Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/hoFSh1vt4Rc-4L27G1bY8bwX06A.roa
File: hoFSh1vt4Rc-4L27G1bY8bwX06A.roa (raw, json)
Hash identifier: tiz3irNdSWQ+W5OjYdyqfIdzSvRSqRE4M+EUKvO5Vwg=
Subject key identifier: 86:81:52:87:5B:ED:E1:17:3E:E0:BD:BB:1B:56:D8:F1:BC:17:D3:A0
Certificate issuer: /CN=33f5ce1fc37927cb5a4e67b176c7a63b32ff6e89
Certificate serial: 018D842F1B1E9647714F1B1E7500A092B9D9
Authority key identifier: 33:F5:CE:1F:C3:79:27:CB:5A:4E:67:B1:76:C7:A6:3B:32:FF:6E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_XOH8N5J8taTmexdsemOzL_bok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/hoFSh1vt4Rc-4L27G1bY8bwX06A.roa
Signing time: Wed 07 Feb 2024 15:28:16 +0000
ROA not before: Wed 07 Feb 2024 15:28:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60922
IP address blocks: 185.161.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:2f:1b:1e:96:47:71:4f:1b:1e:75:00:a0:92:b9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f5ce1fc37927cb5a4e67b176c7a63b32ff6e89
Validity
Not Before: Feb 7 15:28:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=868152875bede1173ee0bdbb1b56d8f1bc17d3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:72:79:82:6a:9c:30:77:12:4f:b3:98:f8:
61:81:ae:f6:98:e3:30:1f:b2:69:5a:f4:f5:26:af:
1e:ae:4e:bf:a9:7e:65:15:6e:57:0a:a5:b4:ff:da:
07:e7:85:94:fb:4e:4e:d4:b0:00:b7:12:c0:01:14:
6f:bc:63:64:a5:5f:43:b5:18:92:6e:f4:31:f4:ee:
77:f9:27:2c:71:19:c0:7b:d2:33:28:5c:98:61:a8:
83:61:cb:49:4d:e7:82:c0:2d:35:9d:cc:16:49:89:
8e:57:ba:c7:f0:eb:9e:6a:fb:b8:37:c9:1b:ea:1e:
bc:a3:72:9a:31:2b:e9:66:4e:a5:ff:17:b0:b1:4b:
91:a0:39:66:5b:8b:a8:4d:01:da:e9:2a:dd:b3:dc:
30:4b:f2:1c:5e:6b:83:b7:76:14:3c:78:44:ca:ce:
bc:1a:92:2f:73:bc:97:7d:84:7c:28:84:8d:32:24:
a4:b3:42:f0:cb:0f:5b:ba:1e:68:77:85:f3:8f:42:
0b:73:99:b1:43:96:37:87:d4:de:0f:fe:94:2d:c1:
cc:83:f3:73:49:59:a7:c5:6f:d0:da:7c:06:b2:52:
48:21:0b:4f:af:81:b2:c5:74:b8:9e:63:a2:45:aa:
f7:ea:02:4f:96:35:ed:09:0f:96:72:10:50:f9:54:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:52:87:5B:ED:E1:17:3E:E0:BD:BB:1B:56:D8:F1:BC:17:D3:A0
X509v3 Authority Key Identifier:
keyid:33:F5:CE:1F:C3:79:27:CB:5A:4E:67:B1:76:C7:A6:3B:32:FF:6E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_XOH8N5J8taTmexdsemOzL_bok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/hoFSh1vt4Rc-4L27G1bY8bwX06A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/M_XOH8N5J8taTmexdsemOzL_bok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
