Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LcIFwiOlYg4_hdcTl7v_1cX_saM.roa
File: LcIFwiOlYg4_hdcTl7v_1cX_saM.roa (raw, json)
Hash identifier: jJ48n21fhZ+NVOFGlzpy9GcyT1OKBkkFebMn5P4zrP8=
Subject key identifier: 2D:C2:05:C2:23:A5:62:0E:3F:85:D7:13:97:BB:FF:D5:C5:FF:B1:A3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEFD1115E2D7088B701CE27EB8E64A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LcIFwiOlYg4_hdcTl7v_1cX_saM.roa
Signing time: Tue 26 Nov 2024 13:35:18 +0000
ROA not before: Tue 26 Nov 2024 13:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396581
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:fd:11:15:e2:d7:08:8b:70:1c:e2:7e:b8:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dc205c223a5620e3f85d71397bbffd5c5ffb1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:67:ab:30:92:6b:19:cc:55:36:5d:3c:09:
ee:92:bd:f7:9e:69:8f:57:50:cc:f9:70:87:2a:b2:
3b:15:a0:f0:a4:58:f1:35:fe:24:1c:e7:b3:56:18:
92:57:cd:9e:c6:0f:12:84:a7:47:09:f4:64:ef:a3:
1a:3d:40:a7:ab:83:c3:71:56:0a:a8:05:3b:22:47:
4a:20:48:ca:52:ae:2e:7e:7e:48:2c:e7:ee:18:a0:
b3:b5:18:6e:72:f2:0b:d6:a7:8b:8d:46:dc:68:07:
86:5d:94:56:f7:f8:61:c9:13:96:2c:c9:e4:43:6c:
89:b4:bc:ab:d7:df:4a:54:ef:c4:6e:74:db:3d:c6:
58:e6:a5:75:83:76:b8:1d:3f:a8:16:0f:19:0d:c5:
91:d1:34:8a:84:e0:8b:fc:33:b2:5d:dd:c9:5a:61:
53:45:af:fc:73:6f:a6:7e:b7:65:a8:1b:d6:06:d8:
1b:b0:73:e8:b6:63:d8:16:10:ac:1b:3c:5c:f1:d3:
05:a9:c7:60:04:62:e8:30:a9:d0:74:86:7a:40:ae:
d0:45:2e:05:2e:66:a0:db:f7:95:6f:f9:37:bc:96:
42:50:30:8e:73:70:df:61:b5:b2:a2:a2:c4:71:bb:
ea:a8:21:b1:95:b6:74:bf:f1:e7:ff:91:70:bb:54:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C2:05:C2:23:A5:62:0E:3F:85:D7:13:97:BB:FF:D5:C5:FF:B1:A3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LcIFwiOlYg4_hdcTl7v_1cX_saM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
4c:8d:f1:76:45:92:97:83:fe:ae:18:93:66:fc:f5:55:94:d5:
85:46:69:cc:42:e6:c8:12:ec:60:9f:de:db:1b:48:df:d4:7d:
3d:a2:65:0c:bb:1a:15:b7:86:f4:e7:72:d3:1e:c6:ac:44:54:
e9:60:93:d7:32:56:66:18:d1:c2:e7:94:8d:6d:53:4c:49:ff:
c2:8b:63:17:2f:0e:b0:56:ae:b1:2c:ae:e1:ef:e1:29:07:d7:
96:fe:48:74:d3:53:56:a6:b1:eb:0d:e3:f4:21:47:ad:6b:98:
85:a2:06:2a:bc:ad:39:16:51:62:e7:c2:35:88:1d:48:44:cc:
10:ac:a9:f9:04:8a:eb:4f:9e:cd:30:e3:e1:7c:3c:ae:64:c4:
38:22:81:14:3b:94:1f:21:17:b8:3b:04:bd:16:29:59:97:8c:
0f:60:53:d3:71:69:ae:63:ff:a3:ec:8a:1c:63:a0:49:cd:7e:
f9:ae:b7:43:c4:26:d2:b9:1c:85:8c:da:32:92:74:3b:10:95:
7c:d1:be:05:75:c9:38:34:69:0b:bc:e7:da:f0:34:d0:88:df:
0b:88:3d:3f:77:96:6b:8e:e6:22:5d:86:47:7c:61:ca:c6:0d:
af:ab:74:40:48:ad:db:2b:cc:21:d0:2e:f2:4a:dd:94:15:2c:
43:1e:ad:51
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorv0RFeLXCItwHOJ+uOZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGMyMDVjMjIzYTU2MjBlM2Y4NWQ3MTM5N2JiZmZkNWM1ZmZiMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSpnqzCSaxnMVTZdPAnukr33nmmP
V1DM+XCHKrI7FaDwpFjxNf4kHOezVhiSV82exg8ShKdHCfRk76MaPUCnq4PDcVYK
qAU7IkdKIEjKUq4ufn5ILOfuGKCztRhucvIL1qeLjUbcaAeGXZRW9/hhyROWLMnk
Q2yJtLyr199KVO/EbnTbPcZY5qV1g3a4HT+oFg8ZDcWR0TSKhOCL/DOyXd3JWmFT
Ra/8c2+mfrdlqBvWBtgbsHPotmPYFhCsGzxc8dMFqcdgBGLoMKnQdIZ6QK7QRS4F
Lmag2/eVb/k3vJZCUDCOc3DfYbWyoqLEcbvqqCGxlbZ0v/Hn/5Fwu1Q4xQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFC3CBcIjpWIOP4XXE5e7/9XF/7GjMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvTGNJRndpT2xZZzRfaGRjVGw3dl8xY1hfc2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAEyN8XZFkpeD/q4Yk2b89VWU1YVGacxC
5sgS7GCf3tsbSN/UfT2iZQy7GhW3hvTnctMexqxEVOlgk9cyVmYY0cLnlI1tU0xJ
/8KLYxcvDrBWrrEsruHv4SkH15b+SHTTU1amsesN4/QhR61rmIWiBiq8rTkWUWLn
wjWIHUhEzBCsqfkEiutPns0w4+F8PK5kxDgigRQ7lB8hF7g7BL0WKVmXjA9gU9Nx
aa5j/6PsihxjoEnNfvmut0PEJtK5HIWM2jKSdDsQlXzRvgV1yTg0aQu859rwNNCI
3wuIPT93lmuO5iJdhkd8YcrGDa+rdEBIrdsrzCHQLvJK3ZQVLEMerVE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:46 2025 by rpki-client