Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/T-Gvd3l69QHA0x0l3-HF8xWp3GA.roa
File: T-Gvd3l69QHA0x0l3-HF8xWp3GA.roa (raw, json)
Hash identifier: 51MEeo3KQ3OL5ruBlSx2Lp0QAzfngX+h3L/2/Cx2fHU=
Subject key identifier: 4F:E1:AF:77:79:7A:F5:01:C0:D3:1D:25:DF:E1:C5:F3:15:A9:DC:60
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB3B0139206B988E55A388A4B8161
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/T-Gvd3l69QHA0x0l3-HF8xWp3GA.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36627
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b3:b0:13:92:06:b9:88:e5:5a:38:8a:4b:81:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fe1af77797af501c0d31d25dfe1c5f315a9dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:f5:e9:c8:fe:b4:a6:90:48:41:96:c2:fb:
e8:84:b2:cc:47:7b:a6:1b:04:70:c2:32:f4:e6:71:
35:cc:e8:a7:da:fc:b2:31:9f:98:f5:70:3a:4f:4f:
e7:0b:12:83:22:1a:85:26:04:14:9d:93:ed:56:6d:
a3:f6:4a:bb:0a:27:d7:1b:d0:cd:4b:40:6f:f5:3f:
08:0d:8f:b8:2a:57:64:0b:d9:b4:b8:91:ae:d2:17:
05:06:aa:c6:06:e0:31:19:69:5e:27:2e:e6:52:e1:
37:c4:90:7f:1e:61:9b:27:4e:f4:85:5a:27:e7:6a:
59:4b:02:01:23:94:6c:77:21:d8:7e:04:ec:04:8f:
86:e3:e3:6e:9b:9d:9d:d8:4f:74:bc:42:97:c6:22:
4c:2e:41:bd:34:44:d3:9e:e3:f4:0f:71:77:a1:2d:
76:d7:60:25:5f:01:24:12:21:5a:0c:f7:89:80:b5:
64:d2:01:68:e2:45:25:41:1e:2f:02:dd:e1:a9:e1:
fd:5c:e0:36:a7:99:af:8d:4b:f0:09:90:d7:f6:b4:
73:48:ae:95:51:0c:21:91:e2:d5:64:b9:c3:e4:49:
ee:2f:73:7d:64:3d:ca:69:d4:74:4c:16:49:f6:ef:
60:a7:ac:47:44:38:ce:c3:8e:b1:2f:98:1e:85:f8:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:AF:77:79:7A:F5:01:C0:D3:1D:25:DF:E1:C5:F3:15:A9:DC:60
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/T-Gvd3l69QHA0x0l3-HF8xWp3GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
9d:cc:13:aa:c3:38:02:98:cd:ad:df:1c:4d:ce:e1:ce:71:58:
5e:e9:5a:83:12:be:f5:30:73:21:6a:5f:0b:95:4c:e0:57:a6:
39:72:72:f2:b4:b3:be:10:49:f3:8a:2b:86:d4:ff:54:c8:da:
a0:49:ba:0b:27:6f:e4:4e:ab:20:59:75:01:c6:07:2c:a6:ea:
e8:33:02:92:27:0f:c1:83:5a:ea:c8:eb:41:0a:da:72:16:90:
89:db:e8:6c:1a:41:1d:b9:34:84:4a:05:14:5d:fd:19:22:fb:
bf:ce:1f:72:a4:77:3e:a4:b5:88:cb:93:7d:48:d3:0e:5f:5b:
05:44:4d:2d:d6:ab:38:47:db:6c:b3:63:1e:49:24:65:3b:55:
62:83:69:9f:7c:97:8a:b5:cb:ac:c4:ab:49:4c:df:28:9b:64:
e6:d3:63:0a:b1:d5:6e:72:4f:87:59:aa:04:3e:d0:94:3f:13:
c5:70:9b:80:7f:21:e2:00:74:a0:4b:b5:b3:1b:29:4d:bc:b5:
4a:f5:bb:2f:d5:3c:eb:07:63:bb:a3:29:95:06:85:0e:bc:81:
a9:b4:6e:7b:4c:57:5b:21:60:5a:11:4f:e0:7b:04:91:9b:82:
9f:86:09:63:91:c1:d8:35:59:6f:27:b6:01:b0:47:51:ba:13:
34:4c:9e:e8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+7OwE5IGuYjlWjiKS4FhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmUxYWY3Nzc5N2FmNTAxYzBkMzFkMjVkZmUxYzVmMzE1YTlkYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKf16cj+tKaQSEGWwvvohLLMR3um
GwRwwjL05nE1zOin2vyyMZ+Y9XA6T0/nCxKDIhqFJgQUnZPtVm2j9kq7CifXG9DN
S0Bv9T8IDY+4KldkC9m0uJGu0hcFBqrGBuAxGWleJy7mUuE3xJB/HmGbJ070hVon
52pZSwIBI5RsdyHYfgTsBI+G4+Num52d2E90vEKXxiJMLkG9NETTnuP0D3F3oS12
12AlXwEkEiFaDPeJgLVk0gFo4kUlQR4vAt3hqeH9XOA2p5mvjUvwCZDX9rRzSK6V
UQwhkeLVZLnD5EnuL3N9ZD3KadR0TBZJ9u9gp6xHRDjOw46xL5gehfgfewIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFE/hr3d5evUBwNMdJd/hxfMVqdxgMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvVC1HdmQzbDY5UUhBMHgwbDMtSEY4eFdwM0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJ3ME6rDOAKYza3fHE3O4c5xWF7pWoMS
vvUwcyFqXwuVTOBXpjlycvK0s74QSfOKK4bU/1TI2qBJugsnb+ROqyBZdQHGByym
6ugzApInD8GDWurI60EK2nIWkInb6GwaQR25NIRKBRRd/Rki+7/OH3Kkdz6ktYjL
k31I0w5fWwVETS3WqzhH22yzYx5JJGU7VWKDaZ98l4q1y6zEq0lM3yibZObTYwqx
1W5yT4dZqgQ+0JQ/E8Vwm4B/IeIAdKBLtbMbKU28tUr1uy/VPOsHY7ujKZUGhQ68
gam0bntMV1shYFoRT+B7BJGbgp+GCWORwdg1WW8ntgGwR1G6EzRMnug=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:30 2025 by rpki-client