Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/4oMlbBZ__Rm6klW5gUc9QQ44IQk.roa
File: 4oMlbBZ__Rm6klW5gUc9QQ44IQk.roa (raw, json)
Hash identifier: 2HxEf2zYao4qGYtUmUI8P+6q+dl8oLuETqJegnxQaCY=
Subject key identifier: E2:83:25:6C:16:7F:FD:19:BA:92:55:B9:81:47:3D:41:0E:38:21:09
Certificate issuer: /CN=f6bbebb55a2d22585aaf20e62f5f0d245f9aa158
Certificate serial: 018539011B26F5C59F78AC06764FBD9AD8E0
Authority key identifier: F6:BB:EB:B5:5A:2D:22:58:5A:AF:20:E6:2F:5F:0D:24:5F:9A:A1:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rvrtVotIlharyDmL18NJF-aoVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/4oMlbBZ__Rm6klW5gUc9QQ44IQk.roa
Signing time: Thu 22 Dec 2022 08:44:11 +0000
ROA not before: Thu 22 Dec 2022 08:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42156
IP address blocks: 185.161.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:01:1b:26:f5:c5:9f:78:ac:06:76:4f:bd:9a:d8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bbebb55a2d22585aaf20e62f5f0d245f9aa158
Validity
Not Before: Dec 22 08:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e283256c167ffd19ba9255b981473d410e382109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ad:5d:54:0c:63:65:27:27:92:04:c3:ec:b6:
cd:24:71:93:af:7c:0d:e0:0e:b7:f9:f3:a6:a0:a3:
59:f7:6b:28:3a:7e:6b:69:94:55:88:f6:fb:46:40:
1b:66:b2:ea:15:0e:ed:83:fe:68:2e:f5:69:28:d1:
84:a4:04:eb:90:f5:16:51:e8:79:8b:5d:60:11:4d:
6a:f6:e6:5e:c4:97:3d:ca:54:bb:45:31:33:59:3f:
23:2d:91:b2:58:b6:be:71:67:11:9e:9f:2d:38:1e:
dc:78:14:5f:76:ee:a6:f1:14:a2:e2:4c:25:7d:4b:
f7:38:59:cf:5e:af:01:d1:c6:57:b1:0b:dc:91:a0:
90:8d:e0:c5:c2:49:51:f8:3e:e4:a1:b1:95:ff:c8:
44:a2:e8:c2:0c:3c:43:40:69:17:8f:62:e6:a9:52:
6a:95:99:58:f6:ec:d0:a1:25:8b:31:ec:87:d6:2b:
47:58:08:b0:99:ad:8f:31:08:2f:3b:ec:3f:ea:45:
a8:7c:65:89:48:04:9c:17:8e:04:64:95:53:db:20:
a1:8a:21:87:1a:20:f6:d8:42:87:3f:7a:a0:b0:c1:
b8:24:84:34:05:6a:12:b7:53:69:e4:d4:fd:48:a0:
95:ca:78:f9:fe:fe:38:24:7d:34:f2:a3:f5:f8:cb:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:25:6C:16:7F:FD:19:BA:92:55:B9:81:47:3D:41:0E:38:21:09
X509v3 Authority Key Identifier:
keyid:F6:BB:EB:B5:5A:2D:22:58:5A:AF:20:E6:2F:5F:0D:24:5F:9A:A1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rvrtVotIlharyDmL18NJF-aoVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/4oMlbBZ__Rm6klW5gUc9QQ44IQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/73d43a-738a-4261-b5b1-293420b1eb98/1/9rvrtVotIlharyDmL18NJF-aoVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.188.0/24
Signature Algorithm: sha256WithRSAEncryption
