Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i_PGq7xLY-ikwMijhdCruGX5mJE.roa
File: i_PGq7xLY-ikwMijhdCruGX5mJE.roa (raw, json)
Hash identifier: B0fO5mmuLNf4z6lSI375vGGSAUTAKwB76lX13K6m0WY=
Subject key identifier: 8B:F3:C6:AB:BC:4B:63:E8:A4:C0:C8:A3:85:D0:AB:B8:65:F9:98:91
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDE448B3962B6561E08B9298A31B6
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i_PGq7xLY-ikwMijhdCruGX5mJE.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397199
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:de:44:8b:39:62:b6:56:1e:08:b9:29:8a:31:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bf3c6abbc4b63e8a4c0c8a385d0abb865f99891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:df:0b:7a:fe:3c:60:d5:8b:bd:9f:8d:58:
54:ea:0c:42:5c:3e:1c:cc:0d:5d:06:f8:d1:f1:78:
2e:42:f6:0c:e8:07:99:0a:cc:7c:7e:bd:7c:04:95:
53:f4:4e:16:63:44:03:d3:b7:7b:9a:7d:a2:49:5f:
4d:99:3b:d5:7d:95:34:25:67:b6:f9:96:e1:81:73:
86:6d:c4:62:ab:f8:e2:90:01:73:a2:fb:71:e9:c1:
c8:cd:b3:65:7a:5b:21:0c:c0:5c:a4:3a:47:08:45:
19:a5:74:58:35:62:cd:58:e0:81:d6:b0:60:72:a9:
5f:94:23:26:f7:d2:7f:e3:10:88:bd:79:14:d2:09:
dd:d8:34:0f:b5:2c:7f:58:94:8a:93:94:bd:13:1c:
c5:cf:15:82:90:54:d2:22:91:05:ae:b7:d7:88:ee:
94:ba:d6:e6:b1:64:eb:4b:2e:c6:2d:f7:5d:9c:b3:
f5:d7:56:41:ce:92:07:96:ba:8a:3d:f1:48:56:80:
1e:19:7c:04:4a:01:cb:20:93:26:11:17:c6:95:75:
95:83:21:00:e5:68:d3:cd:bb:e1:1d:c9:c6:d6:c7:
80:10:4d:12:4f:21:c6:6f:7e:22:ab:cc:11:cd:8b:
80:b3:04:d4:47:b8:d9:14:d5:8e:00:39:07:63:a0:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:C6:AB:BC:4B:63:E8:A4:C0:C8:A3:85:D0:AB:B8:65:F9:98:91
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i_PGq7xLY-ikwMijhdCruGX5mJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
c4:90:5b:c9:2e:8e:a3:f9:20:25:3f:7f:bf:06:f9:fb:c7:01:
91:fe:84:f9:31:cc:95:fa:de:94:4a:3e:eb:b8:dc:10:b1:8d:
9f:ec:bf:ce:55:0e:eb:d6:e0:9b:0e:b4:9c:a7:01:9a:c0:e1:
fa:a2:fa:e8:3a:d6:6f:1c:97:6c:bc:ba:d4:7c:c8:23:c0:e3:
b2:0a:ea:b8:27:57:d8:93:34:52:ea:3a:b0:7c:e7:8b:7e:bb:
64:a4:c2:5f:61:5c:28:38:4f:aa:7e:57:af:0e:4e:8f:29:10:
9b:c6:96:af:15:b2:fa:82:26:aa:dc:71:f1:74:dc:5d:af:58:
ed:5b:7b:06:d6:51:23:8e:2f:a0:e1:d4:3a:d8:5f:22:22:20:
30:1d:33:f2:59:6a:18:5e:b3:98:b1:aa:e3:59:2f:1c:ba:89:
12:91:f2:47:df:3e:de:0a:b6:f2:f2:df:f9:bc:89:67:b0:10:
49:fc:5f:e6:23:c9:f7:78:86:b0:e5:b0:f3:b6:6c:f8:1b:45:
cd:d4:df:4e:aa:c3:d9:fd:b1:85:ee:71:97:25:42:f6:76:ec:
8a:b0:33:41:7c:3f:ac:1e:1c:18:6c:18:b6:76:cd:b3:15:25:
7e:8b:d9:aa:cb:be:b9:50:3a:85:a3:7e:4c:10:14:b5:6f:98:
7e:10:bd:4c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+95EizlitlYeCLkpijG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmYzYzZhYmJjNGI2M2U4YTRjMGM4YTM4NWQwYWJiODY1Zjk5ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPDfC3r+PGDVi72fjVhU6gxCXD4c
zA1dBvjR8XguQvYM6AeZCsx8fr18BJVT9E4WY0QD07d7mn2iSV9NmTvVfZU0JWe2
+ZbhgXOGbcRiq/jikAFzovtx6cHIzbNlelshDMBcpDpHCEUZpXRYNWLNWOCB1rBg
cqlflCMm99J/4xCIvXkU0gnd2DQPtSx/WJSKk5S9ExzFzxWCkFTSIpEFrrfXiO6U
utbmsWTrSy7GLfddnLP111ZBzpIHlrqKPfFIVoAeGXwESgHLIJMmERfGlXWVgyEA
5WjTzbvhHcnG1seAEE0STyHGb34iq8wRzYuAswTUR7jZFNWOADkHY6B9SwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIvzxqu8S2PopMDIo4XQq7hl+ZiRMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvaV9QR3E3eExZLWlrd01pamhkQ3J1R1g1bUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAMSQW8kujqP5ICU/f78G+fvHAZH+hPkx
zJX63pRKPuu43BCxjZ/sv85VDuvW4JsOtJynAZrA4fqi+ug61m8cl2y8utR8yCPA
47IK6rgnV9iTNFLqOrB854t+u2Skwl9hXCg4T6p+V68OTo8pEJvGlq8VsvqCJqrc
cfF03F2vWO1bewbWUSOOL6Dh1DrYXyIiIDAdM/JZahhes5ixquNZLxy6iRKR8kff
Pt4KtvLy3/m8iWewEEn8X+Yjyfd4hrDlsPO2bPgbRc3U306qw9n9sYXucZclQvZ2
7IqwM0F8P6weHBhsGLZ2zbMVJX6L2arLvrlQOoWjfkwQFLVvmH4QvUw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:35 2025 by rpki-client