Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/hjnzzofTmUcnSX0asah5LP1ArB8.roa
File: hjnzzofTmUcnSX0asah5LP1ArB8.roa (raw, json)
Hash identifier: vxsWC/Vg5NJDmbWI8rwBhs47Ycfkl15uvL6KlXF4oJE=
Subject key identifier: 86:39:F3:CE:87:D3:99:47:27:49:7D:1A:B1:A8:79:2C:FD:40:AC:1F
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 0193300E65615A208632168E86352BE50DBD
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/hjnzzofTmUcnSX0asah5LP1ArB8.roa
Signing time: Fri 15 Nov 2024 13:41:10 +0000
ROA not before: Fri 15 Nov 2024 13:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214005
IP address blocks: 80.85.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:30:0e:65:61:5a:20:86:32:16:8e:86:35:2b:e5:0d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Nov 15 13:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8639f3ce87d3994727497d1ab1a8792cfd40ac1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:ee:97:1b:6f:41:55:1e:f0:f6:f2:da:0b:
a6:64:94:34:fe:ca:4e:0c:70:6b:ff:98:e0:d1:99:
ea:e7:f9:63:b0:ab:da:69:f6:a2:8b:4e:c1:d8:52:
fb:ed:d9:64:cf:af:df:f7:45:e0:dd:44:19:ac:34:
55:b5:bb:4e:7b:2d:14:01:53:87:b7:0d:14:f7:92:
a9:06:55:63:00:d9:e5:7d:dd:5e:13:bf:5c:e8:de:
a1:3d:b0:19:5f:a3:f5:eb:2d:1b:a1:92:b8:e2:d3:
a7:a6:1c:2d:19:a8:7f:2f:5c:eb:32:d1:1d:e0:58:
40:9d:a6:d0:2b:75:e3:ab:bf:db:42:ac:b7:10:eb:
d4:fa:06:c8:9c:63:2b:81:01:1c:ab:18:2f:d2:6e:
02:2e:98:52:4e:8a:35:db:a0:0e:8a:77:d5:7a:ae:
8d:6a:77:77:a4:94:72:4d:f5:70:d8:9e:68:88:f8:
18:60:07:d1:11:41:ce:cc:06:66:bb:51:ae:7d:33:
45:a5:e0:de:b6:f6:6b:71:8f:d4:c2:71:41:8a:83:
83:fe:23:86:03:35:68:e5:ae:ec:98:be:f1:71:a4:
22:67:6e:4c:c2:84:e2:f7:4c:ca:81:b9:f9:f9:08:
21:ab:0c:5e:de:cd:a2:fb:3a:b3:49:45:5c:64:14:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:F3:CE:87:D3:99:47:27:49:7D:1A:B1:A8:79:2C:FD:40:AC:1F
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/hjnzzofTmUcnSX0asah5LP1ArB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.208.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3a:7b:cd:19:97:8a:3f:41:52:f9:8c:5f:8f:e7:ec:6c:f4:
b5:4c:e9:e9:53:57:ec:f8:08:32:65:77:70:24:d3:94:00:4a:
27:2b:4e:ac:2f:38:14:17:b4:87:3c:35:5c:b1:ed:09:38:27:
4c:6b:23:c1:a7:42:39:68:3c:83:3a:ef:9f:65:56:05:86:50:
40:ca:ed:1a:7a:9d:52:c9:a0:03:cc:4a:e6:66:7e:75:29:11:
c5:e9:31:9a:fb:ed:fe:b4:7f:62:0d:a4:57:22:ed:51:bb:91:
97:ac:38:96:2b:fb:62:1b:84:49:e4:05:33:fe:1a:dc:88:30:
f1:15:56:9a:bd:87:7e:a5:31:8e:3d:00:67:58:21:17:2e:19:
f8:78:c9:a3:3e:cd:e9:d8:da:e5:c4:6e:dd:d4:ae:a9:ef:08:
cf:6e:d2:87:2d:7b:59:67:2d:f2:b5:94:8f:23:18:42:1b:90:
69:69:98:32:66:dd:3d:ba:2e:27:14:c6:c6:61:14:52:b3:77:
05:38:fc:c0:8a:f1:fb:72:b2:94:b1:ae:40:e6:8c:ee:40:b2:
0f:5c:9c:0b:00:e4:4e:92:14:76:02:30:62:ad:b1:b9:87:75:
15:f8:32:a3:61:b0:7d:40:5c:08:96:d7:5c:74:b4:dd:21:6b:
a8:f6:8a:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMwDmVhWiCGMhaOhjUr5Q29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjQzNTFlMGE0OTVjMjZlZmRjNmU0MTVmMGJiMTg5ZmJi
ZDZlZGYwHhcNMjQxMTE1MTM0MTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjM5ZjNjZTg3ZDM5OTQ3Mjc0OTdkMWFiMWE4NzkyY2ZkNDBhYzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/rulxtvQVUe8Pby2gumZJQ0/spO
DHBr/5jg0Znq5/ljsKvaafaii07B2FL77dlkz6/f90Xg3UQZrDRVtbtOey0UAVOH
tw0U95KpBlVjANnlfd1eE79c6N6hPbAZX6P16y0boZK44tOnphwtGah/L1zrMtEd
4FhAnabQK3Xjq7/bQqy3EOvU+gbInGMrgQEcqxgv0m4CLphSToo126AOinfVeq6N
and3pJRyTfVw2J5oiPgYYAfREUHOzAZmu1GufTNFpeDetvZrcY/UwnFBioOD/iOG
AzVo5a7smL7xcaQiZ25MwoTi90zKgbn5+Qghqwxe3s2i+zqzSUVcZBRm5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIY5886H05lHJ0l9GrGoeSz9QKwfMB8GA1UdIwQY
MBaAFMO0NR4KSVwm79xuQV8LsYn7vW7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTIt
MGVmMWNhYzc0MThkLzEvaGpuenpvZlRtVWNuU1gwYXNhaDVMUDFBckI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTItMGVmMWNhYzc0MThk
LzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFXQMA0G
CSqGSIb3DQEBCwUAA4IBAQAYOnvNGZeKP0FS+Yxfj+fsbPS1TOnpU1fs+AgyZXdw
JNOUAEonK06sLzgUF7SHPDVcse0JOCdMayPBp0I5aDyDOu+fZVYFhlBAyu0aep1S
yaADzErmZn51KRHF6TGa++3+tH9iDaRXIu1Ru5GXrDiWK/tiG4RJ5AUz/hrciDDx
FVaavYd+pTGOPQBnWCEXLhn4eMmjPs3p2NrlxG7d1K6p7wjPbtKHLXtZZy3ytZSP
IxhCG5BpaZgyZt09ui4nFMbGYRRSs3cFOPzAivH7crKUsa5A5ozuQLIPXJwLAORO
khR2AjBirbG5h3UV+DKjYbB9QFwIltdcdLTdIWuo9or2
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:40 2024 by rpki-client on console.sobornost.net