16:20:f0:c0:dd:9e:43:11:a8:83:e0:48:57:dc:f3:c7:e5:da:
df:18:3b:95:d9:9c:67:a1:29:4d:77:b7:a5:5d:05:13:0f:b6:
45:76:ce:9f:c8:02:6b:ee:07:58:10:ae:fd:79:9f:d9:57:28:
66:d7:bb:50:f9:d2:e0:77:23:c2:03:5e:8e:37:e1:28:ab:04:
d1:4a:2f:3a:de:8c:7b:06:9f:94:54:39:96:5f:89:54:05:19:
fb:7d:31:dc:b6:a2:0d:77:05:ea:eb:99:a7:9d:f0:d2:5b:75:
f8:31:f2:67:2f:fd:b3:4c:81:c4:06:de:e2:cc:a9:eb:a6:a3:
9d:98:f3:a2:09:75:99:07:cf:61:54:ad:0d:2f:62:24:43:4d:
d3:48:75:58:be:0c:db:b8:fa:eb:43:04:b1:50:18:c9:76:de:
a7:37:ec:02:91:cf:ca:3c:61:26:27:f4:1a:ac:0c:10:49:04:
86:ca:e1:1b:69:3d:d4:b6:3a:b2:55:f1:6f:23:cf:00:b3:97:
9d:7e:d5:d9:26:16:65:5f:f6:79:34:96:b8:09:65:24:5b:7b:
ff:16:98:e1:f9:af:79:05:c8:ca:f3:4b:7a:b3:f2:79:15:bc:
d8:60:ad:96:a6:7d:80:af:e5:dc:d7:94:e9:4e:4b:46:19:cd:
c4:57:57:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYU5ARsm9cWfeKwGdk+9mtjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmJlYmI1NWEyZDIyNTg1YWFmMjBlNjJmNWYwZDI0NWY5
YWExNTgwHhcNMjIxMjIyMDg0NDExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjgzMjU2YzE2N2ZmZDE5YmE5MjU1Yjk4MTQ3M2Q0MTBlMzgyMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq1dVAxjZScnkgTD7LbNJHGTr3wN
4A63+fOmoKNZ92soOn5raZRViPb7RkAbZrLqFQ7tg/5oLvVpKNGEpATrkPUWUeh5
i11gEU1q9uZexJc9ylS7RTEzWT8jLZGyWLa+cWcRnp8tOB7ceBRfdu6m8RSi4kwl
fUv3OFnPXq8B0cZXsQvckaCQjeDFwklR+D7kobGV/8hEoujCDDxDQGkXj2LmqVJq
lZlY9uzQoSWLMeyH1itHWAiwma2PMQgvO+w/6kWofGWJSAScF44EZJVT2yChiiGH
GiD22EKHP3qgsMG4JIQ0BWoSt1Np5NT9SKCVynj5/v44JH008qP1+MtuPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOKDJWwWf/0ZupJVuYFHPUEOOCEJMB8GA1UdIwQY
MBaAFPa767VaLSJYWq8g5i9fDSRfmqFYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJ2cnRWb3RJbGhhcnlEbUwxOE5KRi1hb1ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83M2Q0M2EtNzM4YS00MjYxLWI1YjEt
MjkzNDIwYjFlYjk4LzEvNG9NbGJCWl9fUm02a2xXNWdVYzlRUTQ0SVFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83M2Q0M2EtNzM4YS00MjYxLWI1YjEtMjkzNDIwYjFlYjk4
LzEvOXJ2cnRWb3RJbGhhcnlEbUwxOE5KRi1hb1ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaG8MA0G
CSqGSIb3DQEBCwUAA4IBAQAWIPDA3Z5DEaiD4EhX3PPH5drfGDuV2ZxnoSlNd7el
XQUTD7ZFds6fyAJr7gdYEK79eZ/ZVyhm17tQ+dLgdyPCA16ON+EoqwTRSi863ox7
Bp+UVDmWX4lUBRn7fTHctqINdwXq65mnnfDSW3X4MfJnL/2zTIHEBt7izKnrpqOd
mPOiCXWZB89hVK0NL2IkQ03TSHVYvgzbuPrrQwSxUBjJdt6nN+wCkc/KPGEmJ/Qa
rAwQSQSGyuEbaT3UtjqyVfFvI88As5edftXZJhZlX/Z5NJa4CWUkW3v/Fpjh+a95
BcjK80t6s/J5FbzYYK2Wpn2Ar+Xc15TpTktGGc3EV1dw
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:38 2024 by rpki-client on console-ams.rpki-client.org