Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/8hszJzAnK0Ae6PNZ7OCNJAGBs7U.roa
File: 8hszJzAnK0Ae6PNZ7OCNJAGBs7U.roa (raw, json)
Hash identifier: 4i2NhW/f5kSu/JLNfPK95P+zvyy7fp3tAfqiu6XRw2U=
Subject key identifier: F2:1B:33:27:30:27:2B:40:1E:E8:F3:59:EC:E0:8D:24:01:81:B3:B5
Certificate issuer: /CN=f1ad914f8b68a56ef5f68e799f56ddcdaeee0bcc
Certificate serial: 01856C4A6406C075C929C40830770FCB4DEE
Authority key identifier: F1:AD:91:4F:8B:68:A5:6E:F5:F6:8E:79:9F:56:DD:CD:AE:EE:0B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a2RT4topW719o55n1bdza7uC8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/8hszJzAnK0Ae6PNZ7OCNJAGBs7U.roa
Signing time: Sun 01 Jan 2023 07:44:52 +0000
ROA not before: Sun 01 Jan 2023 07:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205836
IP address blocks: 185.85.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:64:06:c0:75:c9:29:c4:08:30:77:0f:cb:4d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1ad914f8b68a56ef5f68e799f56ddcdaeee0bcc
Validity
Not Before: Jan 1 07:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f21b332730272b401ee8f359ece08d240181b3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:2a:f3:34:63:29:95:47:46:b6:ed:8b:6e:
1f:2b:11:09:2d:62:4b:95:a2:ef:87:8b:58:79:68:
8f:4a:23:c0:f8:04:b9:09:52:c6:37:0b:0b:40:62:
be:b6:ea:82:c4:93:52:ec:f8:16:ac:ad:0f:7f:51:
ca:29:f4:c3:bb:fa:e3:58:ae:72:d9:31:6f:2f:c6:
91:87:f1:70:e2:9f:c6:26:ee:f4:df:81:11:ee:28:
7e:19:48:ff:4b:b8:bc:c5:48:89:d9:9e:ea:28:84:
6e:da:e6:45:55:bf:f4:c8:a7:f5:e5:06:cb:94:a2:
9e:2f:1e:94:ea:6b:0a:0f:8a:75:eb:12:92:70:1b:
06:32:0e:85:7d:1a:94:5d:bb:59:7f:3f:b5:0a:c6:
d6:ee:30:21:d9:a3:2e:48:dd:de:f3:7b:d2:2c:bd:
b8:63:e0:e5:a7:d6:da:6f:0f:92:94:9e:74:36:4f:
39:96:75:ec:d0:59:02:4b:d7:79:92:26:a8:84:81:
ad:a0:e5:48:41:3b:87:f1:ac:b7:8a:05:58:08:d7:
78:67:51:13:70:ce:50:94:cc:7b:ad:5d:32:8d:0f:
f6:47:3e:21:23:60:16:2c:af:54:34:45:d1:38:81:
e1:0d:92:81:20:ed:b4:37:d4:37:05:24:20:bf:08:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1B:33:27:30:27:2B:40:1E:E8:F3:59:EC:E0:8D:24:01:81:B3:B5
X509v3 Authority Key Identifier:
keyid:F1:AD:91:4F:8B:68:A5:6E:F5:F6:8E:79:9F:56:DD:CD:AE:EE:0B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a2RT4topW719o55n1bdza7uC8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/8hszJzAnK0Ae6PNZ7OCNJAGBs7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/8a2RT4topW719o55n1bdza7uC8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.254.0/24
Signature Algorithm: sha256WithRSAEncryption
