Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JWeXe6Jz-6Lf7LQvYC09T2CoOxo.roa
File: JWeXe6Jz-6Lf7LQvYC09T2CoOxo.roa (raw, json)
Hash identifier: JWztrJId5Fm8Gwlk0BZI4AHwmwRALcrIENGQDxC2oKs=
Subject key identifier: 25:67:97:7B:A2:73:FB:A2:DF:EC:B4:2F:60:2D:3D:4F:60:A8:3B:1A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF2C48A2E5C535CC0F33C198A39B0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JWeXe6Jz-6Lf7LQvYC09T2CoOxo.roa
Signing time: Tue 26 Nov 2024 13:35:16 +0000
ROA not before: Tue 26 Nov 2024 13:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396559
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f2:c4:8a:2e:5c:53:5c:c0:f3:3c:19:8a:39:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2567977ba273fba2dfecb42f602d3d4f60a83b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:7d:a7:f8:6c:26:a4:4d:e5:fd:c3:0f:49:
be:65:f4:b7:00:d3:15:08:8f:44:de:1b:af:e6:e6:
7c:9a:fb:17:b7:2c:1a:64:4a:fb:56:7d:2a:55:03:
83:60:65:ff:c2:0b:0c:dc:0e:98:73:94:53:42:da:
82:4b:74:e0:bc:2b:59:fb:25:0b:e5:3d:5d:a1:75:
31:a9:16:ff:66:65:dd:08:da:92:95:0d:ed:05:6f:
45:d1:14:e3:e5:d3:ab:ee:68:48:0a:e4:ef:d8:70:
f5:d1:d9:63:79:d7:25:38:9c:79:eb:f2:42:ae:32:
9b:c0:da:08:25:a0:82:e2:fe:57:da:dc:78:4b:29:
18:7f:5f:c0:3d:45:8d:9a:af:63:ab:fa:df:a0:2c:
34:b6:bf:d4:14:c6:83:36:8c:3a:b4:5d:72:29:88:
b3:da:c4:50:f5:9c:96:7b:21:4b:12:99:0a:60:5c:
04:03:ff:3f:6f:90:a0:a5:0d:5f:4a:b2:c3:45:74:
ae:21:7c:b2:98:45:b1:3b:96:d7:60:90:3e:62:0e:
97:7d:7f:6e:fb:ce:e7:9a:1c:08:8d:94:4b:eb:89:
d4:5b:2a:1d:6b:6d:f3:e4:43:70:05:a5:57:e7:2e:
98:65:86:b4:59:15:34:ff:04:ca:e3:9f:9b:79:95:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:97:7B:A2:73:FB:A2:DF:EC:B4:2F:60:2D:3D:4F:60:A8:3B:1A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JWeXe6Jz-6Lf7LQvYC09T2CoOxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
87:f8:98:5c:30:bd:27:51:09:8b:b3:d3:e7:ce:e6:8a:ea:40:
05:7f:53:33:d4:57:e0:83:18:98:a7:be:62:bf:29:41:6c:45:
ea:df:6e:91:66:4a:6a:27:be:5a:fa:0d:e7:ba:0d:84:b6:25:
0c:5c:16:95:a6:2c:00:48:8f:c1:d4:27:36:81:bd:62:2b:83:
ad:42:ad:b2:10:81:e7:40:25:3f:97:fa:54:54:62:ca:0f:7a:
5e:cc:00:7b:2b:94:65:b9:c2:dc:34:0c:30:4c:d7:86:9d:56:
76:68:48:7f:63:df:27:b8:c1:6a:87:06:aa:7c:55:2e:97:73:
39:6d:bc:f8:b3:74:1e:b6:28:74:08:81:ef:0f:78:8d:0b:28:
9f:19:f6:b0:45:07:b5:83:61:b5:15:6a:60:8c:af:a4:34:97:
ba:c6:c0:32:33:fb:bf:a5:2a:a4:18:39:8d:9c:8e:37:07:76:
54:4e:a4:09:a5:9e:6b:8c:7c:60:a2:74:3d:16:24:3d:be:33:
e0:f4:36:4d:41:01:20:be:76:d8:c6:a2:ba:2b:07:dc:94:78:
8e:fc:22:30:6c:e4:01:90:65:63:2f:87:6b:2b:cf:95:f2:db:
11:97:3c:37:4f:8d:cf:e8:dc:1c:59:b6:b4:e0:7e:c2:64:2f:
61:b0:c7:13
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorvLEii5cU1zA8zwZijmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTY3OTc3YmEyNzNmYmEyZGZlY2I0MmY2MDJkM2Q0ZjYwYTgzYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW59p/hsJqRN5f3DD0m+ZfS3ANMV
CI9E3huv5uZ8mvsXtywaZEr7Vn0qVQODYGX/wgsM3A6Yc5RTQtqCS3TgvCtZ+yUL
5T1doXUxqRb/ZmXdCNqSlQ3tBW9F0RTj5dOr7mhICuTv2HD10dljedclOJx56/JC
rjKbwNoIJaCC4v5X2tx4SykYf1/APUWNmq9jq/rfoCw0tr/UFMaDNow6tF1yKYiz
2sRQ9ZyWeyFLEpkKYFwEA/8/b5CgpQ1fSrLDRXSuIXyymEWxO5bXYJA+Yg6XfX9u
+87nmhwIjZRL64nUWyoda23z5ENwBaVX5y6YZYa0WRU0/wTK45+beZUDiQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFCVnl3uic/ui3+y0L2AtPU9gqDsaMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvSldlWGU2SnotNkxmN0xRdllDMDlUMkNvT3hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAIf4mFwwvSdRCYuz0+fO5orqQAV/UzPU
V+CDGJinvmK/KUFsRerfbpFmSmonvlr6Dee6DYS2JQxcFpWmLABIj8HUJzaBvWIr
g61CrbIQgedAJT+X+lRUYsoPel7MAHsrlGW5wtw0DDBM14adVnZoSH9j3ye4wWqH
Bqp8VS6XczltvPizdB62KHQIge8PeI0LKJ8Z9rBFB7WDYbUVamCMr6Q0l7rGwDIz
+7+lKqQYOY2cjjcHdlROpAmlnmuMfGCidD0WJD2+M+D0Nk1BASC+dtjGororB9yU
eI78IjBs5AGQZWMvh2srz5Xy2xGXPDdPjc/o3BxZtrTgfsJkL2GwxxM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:30 2025 by rpki-client