Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SKIOvrFCsBfdmcbXOMsNJbJvkFo.roa
File: SKIOvrFCsBfdmcbXOMsNJbJvkFo.roa (raw, json)
Hash identifier: 0UJo7IxhZMYcrO6AJWtQBXTZLH6L1c59AN6GTJq1WTI=
Subject key identifier: 48:A2:0E:BE:B1:42:B0:17:DD:99:C6:D7:38:CB:0D:25:B2:6F:90:5A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEF59CF1C4BECB0577CBB626A2A7A8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SKIOvrFCsBfdmcbXOMsNJbJvkFo.roa
Signing time: Tue 26 Nov 2024 13:35:16 +0000
ROA not before: Tue 26 Nov 2024 13:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396566
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:f5:9c:f1:c4:be:cb:05:77:cb:b6:26:a2:a7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48a20ebeb142b017dd99c6d738cb0d25b26f905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:eb:06:12:92:4c:7d:c2:13:ba:5f:a4:b7:
00:71:54:dd:e0:51:f8:42:a6:3e:36:e0:f6:31:d8:
f0:70:29:15:bc:2b:67:14:ac:16:d5:b9:fd:98:7e:
9c:e9:ba:eb:a4:94:8b:90:c7:4d:83:8b:86:83:3b:
ca:b3:bf:20:da:ff:b0:3c:a6:b1:c5:80:2c:e0:97:
9f:f6:df:95:7d:14:25:78:11:55:63:37:9a:1f:bf:
62:9f:f0:24:33:9c:4b:20:6b:a5:dd:4d:c9:af:6c:
d0:1a:cd:0d:7d:e2:db:52:7c:ce:c2:52:27:1b:bb:
9e:9f:61:f7:11:6d:90:0b:18:9e:51:90:8f:3d:8f:
9b:44:6f:08:55:7b:7e:18:68:dc:ab:6e:cc:14:02:
bc:a3:5b:1f:45:7f:95:3c:a0:6c:ed:02:f1:43:6c:
71:7e:31:a6:f0:95:b9:97:ca:8c:cf:7d:08:a7:f5:
0c:da:17:45:25:58:81:36:5e:04:83:d9:24:2b:cf:
29:ad:78:dc:2c:ca:17:96:4e:54:92:77:dd:ec:43:
44:87:44:c7:59:73:5a:62:8b:b5:21:29:62:ea:e7:
26:14:f0:3f:7c:05:c3:09:1d:79:8e:8f:fc:51:d9:
1a:c9:ef:65:5d:38:9b:2d:4a:dd:29:b9:33:b0:a6:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:0E:BE:B1:42:B0:17:DD:99:C6:D7:38:CB:0D:25:B2:6F:90:5A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/SKIOvrFCsBfdmcbXOMsNJbJvkFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
92:57:a9:ec:fb:4d:1b:79:83:a4:fd:2c:a8:8e:bd:5b:60:e6:
3f:d4:4d:fa:58:0a:3d:19:16:9f:75:dd:40:6c:39:6f:89:2e:
79:4d:2f:cf:04:d8:9c:36:15:57:94:6b:38:56:67:81:63:81:
7a:a3:bb:10:af:f4:80:50:1e:37:fc:e8:4e:c2:56:56:53:76:
a0:54:86:16:06:f1:7f:cf:3e:85:15:21:1f:18:d5:5d:24:e2:
f9:08:d6:09:b9:5a:cf:63:0f:2d:2d:98:53:4a:ef:09:14:b0:
11:29:ce:d4:d1:ad:81:49:43:99:bc:87:5b:28:6d:67:65:9e:
7f:d2:63:53:a6:9e:cd:46:d0:12:58:d9:1f:b5:f5:4d:54:1a:
c7:bc:c8:93:bb:18:89:72:47:44:ef:a4:08:1a:cf:20:76:bb:
fe:28:7f:dd:80:0c:ce:04:37:80:60:b8:47:7f:3f:fe:b7:cc:
f0:ed:bc:9f:c8:67:fe:70:ec:3b:27:17:c0:cf:4d:61:97:68:
4c:7a:2a:f9:ca:36:74:33:a0:ca:f0:e5:f3:b9:6f:41:5c:59:
46:8d:d6:5e:ac:09:53:18:d9:06:0b:a7:01:b7:2d:bd:5f:d4:
0c:29:e3:f5:3a:0d:fb:e5:42:ca:0e:82:eb:25:d7:73:4e:fa:
53:5c:b1:dc
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorvWc8cS+ywV3y7YmoqeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGEyMGViZWIxNDJiMDE3ZGQ5OWM2ZDczOGNiMGQyNWIyNmY5MDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSrrBhKSTH3CE7pfpLcAcVTd4FH4
QqY+NuD2MdjwcCkVvCtnFKwW1bn9mH6c6brrpJSLkMdNg4uGgzvKs78g2v+wPKax
xYAs4Jef9t+VfRQleBFVYzeaH79in/AkM5xLIGul3U3Jr2zQGs0NfeLbUnzOwlIn
G7uen2H3EW2QCxieUZCPPY+bRG8IVXt+GGjcq27MFAK8o1sfRX+VPKBs7QLxQ2xx
fjGm8JW5l8qMz30Ip/UM2hdFJViBNl4Eg9kkK88prXjcLMoXlk5Uknfd7ENEh0TH
WXNaYou1ISli6ucmFPA/fAXDCR15jo/8Udkaye9lXTibLUrdKbkzsKZM1wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEiiDr6xQrAX3ZnG1zjLDSWyb5BaMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvU0tJT3ZyRkNzQmZkbWNiWE9Nc05KYkp2a0ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJJXqez7TRt5g6T9LKiOvVtg5j/UTfpY
Cj0ZFp913UBsOW+JLnlNL88E2Jw2FVeUazhWZ4FjgXqjuxCv9IBQHjf86E7CVlZT
dqBUhhYG8X/PPoUVIR8Y1V0k4vkI1gm5Ws9jDy0tmFNK7wkUsBEpztTRrYFJQ5m8
h1sobWdlnn/SY1Omns1G0BJY2R+19U1UGse8yJO7GIlyR0TvpAgazyB2u/4of92A
DM4EN4BguEd/P/63zPDtvJ/IZ/5w7DsnF8DPTWGXaEx6KvnKNnQzoMrw5fO5b0Fc
WUaN1l6sCVMY2QYLpwG3Lb1f1Awp4/U6DfvlQsoOgusl13NO+lNcsdw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:54 2025 by rpki-client