Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/bAKdOPAD4ShS0X-1e3DD8cuMiL4.roa
File: bAKdOPAD4ShS0X-1e3DD8cuMiL4.roa (raw, json)
Hash identifier: 7EptXi1Qfq7X06inqJ22LioUYT+78Ksx3auURVlFggQ=
Subject key identifier: 6C:02:9D:38:F0:03:E1:28:52:D1:7F:B5:7B:70:C3:F1:CB:8C:88:BE
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDFAA119ACF9187F5392C58D103C6
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/bAKdOPAD4ShS0X-1e3DD8cuMiL4.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397202
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:df:aa:11:9a:cf:91:87:f5:39:2c:58:d1:03:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c029d38f003e12852d17fb57b70c3f1cb8c88be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:d6:a7:4f:53:49:48:cc:58:ec:b3:2d:7f:
cf:1a:4d:97:b9:1d:80:de:5b:af:23:93:c9:b4:f2:
15:13:61:06:74:0a:39:26:64:4c:99:22:eb:09:5b:
05:c1:4b:fa:c1:64:f4:61:8a:13:c8:90:74:fd:fc:
93:2b:01:2e:b6:32:cb:71:c1:71:cd:49:34:7e:e6:
48:d0:75:bf:06:2a:22:c3:7f:8f:d7:cd:61:b8:fa:
98:f2:e0:2a:41:c9:f2:c6:ed:0c:3a:72:93:71:b8:
3e:b3:a6:47:6b:4c:07:bb:8f:3a:5a:a5:c3:8e:35:
09:a8:b0:dc:88:10:c1:ed:ff:bb:1d:bd:cd:e4:92:
36:31:ff:0d:34:c8:11:8e:29:a5:bd:ee:85:84:1c:
f9:34:86:6c:26:dd:ee:4d:d0:91:ff:52:80:1b:7d:
ae:27:d5:3e:de:f2:e7:32:eb:44:68:36:1d:f8:27:
f5:29:eb:0f:b5:30:d8:49:ba:61:69:c2:80:c8:7d:
f5:9d:80:0d:cc:c8:28:f7:f0:2c:f5:5d:91:e2:f8:
7c:6b:c7:2a:ee:49:dc:b0:e0:d0:80:d3:53:01:7f:
7c:05:0f:89:2f:43:e6:f9:65:8e:a0:b7:96:fd:6b:
89:35:3d:00:83:75:a4:9b:b1:18:33:65:3c:10:8a:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:9D:38:F0:03:E1:28:52:D1:7F:B5:7B:70:C3:F1:CB:8C:88:BE
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/bAKdOPAD4ShS0X-1e3DD8cuMiL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
6c:4d:7a:40:f6:d9:0d:58:52:91:fd:c5:37:77:1c:49:d9:93:
f8:78:bb:c8:8a:24:1e:f8:89:ff:b1:a1:3d:42:4a:ba:9c:65:
fb:f7:1d:3f:9f:f9:62:1b:ba:4d:fe:29:07:99:4b:5b:46:e7:
48:2e:dd:c7:09:96:05:18:d9:af:bc:2b:c3:b4:41:51:f9:8f:
74:c1:89:ba:c8:8a:ad:5b:22:96:75:63:49:4f:c1:15:f5:e0:
aa:3c:46:49:17:ed:0f:e7:10:86:31:bc:72:15:b3:28:61:39:
bc:d2:3b:ee:c1:de:3b:34:42:b3:be:89:c1:6d:9d:06:02:b3:
43:9f:9b:c2:01:ff:9f:5f:e3:a1:f5:86:fc:f7:5f:47:c1:2a:
b0:a5:0d:4f:d8:e7:38:c3:e6:d7:b5:7d:15:b9:61:13:5d:7b:
e6:26:81:a6:aa:05:a3:51:4a:4f:81:04:a6:30:3c:ff:60:95:
93:cb:ed:0d:f7:13:da:cf:31:59:42:9f:b6:49:76:7d:4a:87:
8f:d6:0e:66:79:2b:71:ae:30:52:09:51:9f:fd:ed:14:eb:6c:
75:69:cb:f5:8b:7b:54:99:af:f0:3e:34:e6:a7:de:8a:fd:79:
2d:66:6c:e6:40:5e:ac:2d:bf:90:4f:ff:6f:6a:57:14:ca:dc:
c7:ac:1e:43
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+9+qEZrPkYf1OSxY0QPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzAyOWQzOGYwMDNlMTI4NTJkMTdmYjU3YjcwYzNmMWNiOGM4OGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NrWp09TSUjMWOyzLX/PGk2XuR2A
3luvI5PJtPIVE2EGdAo5JmRMmSLrCVsFwUv6wWT0YYoTyJB0/fyTKwEutjLLccFx
zUk0fuZI0HW/Bioiw3+P181huPqY8uAqQcnyxu0MOnKTcbg+s6ZHa0wHu486WqXD
jjUJqLDciBDB7f+7Hb3N5JI2Mf8NNMgRjimlve6FhBz5NIZsJt3uTdCR/1KAG32u
J9U+3vLnMutEaDYd+Cf1KesPtTDYSbphacKAyH31nYANzMgo9/As9V2R4vh8a8cq
7kncsODQgNNTAX98BQ+JL0Pm+WWOoLeW/WuJNT0Ag3Wkm7EYM2U8EIqamQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGwCnTjwA+EoUtF/tXtww/HLjIi+MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvYkFLZE9QQUQ0U2hTMFgtMWUzREQ4Y3VNaUw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGxNekD22Q1YUpH9xTd3HEnZk/h4u8iK
JB74if+xoT1CSrqcZfv3HT+f+WIbuk3+KQeZS1tG50gu3ccJlgUY2a+8K8O0QVH5
j3TBibrIiq1bIpZ1Y0lPwRX14Ko8RkkX7Q/nEIYxvHIVsyhhObzSO+7B3js0QrO+
icFtnQYCs0Ofm8IB/59f46H1hvz3X0fBKrClDU/Y5zjD5te1fRW5YRNde+Ymgaaq
BaNRSk+BBKYwPP9glZPL7Q33E9rPMVlCn7ZJdn1Kh4/WDmZ5K3GuMFIJUZ/97RTr
bHVpy/WLe1SZr/A+NOan3or9eS1mbOZAXqwtv5BP/29qVxTK3MesHkM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:45 2025 by rpki-client