Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qlBmMcRWkBGrir2vVfz9t5-xcOA.roa
File: qlBmMcRWkBGrir2vVfz9t5-xcOA.roa (raw, json)
Hash identifier: tuX3/cbzN4rFJV0wYZ2g0Z54+FqRWqElbOmVxDuywAo=
Subject key identifier: AA:50:66:31:C4:56:90:11:AB:8A:BD:AF:55:FC:FD:B7:9F:B1:70:E0
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019368AEDDBF83668C8BDBCF4EEE7C14AAB3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qlBmMcRWkBGrir2vVfz9t5-xcOA.roa
Signing time: Tue 26 Nov 2024 13:35:10 +0000
ROA not before: Tue 26 Nov 2024 13:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19836
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:ae:dd:bf:83:66:8c:8b:db:cf:4e:ee:7c:14:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Nov 26 13:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa506631c4569011ab8abdaf55fcfdb79fb170e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:c8:5b:55:77:0e:cb:79:1c:03:c0:31:9a:
8a:40:53:54:6a:0a:71:73:a9:ba:f9:7b:56:a4:51:
21:f7:2d:92:67:dc:a4:f6:73:ce:c6:9f:75:42:12:
e5:67:56:e6:ee:53:b5:c7:2c:52:e1:ec:35:7b:1a:
da:c3:59:c0:32:a0:4b:d7:d5:fc:b8:f8:64:cc:d0:
b4:df:19:a9:f0:31:41:32:9e:fc:9f:f1:44:9d:07:
b9:2b:66:ea:85:6e:29:6e:ba:fe:b9:81:50:fe:21:
97:5e:80:e0:01:4a:18:71:da:c3:b7:fc:3f:57:d5:
5f:44:da:ce:7e:d5:b6:62:6a:fb:3a:ff:de:f1:92:
c5:0f:c3:ca:e7:96:74:82:fd:15:71:f8:62:2a:62:
73:44:d9:b5:f4:81:79:7b:d7:23:57:ea:f4:79:5b:
67:c2:c9:9d:45:05:a9:c8:6c:c4:e7:8e:80:83:dd:
8d:40:ff:f2:81:a2:e0:38:2e:92:af:21:a3:9e:42:
4c:a2:85:73:8e:e0:7c:9f:99:5d:3a:75:51:c6:de:
da:8b:38:e7:d3:a6:e7:c9:44:0d:0b:d9:42:cb:56:
21:ae:b5:20:69:42:84:85:d0:66:3e:c1:82:09:e5:
82:55:1e:91:5d:1c:7a:d3:9f:a7:65:b1:ae:0c:43:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:50:66:31:C4:56:90:11:AB:8A:BD:AF:55:FC:FD:B7:9F:B1:70:E0
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qlBmMcRWkBGrir2vVfz9t5-xcOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
59:0d:e1:b7:8e:c9:50:23:f0:a9:9b:4f:60:83:a8:e7:1d:24:
ef:df:1c:42:4d:f4:b7:8c:21:44:e6:ea:fe:12:c8:f7:25:0b:
a7:cd:01:1c:99:ca:16:05:8f:30:27:43:44:0a:89:d3:26:63:
b6:1c:26:91:34:6c:70:a8:9c:89:b7:6a:e9:14:99:b7:6e:50:
6b:77:3c:20:4a:f1:59:76:91:9e:92:99:5f:dc:61:d6:72:ac:
02:92:ee:35:2f:25:6e:2a:89:40:31:04:af:8d:ac:1a:06:54:
62:44:e0:f8:2c:ec:ea:14:aa:1b:70:cd:00:2d:60:67:4b:6c:
f4:cc:97:6c:44:bf:0d:b8:93:d2:ee:ae:98:67:0e:a3:a5:fe:
e3:82:11:fb:07:a3:41:11:81:39:14:a8:94:ee:96:0d:a8:9d:
17:c9:2a:4e:3d:c8:ce:fe:8a:fd:9e:b1:a9:42:16:fb:73:52:
6c:c8:c6:a9:90:4c:67:c5:5a:43:9e:53:a0:a9:2e:ee:c8:35:
e8:00:33:2f:56:4f:08:c6:1d:77:23:e1:c2:8f:61:a7:a7:d0:
60:1f:2e:de:14:dd:b8:fa:96:50:6f:5c:a7:0d:ae:d1:d5:ca:
3c:24:3f:3c:4c:5d:9c:c4:5b:b3:4f:21:10:7a:86:9d:4f:29:
6a:5d:7b:04
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNort2/g2aMi9vPTu58FKqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQxMTI2MTMzNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTUwNjYzMWM0NTY5MDExYWI4YWJkYWY1NWZjZmRiNzlmYjE3MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA033IW1V3Dst5HAPAMZqKQFNUagpx
c6m6+XtWpFEh9y2SZ9yk9nPOxp91QhLlZ1bm7lO1xyxS4ew1exraw1nAMqBL19X8
uPhkzNC03xmp8DFBMp78n/FEnQe5K2bqhW4pbrr+uYFQ/iGXXoDgAUoYcdrDt/w/
V9VfRNrOftW2Ymr7Ov/e8ZLFD8PK55Z0gv0VcfhiKmJzRNm19IF5e9cjV+r0eVtn
wsmdRQWpyGzE546Ag92NQP/ygaLgOC6SryGjnkJMooVzjuB8n5ldOnVRxt7aizjn
06bnyUQNC9lCy1YhrrUgaUKEhdBmPsGCCeWCVR6RXRx605+nZbGuDEPtawIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKpQZjHEVpARq4q9r1X8/befsXDgMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvcWxCbU1jUldrQkdyaXIydlZmejl0NS14Y09BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFkN4beOyVAj8KmbT2CDqOcdJO/fHEJN
9LeMIUTm6v4SyPclC6fNARyZyhYFjzAnQ0QKidMmY7YcJpE0bHConIm3aukUmbdu
UGt3PCBK8Vl2kZ6SmV/cYdZyrAKS7jUvJW4qiUAxBK+NrBoGVGJE4Pgs7OoUqhtw
zQAtYGdLbPTMl2xEvw24k9LurphnDqOl/uOCEfsHo0ERgTkUqJTulg2onRfJKk49
yM7+iv2esalCFvtzUmzIxqmQTGfFWkOeU6CpLu7INegAMy9WTwjGHXcj4cKPYaen
0GAfLt4U3bj6llBvXKcNrtHVyjwkPzxMXZzEW7NPIRB6hp1PKWpdewQ=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:35 2024 by rpki-client on console.sobornost.net