Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WRjqD4zGcvLJtsucv0yKIqTfDiw.roa
File: WRjqD4zGcvLJtsucv0yKIqTfDiw.roa (raw, json)
Hash identifier: HUbLZalKVT3SN4y0TGs3xiX13U/iCJBDy+Cqiek+kQE=
Subject key identifier: 59:18:EA:0F:8C:C6:72:F2:C9:B6:CB:9C:BF:4C:8A:22:A4:DF:0E:2C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF07A570C2CF400E6DDA759556646E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WRjqD4zGcvLJtsucv0yKIqTfDiw.roa
Signing time: Tue 26 Nov 2024 13:35:21 +0000
ROA not before: Tue 26 Nov 2024 13:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396605
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:07:a5:70:c2:cf:40:0e:6d:da:75:95:56:64:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5918ea0f8cc672f2c9b6cb9cbf4c8a22a4df0e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:2d:8f:52:b0:fa:dc:25:5a:f7:7d:11:81:
e3:d7:2a:19:18:d0:df:68:5b:ed:37:1b:56:ec:d5:
aa:f9:01:cf:86:4f:56:ba:cb:98:31:3b:19:48:c5:
34:c3:07:8d:1e:9e:62:6a:08:46:17:06:0e:15:c7:
89:3a:79:82:a4:46:be:08:cc:2a:44:0b:70:7a:83:
45:ca:19:12:5c:b3:0f:ce:78:b3:bc:39:4d:34:e9:
74:cd:9a:6e:ad:84:b5:25:4b:16:29:5f:f6:d5:7f:
d5:e3:46:7d:66:92:d5:16:f7:dd:81:c1:8d:43:33:
d3:d4:47:6b:a6:bb:01:f0:93:2d:b7:d1:b4:03:75:
d5:92:af:ef:ab:c7:6f:bb:b9:bf:cc:8c:07:e8:30:
15:7f:c5:d9:76:ef:11:ec:a9:9a:10:3b:09:63:5c:
37:89:1c:44:24:f5:6f:a6:d1:e2:bd:bb:39:ae:2e:
28:d1:0e:1a:fa:d7:dc:6a:60:12:3f:05:58:af:c7:
d4:e2:c3:a1:04:a3:f9:59:98:1c:17:94:ed:22:65:
8b:ed:d8:a6:1f:c2:80:aa:e2:88:38:e0:27:6e:37:
77:fc:94:9d:bd:31:74:5f:aa:a1:ec:a6:6c:c4:97:
85:5b:d1:0d:88:4c:2c:b3:5c:63:02:76:96:5d:a2:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:EA:0F:8C:C6:72:F2:C9:B6:CB:9C:BF:4C:8A:22:A4:DF:0E:2C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WRjqD4zGcvLJtsucv0yKIqTfDiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
64:7e:04:77:7f:2e:68:c6:2b:c4:98:9b:15:39:5b:56:ce:97:
51:b6:14:d3:ce:e7:a3:f4:1e:12:6a:09:b5:86:a6:67:1a:06:
8c:ac:3e:1b:13:51:a4:89:7d:c5:60:cc:78:8c:7a:e1:9a:bf:
87:45:51:1e:41:61:77:d8:a7:bc:6b:f5:57:71:ac:0e:a1:f8:
fd:1e:aa:cf:e7:2c:1d:be:e5:0f:58:cc:d8:d8:f6:72:a2:a4:
f5:85:e4:5a:24:3e:56:75:74:32:bf:92:9a:1c:e5:f4:35:be:
fd:cc:62:ea:00:d9:5d:8a:39:14:b6:b5:75:fe:46:e5:b8:a5:
05:d1:cb:68:4a:32:e1:e6:b3:da:30:81:d8:4c:31:e7:3a:a0:
b7:1b:f4:d4:1b:1d:c3:66:9d:ee:0e:05:16:d6:59:ac:ce:0f:
48:53:07:01:68:cf:af:c1:ee:55:d3:42:ba:25:9a:6c:f9:a5:
39:b6:52:c8:a6:7c:ad:db:76:af:e2:d8:99:60:97:30:bb:65:
a9:1d:4e:db:66:a7:45:ba:f4:dc:1c:37:20:27:91:d1:35:ae:
cd:0b:14:68:e6:4a:63:3c:5c:45:dc:bd:1b:eb:7d:95:a3:e9:
f3:d0:88:3e:0e:69:ea:5d:a1:8d:cc:d8:d8:05:ac:16:51:7a:
76:3e:30:d3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorwelcMLPQA5t2nWVVmRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTE4ZWEwZjhjYzY3MmYyYzliNmNiOWNiZjRjOGEyMmE0ZGYwZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveAtj1Kw+twlWvd9EYHj1yoZGNDf
aFvtNxtW7NWq+QHPhk9WusuYMTsZSMU0wweNHp5iaghGFwYOFceJOnmCpEa+CMwq
RAtweoNFyhkSXLMPznizvDlNNOl0zZpurYS1JUsWKV/21X/V40Z9ZpLVFvfdgcGN
QzPT1EdrprsB8JMtt9G0A3XVkq/vq8dvu7m/zIwH6DAVf8XZdu8R7KmaEDsJY1w3
iRxEJPVvptHivbs5ri4o0Q4a+tfcamASPwVYr8fU4sOhBKP5WZgcF5TtImWL7dim
H8KAquKIOOAnbjd3/JSdvTF0X6qh7KZsxJeFW9ENiEwss1xjAnaWXaJCKQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFkY6g+MxnLyybbLnL9MiiKk3w4sMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvV1JqcUQ0ekdjdkxKdHN1Y3YweUtJcVRmRGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGR+BHd/LmjGK8SYmxU5W1bOl1G2FNPO
56P0HhJqCbWGpmcaBoysPhsTUaSJfcVgzHiMeuGav4dFUR5BYXfYp7xr9VdxrA6h
+P0eqs/nLB2+5Q9YzNjY9nKipPWF5FokPlZ1dDK/kpoc5fQ1vv3MYuoA2V2KORS2
tXX+RuW4pQXRy2hKMuHms9owgdhMMec6oLcb9NQbHcNmne4OBRbWWazOD0hTBwFo
z6/B7lXTQrolmmz5pTm2UsimfK3bdq/i2JlglzC7ZakdTttmp0W69NwcNyAnkdE1
rs0LFGjmSmM8XEXcvRvrfZWj6fPQiD4OaepdoY3M2NgFrBZRenY+MNM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:11 2025 by rpki-client