d2:9c:0a:6e:91:80:
24:ee:b1:a9:7f:0c:40:bb:6c:24:4e:40:61:98:9d:52:cd:bd:
7b:9f:bc:fb:04:3d:20:14:72:fd:49:ac:51:cf:44:b9:b9:f5:
8f:01:21:52:16:dc:55:70:21:cf:aa:77:fa:3b:41:2a:f2:16:
03:84:fc:e5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorwsSQE2IqHGfzDg5nYGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjRkNjU1MGIyZGM1ZTg4NTFkMDQ2MDM2ZjFjNjUyMjUyZmY0MDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv2p8cH2UpuQS+QFu91Y2jMET7wD
zaoCMOFn5l/UROnBxGnmSSRG73ViIQeXidNs5grvJVaYVLdnT1Srx72hSWeWHeMS
FBw4BtBBnGmkskRAqXeWzvirQsFG90H5RRwfW6AmDXn6LHii6LBzExOCoZ42MvWi
WVGhi/CF2eMG47EQCr0qnucJQEe0vovk4tAx+oi7ZSLGwKQ+xtGlSE/jgJSqfM7s
9s++mkA7aFx0VnrgWs/PLb/zfz2yb/ZxbpOLqiO7/2dfNlsMWES2G4aIE4gzcjsW
VjH37aHIATbsXX9RqH8Vs77498i/8ihuO2soB6vuh+wHn2iSb2El8jrqMQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFB9NZVCy3F6IUdBGA28cZSJS/0CQMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvSDAxbFVMTGNYb2hSMEVZRGJ4eGxJbExfUUpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAAndrtJdemU1kalfVCAy36us9sTtSOnY
lRTzy1grcmHP8As4Ib05E26cQszcvQ8Uoj+k6qXGdbFeHu4wPzKvKS287Hjfx1d0
YXQhINF0lb1BWvfNjFEcrIdAhvzAD9/0q5MQD/dbsvzmftycqE+ee0MwNa+CPjZI
8nMSK2xaUiKtzUofOuRlKOMFkqZRpjJ6zigtSqutsZfOT8Z9Ce6DhZZPuq/QbXjc
+sxaM8IY15y1mou+HY1RTFWijJ2yugOk3NKcCm6RgCTusal/DEC7bCROQGGYnVLN
vXufvPsEPSAUcv1JrFHPRLm59Y8BIVIW3FVwIc+qd/o7QSryFgOE/OU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:27 2025 by rpki-client