Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ROCFQTbBLT8kZBfF4EDXc2DcBNY.roa
File: ROCFQTbBLT8kZBfF4EDXc2DcBNY.roa (raw, json)
Hash identifier: ntuOlPpbDbQEuJ2H0HiISNfqBaZqfrQGVrfS/S5ht6g=
Subject key identifier: 44:E0:85:41:36:C1:2D:3F:24:64:17:C5:E0:40:D7:73:60:DC:04:D6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF0481F73A20CC5E46FFCAFFE5DDA
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ROCFQTbBLT8kZBfF4EDXc2DcBNY.roa
Signing time: Tue 26 Nov 2024 13:35:15 +0000
ROA not before: Tue 26 Nov 2024 13:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396550
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f0:48:1f:73:a2:0c:c5:e4:6f:fc:af:fe:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44e0854136c12d3f246417c5e040d77360dc04d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:e2:a8:8a:d4:74:ce:d4:4a:06:df:e8:81:
41:ea:b3:8b:3b:53:f1:7c:d7:d5:01:f0:a2:e5:b2:
62:3f:1f:a0:b1:88:b3:12:9c:0d:8a:16:f0:9b:8f:
e5:5d:fa:85:7f:f3:0b:09:bb:42:cd:8b:91:47:7b:
2a:0e:b1:3f:6d:65:18:78:aa:33:c3:99:22:a3:8c:
8e:c3:a8:2d:3a:0b:08:fe:11:af:f0:5c:5c:ec:a5:
f7:2a:6b:04:d4:04:10:a3:6c:8d:c3:1d:6c:8d:f3:
86:46:68:7d:db:b9:61:03:e2:9b:8f:76:a1:61:db:
1e:f0:0e:cc:32:8d:4d:72:7c:f5:0b:34:97:9b:ee:
b5:ad:81:bf:a5:f9:97:c0:9a:88:d5:b4:63:7c:86:
f0:9b:b7:b6:17:97:57:dd:63:65:72:43:77:73:07:
3c:d9:01:79:92:21:fb:4d:2b:f0:18:75:a5:a6:84:
95:da:23:c3:9a:40:25:97:a6:35:d9:03:40:1b:e2:
7a:12:27:a9:e8:5c:e2:a4:f0:64:28:5e:ad:0e:cd:
27:e8:bd:d9:ca:4a:80:33:71:70:a1:d4:2b:40:12:
39:5b:92:dc:7e:2d:7d:20:1f:8e:9d:2d:26:76:99:
8e:ed:f2:37:87:b0:17:32:1d:bc:80:d6:4b:0f:75:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E0:85:41:36:C1:2D:3F:24:64:17:C5:E0:40:D7:73:60:DC:04:D6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ROCFQTbBLT8kZBfF4EDXc2DcBNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
05:fa:10:85:a3:10:c2:c3:21:27:4d:bb:dd:2c:e7:e9:ca:b8:
be:5a:2a:6e:3a:d5:55:5c:d5:fb:30:31:9e:54:3b:0a:fd:36:
99:b3:e0:98:a5:56:a2:9f:3c:99:aa:f4:3c:41:e5:2f:89:e4:
f4:b5:67:02:74:2d:35:55:58:a8:4c:ef:86:5b:3f:b9:67:04:
9f:ba:c1:6e:26:80:f7:25:af:23:40:9a:0b:e4:93:0c:90:86:
22:f5:38:33:45:23:a0:d0:79:c3:dd:fb:d6:2e:89:d7:a6:2b:
07:19:b9:83:a1:18:d9:60:bd:a6:4c:d5:6d:a4:94:f7:ca:53:
6b:c2:03:a3:40:f5:af:16:79:2b:a9:0d:7d:06:c3:50:a0:d4:
11:1e:97:63:61:0f:e8:e2:82:99:b9:5d:df:02:6c:40:67:f6:
e0:6f:0a:77:2e:e4:b3:b3:44:65:5b:08:34:a5:bc:5e:60:88:
e8:94:e5:9c:5c:b4:25:2f:24:c5:1f:4b:10:08:0f:7f:1d:1e:
f3:22:49:1d:36:a1:0b:7b:3f:9a:0d:ac:1b:f8:f9:76:8e:65:
85:db:33:91:c9:62:3a:2e:07:fe:cc:fa:e2:6f:32:56:9d:0b:
e6:68:2a:64:6d:7a:22:d4:39:c2:39:e2:fa:b7:be:5f:9c:b3:
18:9d:3a:c6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorvBIH3OiDMXkb/yv/l3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGUwODU0MTM2YzEyZDNmMjQ2NDE3YzVlMDQwZDc3MzYwZGMwNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZTiqIrUdM7USgbf6IFB6rOLO1Px
fNfVAfCi5bJiPx+gsYizEpwNihbwm4/lXfqFf/MLCbtCzYuRR3sqDrE/bWUYeKoz
w5kio4yOw6gtOgsI/hGv8Fxc7KX3KmsE1AQQo2yNwx1sjfOGRmh927lhA+Kbj3ah
Ydse8A7MMo1Ncnz1CzSXm+61rYG/pfmXwJqI1bRjfIbwm7e2F5dX3WNlckN3cwc8
2QF5kiH7TSvwGHWlpoSV2iPDmkAll6Y12QNAG+J6Eiep6FzipPBkKF6tDs0n6L3Z
ykqAM3FwodQrQBI5W5Lcfi19IB+OnS0mdpmO7fI3h7AXMh28gNZLD3XwtQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFETghUE2wS0/JGQXxeBA13Ng3ATWMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvUk9DRlFUYkJMVDhrWkJmRjRFRFhjMkRjQk5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAAX6EIWjEMLDISdNu90s5+nKuL5aKm46
1VVc1fswMZ5UOwr9Npmz4JilVqKfPJmq9DxB5S+J5PS1ZwJ0LTVVWKhM74ZbP7ln
BJ+6wW4mgPclryNAmgvkkwyQhiL1ODNFI6DQecPd+9YuidemKwcZuYOhGNlgvaZM
1W2klPfKU2vCA6NA9a8WeSupDX0Gw1Cg1BEel2NhD+jigpm5Xd8CbEBn9uBvCncu
5LOzRGVbCDSlvF5giOiU5ZxctCUvJMUfSxAID38dHvMiSR02oQt7P5oNrBv4+XaO
ZYXbM5HJYjouB/7M+uJvMladC+ZoKmRteiLUOcI54vq3vl+csxidOsY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:38 2025 by rpki-client