56:87:87:77:43:68:22:f9:51:c6:98:0d:dd:ba:74:56:e5:03:
cc:25:fe:0a:ef:77:7a:33:6d:a6:d7:be:ab:c3:3b:ff:af:2b:
fb:5c:d3:24:6a:6c:88:77:e6:f0:0f:bd:24:bd:a4:04:d9:d2:
4c:78:97:7e:54:48:80:bb:b7:b0:b4:3d:ae:e1:d4:dc:e4:83:
c7:41:51:b3:b1:23:32:0a:46:52:32:f8:d7:d2:de:89:da:b6:
7e:e0:27:a6:10:ed:e5:b8:8d:ac:83:6b:6a:52:ba:6d:9f:c0:
42:ae:b3:51:fb:3f:d7:81:ea:d1:15:7e:fc:95:2d:09:97:95:
c4:cc:d3:6d:69:3c:c0:6e:f7:d1:d3:12:e8:12:0b:86:06:12:
01:96:46:1e:0d:7c:29:31:6f:fe:34:92:ab:69:ab:23:d9:6f:
cb:0b:02:4c:90:f2:11:6e:c5:9b:6a:b3:6d:23:34:34:37:e2:
64:14:cf:f4:f2:08:7b:1f:da:f4:28:91:ed:8a:17:14:37:8e:
9c:7a:fb:c6:59:15:9c:8d:a9:3a:b7:cc:29:e3:99:eb:25:8d:
8a:07:0e:14:c9:03:40:b1:54:00:03:2b:a4:ed:02:a1:6c:d9:
93:95:1e:4d:df:58:d5:6c:62:b0:45:77:b2:f6:56:37:58:ec:
86:02:6c:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsSmQGwHXJKcQIMHcPy03uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYWQ5MTRmOGI2OGE1NmVmNWY2OGU3OTlmNTZkZGNkYWVl
ZTBiY2MwHhcNMjMwMTAxMDc0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjFiMzMyNzMwMjcyYjQwMWVlOGYzNTllY2UwOGQyNDAxODFiM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZAq8zRjKZVHRrbti24fKxEJLWJL
laLvh4tYeWiPSiPA+AS5CVLGNwsLQGK+tuqCxJNS7PgWrK0Pf1HKKfTDu/rjWK5y
2TFvL8aRh/Fw4p/GJu7034ER7ih+GUj/S7i8xUiJ2Z7qKIRu2uZFVb/0yKf15QbL
lKKeLx6U6msKD4p16xKScBsGMg6FfRqUXbtZfz+1CsbW7jAh2aMuSN3e83vSLL24
Y+Dlp9babw+SlJ50Nk85lnXs0FkCS9d5kiaohIGtoOVIQTuH8ay3igVYCNd4Z1ET
cM5QlMx7rV0yjQ/2Rz4hI2AWLK9UNEXROIHhDZKBIO20N9Q3BSQgvwjHtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPIbMycwJytAHujzWezgjSQBgbO1MB8GA1UdIwQY
MBaAFPGtkU+LaKVu9faOeZ9W3c2u7gvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGEyUlQ0dG9wVzcxOW81NW4xYmR6YTd1Qzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kMGY2ZjUtYTlhMS00ZWQ5LWE0YzMt
ZmQyZTA0YmIwMWU3LzEvOGhzekp6QW5LMEFlNlBOWjdPQ05KQUdCczdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kMGY2ZjUtYTlhMS00ZWQ5LWE0YzMtZmQyZTA0YmIwMWU3
LzEvOGEyUlQ0dG9wVzcxOW81NW4xYmR6YTd1Qzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVX+MA0G
CSqGSIb3DQEBCwUAA4IBAQBWh4d3Q2gi+VHGmA3dunRW5QPMJf4K73d6M22m176r
wzv/ryv7XNMkamyId+bwD70kvaQE2dJMeJd+VEiAu7ewtD2u4dTc5IPHQVGzsSMy
CkZSMvjX0t6J2rZ+4CemEO3luI2sg2tqUrptn8BCrrNR+z/XgerRFX78lS0Jl5XE
zNNtaTzAbvfR0xLoEguGBhIBlkYeDXwpMW/+NJKraasj2W/LCwJMkPIRbsWbarNt
IzQ0N+JkFM/08gh7H9r0KJHtihcUN46cevvGWRWcjak6t8wp45nrJY2KBw4UyQNA
sVQAAyuk7QKhbNmTlR5N31jVbGKwRXey9lY3WOyGAmz4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:38 2024 by rpki-client on console-ams.rpki-client.org