Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/bCCXfQIoLWjZlMQjugUkdIzJ5EU.roa
File: bCCXfQIoLWjZlMQjugUkdIzJ5EU.roa (raw, json)
Hash identifier: t+Ada1LW8l7tK3znC1Ehgs6ge9xB0wRgvomICpB+e00=
Subject key identifier: 6C:20:97:7D:02:28:2D:68:D9:94:C4:23:BA:05:24:74:8C:C9:E4:45
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB7D4946AF7AB7375DFFA77EEC57E
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/bCCXfQIoLWjZlMQjugUkdIzJ5EU.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396541
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b7:d4:94:6a:f7:ab:73:75:df:fa:77:ee:c5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c20977d02282d68d994c423ba0524748cc9e445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:06:be:e4:54:f1:7b:f6:ec:65:75:ca:6e:ec:
77:2a:05:90:38:0c:85:82:15:4b:76:83:5b:8e:1c:
f7:53:79:52:20:fa:88:ec:2c:93:4c:32:5f:84:00:
da:0b:21:a6:4b:f8:7a:28:50:8d:0d:ba:c1:5d:eb:
3d:5f:28:b4:af:08:57:e2:5e:ef:83:8e:bf:58:06:
06:96:ab:eb:d9:a5:08:2e:17:61:f5:5d:4a:34:72:
87:b0:79:d1:6b:20:a2:88:bd:2d:3f:dc:30:d5:a8:
b5:0b:40:f9:1d:d9:b8:33:c5:41:fa:c6:89:61:3b:
68:0e:58:e6:96:a4:ac:71:6c:be:37:63:df:ea:aa:
d4:56:44:e8:d7:d7:f0:77:65:ee:37:5f:ea:33:f7:
6e:bb:a4:23:56:46:d0:e4:18:8a:46:65:4a:9e:54:
2b:89:05:0c:2d:10:c7:cb:1e:41:f4:f6:61:4f:02:
34:08:bc:26:83:27:49:bd:fe:78:93:29:f5:45:5b:
bc:c0:70:01:d0:79:3f:89:2a:7f:22:ee:b7:62:fa:
63:ac:0c:97:bf:d4:b6:f2:5f:da:35:5b:de:ef:d3:
cb:11:97:dd:ff:37:d4:44:78:4e:71:0d:b1:0c:65:
e4:0b:d7:f1:3f:e6:cd:89:a5:4d:5f:e0:28:93:46:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:97:7D:02:28:2D:68:D9:94:C4:23:BA:05:24:74:8C:C9:E4:45
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/bCCXfQIoLWjZlMQjugUkdIzJ5EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
0b:46:1a:86:0f:8c:f3:35:f4:f7:58:5d:c0:06:99:72:eb:8f:
09:99:18:7b:74:5b:70:fa:91:0b:c5:63:96:90:5e:99:e1:b6:
77:e1:19:a2:93:4e:25:f4:3a:db:fb:2d:b4:92:f5:f9:7b:51:
96:32:0b:e3:16:a3:60:f0:e7:8e:f1:31:4d:f8:ca:a4:78:73:
0c:74:19:34:3e:34:d5:69:92:2b:a0:db:3b:80:5b:7a:bd:59:
39:fd:cf:ae:95:6c:b6:fe:b7:ff:5a:f6:52:36:48:e0:d3:73:
2d:2a:71:85:eb:52:04:f9:cb:a3:95:fb:9c:c2:44:84:7d:85:
b2:ab:c4:23:74:c7:46:c4:dd:7c:fd:7a:16:77:ae:f9:8f:41:
86:ba:82:52:d2:0b:f9:a9:f6:eb:b0:1f:7f:8f:20:54:bd:2c:
8d:d3:49:56:ce:41:df:e0:a7:19:ab:4b:7d:93:94:89:f4:d4:
5e:31:75:6c:3d:64:98:c1:2e:d4:66:c7:ed:b4:28:bc:5e:3d:
0e:5d:b5:67:f9:e0:0a:8f:08:22:46:d4:81:2e:cc:3b:03:7c:
72:75:7f:58:8a:4f:36:d5:40:74:66:5b:5f:85:05:c1:f4:73:
a4:43:cd:86:a5:72:9e:30:40:e9:92:69:ed:75:f8:18:44:6c:
9d:50:37:d4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+7fUlGr3q3N13/p37sV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzIwOTc3ZDAyMjgyZDY4ZDk5NGM0MjNiYTA1MjQ3NDhjYzllNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Aa+5FTxe/bsZXXKbux3KgWQOAyF
ghVLdoNbjhz3U3lSIPqI7CyTTDJfhADaCyGmS/h6KFCNDbrBXes9Xyi0rwhX4l7v
g46/WAYGlqvr2aUILhdh9V1KNHKHsHnRayCiiL0tP9ww1ai1C0D5Hdm4M8VB+saJ
YTtoDljmlqSscWy+N2Pf6qrUVkTo19fwd2XuN1/qM/duu6QjVkbQ5BiKRmVKnlQr
iQUMLRDHyx5B9PZhTwI0CLwmgydJvf54kyn1RVu8wHAB0Hk/iSp/Iu63YvpjrAyX
v9S28l/aNVve79PLEZfd/zfURHhOcQ2xDGXkC9fxP+bNiaVNX+Aok0biAwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGwgl30CKC1o2ZTEI7oFJHSMyeRFMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvYkNDWGZRSW9MV2pabE1RanVnVWtkSXpKNUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAAtGGoYPjPM19PdYXcAGmXLrjwmZGHt0
W3D6kQvFY5aQXpnhtnfhGaKTTiX0Otv7LbSS9fl7UZYyC+MWo2Dw547xMU34yqR4
cwx0GTQ+NNVpkiug2zuAW3q9WTn9z66VbLb+t/9a9lI2SODTcy0qcYXrUgT5y6OV
+5zCRIR9hbKrxCN0x0bE3Xz9ehZ3rvmPQYa6glLSC/mp9uuwH3+PIFS9LI3TSVbO
Qd/gpxmrS32TlIn01F4xdWw9ZJjBLtRmx+20KLxePQ5dtWf54AqPCCJG1IEuzDsD
fHJ1f1iKTzbVQHRmW1+FBcH0c6RDzYalcp4wQOmSae11+BhEbJ1QN9Q=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:20 2025 by rpki-client