Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WkHp0JDhzjCwlIVptVs_WEHiBus.roa
File: WkHp0JDhzjCwlIVptVs_WEHiBus.roa (raw, json)
Hash identifier: 75YfWXQzOTKGZcGJFBVntjzbAu+7uQRyleKcYisRG1M=
Subject key identifier: 5A:41:E9:D0:90:E1:CE:30:B0:94:85:69:B5:5B:3F:58:41:E2:06:EB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AF12F0D7C97CAAEE76C44DB9E7D01C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WkHp0JDhzjCwlIVptVs_WEHiBus.roa
Signing time: Tue 26 Nov 2024 13:35:24 +0000
ROA not before: Tue 26 Nov 2024 13:35:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397202
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:af:12:f0:d7:c9:7c:aa:ee:76:c4:4d:b9:e7:d0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a41e9d090e1ce30b0948569b55b3f5841e206eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:8c:5f:a2:51:a8:ce:31:4c:3d:6f:d2:f8:
18:38:96:3e:51:88:58:c8:a8:4e:32:2b:6b:53:33:
48:9b:0d:65:95:9e:f0:fd:97:f0:4a:8e:0c:58:a7:
5e:69:11:70:40:d0:a3:29:e8:e6:37:a1:ec:04:d6:
b8:cd:9b:ab:50:f4:74:b8:cd:e1:00:83:df:a6:c1:
58:df:b7:5f:86:54:42:af:11:e3:b0:11:12:29:07:
cc:36:ef:05:99:a1:c6:32:fc:c8:c4:99:6e:7c:01:
fa:b1:ce:75:8d:e9:58:0b:a5:8e:6d:a6:65:f5:1d:
32:da:88:a3:9c:af:da:48:b4:d8:d5:0c:24:59:fd:
81:13:8e:1e:9f:7f:32:94:c4:a1:5b:e6:09:66:dd:
b2:db:68:3f:80:76:6e:cb:b5:1f:b8:94:0d:3c:44:
38:f3:28:73:d7:c4:d7:f3:69:ba:ce:82:52:ad:37:
bc:b6:e0:b5:f9:a3:68:e1:e8:5c:ff:28:63:8c:48:
59:f5:93:8c:b6:d7:9e:8d:8b:8b:a7:e9:dd:f7:ea:
54:c4:60:8a:e9:b3:a2:1b:90:97:70:da:ae:04:6e:
bc:f0:ca:49:0a:7d:c5:e7:70:a8:18:ff:de:e8:3f:
65:80:9b:0f:92:3c:3a:94:0e:51:fd:78:11:a5:41:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:41:E9:D0:90:E1:CE:30:B0:94:85:69:B5:5B:3F:58:41:E2:06:EB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WkHp0JDhzjCwlIVptVs_WEHiBus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
06:82:6a:6d:30:9d:09:75:50:7d:2c:95:0a:a7:33:33:97:9c:
ee:75:19:70:23:a6:3d:f1:52:50:00:08:6e:91:33:93:a6:3a:
a1:15:0f:88:ef:01:d6:6c:18:25:96:b4:08:25:97:5c:d3:23:
09:7b:a0:9b:8b:c6:e4:d8:e4:a9:29:6d:c1:6c:29:60:a3:08:
11:a5:72:2b:bd:7d:85:98:50:3c:dd:ef:44:65:dd:ee:ec:63:
3a:15:bd:8e:c9:ef:19:59:a8:0b:a5:2b:82:2d:34:91:9c:f6:
4e:b7:71:9a:6c:72:a7:1c:1e:a3:02:d7:22:d4:ca:bd:81:ed:
4e:94:a6:80:7f:46:ed:00:8a:cc:cc:f5:db:02:95:77:07:0d:
2e:43:db:bf:99:a3:03:5f:2f:60:1a:e7:16:7f:0c:72:23:6b:
5f:25:bb:b3:8a:93:77:79:e0:44:33:fd:0c:a1:79:bd:ee:31:
e2:03:52:b8:7d:1f:5a:79:1c:5a:9f:f0:e8:dc:32:e7:f7:58:
73:1a:57:06:93:7c:de:c5:7c:53:61:d9:30:6b:c8:2c:a0:b4:
88:32:79:2f:95:ec:5e:65:16:0d:2c:2e:db:95:ed:b9:20:56:
df:1e:1d:a5:d0:00:98:22:4d:3a:55:c3:d0:b0:36:ce:a6:fc:
37:58:ce:d2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNorxLw18l8qu52xE2559AcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTQxZTlkMDkwZTFjZTMwYjA5NDg1NjliNTViM2Y1ODQxZTIwNmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXGMX6JRqM4xTD1v0vgYOJY+UYhY
yKhOMitrUzNImw1llZ7w/ZfwSo4MWKdeaRFwQNCjKejmN6HsBNa4zZurUPR0uM3h
AIPfpsFY37dfhlRCrxHjsBESKQfMNu8FmaHGMvzIxJlufAH6sc51jelYC6WObaZl
9R0y2oijnK/aSLTY1QwkWf2BE44en38ylMShW+YJZt2y22g/gHZuy7UfuJQNPEQ4
8yhz18TX82m6zoJSrTe8tuC1+aNo4ehc/yhjjEhZ9ZOMtteejYuLp+nd9+pUxGCK
6bOiG5CXcNquBG688MpJCn3F53CoGP/e6D9lgJsPkjw6lA5R/XgRpUHG8wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFpB6dCQ4c4wsJSFabVbP1hB4gbrMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvV2tIcDBKRGh6akN3bElWcHRWc19XRUhpQnVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAAaCam0wnQl1UH0slQqnMzOXnO51GXAj
pj3xUlAACG6RM5OmOqEVD4jvAdZsGCWWtAgll1zTIwl7oJuLxuTY5KkpbcFsKWCj
CBGlciu9fYWYUDzd70Rl3e7sYzoVvY7J7xlZqAulK4ItNJGc9k63cZpscqccHqMC
1yLUyr2B7U6UpoB/Ru0AiszM9dsClXcHDS5D27+ZowNfL2Aa5xZ/DHIja18lu7OK
k3d54EQz/Qyheb3uMeIDUrh9H1p5HFqf8OjcMuf3WHMaVwaTfN7FfFNh2TBryCyg
tIgyeS+V7F5lFg0sLtuV7bkgVt8eHaXQAJgiTTpVw9CwNs6m/DdYztI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:52 2025 by rpki-client