88:52:f9:29:10:0a:33:95:30:58:77:c2:cd:b2:6b:c3:cf:62:
8e:2d:8d:44:0f:e6:5e:9d:e1:24:29:b4:fd:da:b5:b5:31:c0:
b0:07:4d:03:1c:53:d3:70:9c:dd:44:df:e8:8a:da:ad:d6:95:
04:68:0c:ce:2e:58:c5:68:96:03:fd:65:d9:89:35:99:4c:68:
61:0e:4b:55:21:80:1a:f8:7f:89:d8:69:2f:75:41:97:76:63:
9b:5f:19:2a:d1:5c:b3:9f:d3:64:ec:22:88:81:9f:4e:8e:47:
08:9a:eb:97:8a:fa:36:c9:40:f3:34:41:7c:50:95:b5:41:6f:
33:37:bc:f8:3c:64:8e:7a:31:40:22:a3:98:a0:c7:f9:a8:f1:
26:c1:44:3b:1a:a3:8f:69:19:93:9c:75:7f:c1:2a:63:38:98:
4e:75:b6:e0:4f:c9:52:15:37:36:f0:7b:f8:8a:c1:73:4a:b1:
81:d6:4a:bb:86:a1:a5:ae:37:6b:79:07:e4:27:1a:ac:33:f5:
6d:3a:25:ad:f4:2d:9a:ba:8b:3f:0f:94:9b:c0:a1:49:44:b0:
79:d4:72:d2:27:ef:90:a8:32:5a:3e:36:ec:f3:41:60:b3:d4:
22:e4:88:82:c5:46:e2:be:5e:59:d0:9f:14:cc:13:df:55:2b:
f9:1e:36:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2ELxselkdxTxsedQCgkrnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjVjZTFmYzM3OTI3Y2I1YTRlNjdiMTc2YzdhNjNiMzJm
ZjZlODkwHhcNMjQwMjA3MTUyODE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjgxNTI4NzViZWRlMTE3M2VlMGJkYmIxYjU2ZDhmMWJjMTdkM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM1yeYJqnDB3Ek+zmPhhga72mOMw
H7JpWvT1Jq8erk6/qX5lFW5XCqW0/9oH54WU+05O1LAAtxLAARRvvGNkpV9DtRiS
bvQx9O53+ScscRnAe9IzKFyYYaiDYctJTeeCwC01ncwWSYmOV7rH8Oueavu4N8kb
6h68o3KaMSvpZk6l/xewsUuRoDlmW4uoTQHa6Srds9wwS/IcXmuDt3YUPHhEys68
GpIvc7yXfYR8KISNMiSks0Lwyw9buh5od4Xzj0ILc5mxQ5Y3h9TeD/6ULcHMg/Nz
SVmnxW/Q2nwGslJIIQtPr4GyxXS4nmOiRar36gJPljXtCQ+WchBQ+VSfJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIaBUodb7eEXPuC9uxtW2PG8F9OgMB8GA1UdIwQY
MBaAFDP1zh/DeSfLWk5nsXbHpjsy/26JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9YT0g4TjVKOHRhVG1leGRzZW1PekxfYm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zYmI5ZDgtYmY1NC00ZThmLTgzZTUt
M2ZmYzAxZmNiZmI2LzEvaG9GU2gxdnQ0UmMtNEwyN0cxYlk4YndYMDZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zYmI5ZDgtYmY1NC00ZThmLTgzZTUtM2ZmYzAxZmNiZmI2
LzEvTV9YT0g4TjVKOHRhVG1leGRzZW1PekxfYm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaFPMA0G
CSqGSIb3DQEBCwUAA4IBAQCIUvkpEAozlTBYd8LNsmvDz2KOLY1ED+ZeneEkKbT9
2rW1McCwB00DHFPTcJzdRN/oitqt1pUEaAzOLljFaJYD/WXZiTWZTGhhDktVIYAa
+H+J2GkvdUGXdmObXxkq0Vyzn9Nk7CKIgZ9OjkcImuuXivo2yUDzNEF8UJW1QW8z
N7z4PGSOejFAIqOYoMf5qPEmwUQ7GqOPaRmTnHV/wSpjOJhOdbbgT8lSFTc28Hv4
isFzSrGB1kq7hqGlrjdreQfkJxqsM/VtOiWt9C2auos/D5SbwKFJRLB51HLSJ++Q
qDJaPjbs80Fgs9Qi5IiCxUbivl5Z0J8UzBPfVSv5HjY+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:09 2024 by rpki-client on console-ams.rpki-client.org