Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rArHxrQgZk9-SPcOkOqcy1FhBCw.roa
File: rArHxrQgZk9-SPcOkOqcy1FhBCw.roa (raw, json)
Hash identifier: VuHu//0HyWJfEpAsSBbC+eb4CL6l0DAl6rjz6cwiUUA=
Subject key identifier: AC:0A:C7:C6:B4:20:66:4F:7E:48:F7:0E:90:EA:9C:CB:51:61:04:2C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBE0BB02E71D66B3CF1D8C107527FF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rArHxrQgZk9-SPcOkOqcy1FhBCw.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397205
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e0:bb:02:e7:1d:66:b3:cf:1d:8c:10:75:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac0ac7c6b420664f7e48f70e90ea9ccb5161042c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:d3:c0:c2:a0:17:ab:2a:d1:5f:2b:09:66:
2e:c8:f4:d2:81:85:41:c1:10:3b:bf:53:3a:b0:26:
b6:bf:e9:56:3a:54:17:51:a0:f7:82:06:02:08:26:
95:38:f8:25:f3:00:25:84:fa:0f:a4:12:08:f1:d7:
9c:3a:41:cc:ae:76:a0:fd:0b:42:dc:47:a5:1e:c1:
87:56:eb:3b:a6:1e:c2:8e:e0:17:50:61:0c:37:c4:
21:6c:10:a2:2a:80:ec:e0:8b:83:ae:12:13:e3:53:
7e:ee:7c:96:26:c7:d4:ad:92:7c:0c:03:b4:15:14:
40:6a:9d:50:ae:10:56:32:72:4d:87:cd:a5:12:8f:
5f:0b:ce:67:c9:c8:0f:76:27:79:59:96:07:80:b6:
50:ef:61:9b:19:74:32:bf:9c:93:f4:86:57:53:a5:
2a:ad:1b:4b:88:5a:1a:dc:b9:84:66:a4:8a:3d:6a:
84:93:4a:fe:ce:3f:a8:99:13:bd:ca:f0:de:e2:75:
fc:ff:3b:2d:76:c0:dc:1d:65:45:7e:47:66:ec:0d:
44:5f:bd:88:86:6c:29:71:9e:07:6d:c3:b4:46:34:
1e:0e:02:0a:a1:ae:56:a7:aa:68:85:d9:7f:d5:b6:
88:be:9f:15:39:a9:74:90:67:55:91:08:da:df:03:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0A:C7:C6:B4:20:66:4F:7E:48:F7:0E:90:EA:9C:CB:51:61:04:2C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rArHxrQgZk9-SPcOkOqcy1FhBCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
50:6e:37:61:ab:68:72:9f:67:6d:1f:4c:e6:f0:e5:5d:49:c6:
91:60:0f:49:d7:15:05:13:a2:60:64:ae:f8:51:df:32:87:5a:
41:77:f2:06:fe:6c:2a:8f:c6:78:8b:ef:58:92:a0:79:e2:aa:
49:54:c0:7b:d5:82:79:94:70:cd:fc:18:78:0c:e3:eb:15:d7:
67:26:cd:0e:cd:82:93:88:01:b2:df:4e:76:27:54:d7:54:3b:
58:85:2a:43:73:94:68:08:3d:5a:8a:01:b6:74:a4:d8:a6:51:
27:de:2b:31:05:85:3d:6a:83:88:5a:b6:ae:58:5b:fd:13:59:
0f:a8:dd:cf:c7:89:48:25:80:83:22:88:0a:93:7d:9e:4a:c2:
ed:89:9d:e8:38:0b:fe:00:b6:34:c8:47:74:f2:ae:09:5e:03:
c7:a5:fd:6a:a4:37:4c:81:94:71:30:9b:34:a4:31:de:5e:bb:
2c:13:88:9d:02:52:78:6a:23:e5:fe:9f:2c:22:bd:c0:74:c8:
53:15:95:88:1e:08:42:29:aa:8c:c4:58:b2:50:71:da:21:a9:
8c:d8:bf:dd:2e:ca:35:14:07:99:8c:0c:b1:07:92:7c:20:bc:
d0:73:b7:be:2c:e6:16:df:85:c4:6f:90:4a:66:bc:88:8b:48:
e1:95:cd:8c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi++C7AucdZrPPHYwQdSf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzBhYzdjNmI0MjA2NjRmN2U0OGY3MGU5MGVhOWNjYjUxNjEwNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HXTwMKgF6sq0V8rCWYuyPTSgYVB
wRA7v1M6sCa2v+lWOlQXUaD3ggYCCCaVOPgl8wAlhPoPpBII8decOkHMrnag/QtC
3EelHsGHVus7ph7CjuAXUGEMN8QhbBCiKoDs4IuDrhIT41N+7nyWJsfUrZJ8DAO0
FRRAap1QrhBWMnJNh82lEo9fC85nycgPdid5WZYHgLZQ72GbGXQyv5yT9IZXU6Uq
rRtLiFoa3LmEZqSKPWqEk0r+zj+omRO9yvDe4nX8/zstdsDcHWVFfkdm7A1EX72I
hmwpcZ4HbcO0RjQeDgIKoa5Wp6pohdl/1baIvp8VOal0kGdVkQja3wMYZQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKwKx8a0IGZPfkj3DpDqnMtRYQQsMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvckFySHhyUWdaazktU1BjT2tPcWN5MUZoQkN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFBuN2GraHKfZ20fTObw5V1JxpFgD0nX
FQUTomBkrvhR3zKHWkF38gb+bCqPxniL71iSoHniqklUwHvVgnmUcM38GHgM4+sV
12cmzQ7NgpOIAbLfTnYnVNdUO1iFKkNzlGgIPVqKAbZ0pNimUSfeKzEFhT1qg4ha
tq5YW/0TWQ+o3c/HiUglgIMiiAqTfZ5Kwu2Jneg4C/4AtjTIR3TyrgleA8el/Wqk
N0yBlHEwmzSkMd5euywTiJ0CUnhqI+X+nywivcB0yFMVlYgeCEIpqozEWLJQcdoh
qYzYv90uyjUUB5mMDLEHknwgvNBzt74s5hbfhcRvkEpmvIiLSOGVzYw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:27 2025 by rpki-client