Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/dCjGPqLiw4X5B_vc8A6Mj0SIQqE.roa
File: dCjGPqLiw4X5B_vc8A6Mj0SIQqE.roa (raw, json)
Hash identifier: 8K/JXy/mzGmk0O3Ln1F0C1+6121a1o5bHdtKrbsy2Gs=
Subject key identifier: 74:28:C6:3E:A2:E2:C3:85:F9:07:FB:DC:F0:0E:8C:8F:44:88:42:A1
Certificate issuer: /CN=e32cbc07e38404e2343d851a88a7066a1bd7ecc3
Certificate serial: 1B4CFAD6
Authority key identifier: E3:2C:BC:07:E3:84:04:E2:34:3D:85:1A:88:A7:06:6A:1B:D7:EC:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yy8B-OEBOI0PYUaiKcGahvX7MM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/dCjGPqLiw4X5B_vc8A6Mj0SIQqE.roa
Signing time: Tue 29 Mar 2022 07:53:05 +0000
ROA not before: Tue 29 Mar 2022 07:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35765
IP address blocks: 185.35.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458029782 (0x1b4cfad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32cbc07e38404e2343d851a88a7066a1bd7ecc3
Validity
Not Before: Mar 29 07:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7428c63ea2e2c385f907fbdcf00e8c8f448842a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:a1:1c:d3:6e:9e:e0:0f:5e:33:36:d6:96:
7a:54:bf:52:2d:80:86:49:b6:6b:2a:ed:81:40:e2:
1b:02:f3:83:0c:79:a6:3e:51:47:3b:7e:ff:c9:b2:
5f:8d:34:d5:37:c5:dd:df:df:23:0b:2b:9c:b7:60:
bd:3a:49:0d:d6:3e:c0:7c:e7:b5:c2:e2:9c:fe:bd:
a4:24:fd:0d:1f:d3:2f:4e:a1:74:b2:f0:0f:9a:8e:
3c:fc:d9:ad:ea:d1:6f:ce:be:b7:85:76:d7:a6:72:
bf:a6:3d:b4:35:20:52:9a:42:34:10:14:d3:b3:f2:
da:50:bc:fd:55:65:1f:fe:d6:34:f5:bf:6f:64:da:
53:ea:91:49:6a:49:93:12:49:07:8f:cd:81:62:b1:
0f:74:f3:ca:eb:fb:08:a0:7f:1f:08:52:7c:8f:9d:
9c:f9:09:42:6f:8a:b9:c8:ce:6a:20:80:c6:7d:37:
49:e4:09:6b:f1:0a:e9:e4:31:df:aa:17:cc:67:c7:
05:10:86:1a:7b:cb:a7:08:b5:2a:03:ce:c6:4e:c0:
97:17:86:50:7b:44:88:28:3d:e2:86:3d:e6:dd:57:
49:24:a2:ef:48:1b:34:86:79:84:c1:74:bc:61:1a:
bd:a5:91:90:e5:cb:7c:8d:98:e6:b8:50:56:39:07:
f5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:28:C6:3E:A2:E2:C3:85:F9:07:FB:DC:F0:0E:8C:8F:44:88:42:A1
X509v3 Authority Key Identifier:
keyid:E3:2C:BC:07:E3:84:04:E2:34:3D:85:1A:88:A7:06:6A:1B:D7:EC:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yy8B-OEBOI0PYUaiKcGahvX7MM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/dCjGPqLiw4X5B_vc8A6Mj0SIQqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/4yy8B-OEBOI0PYUaiKcGahvX7MM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:ef:6d:00:b1:da:ec:30:57:cf:5c:13:c2:a2:1a:36:74:46:
eb:ee:12:0e:91:0a:cf:70:63:6a:bc:01:1b:96:3f:eb:b5:df:
c5:69:7f:a2:04:f4:8f:03:c3:74:46:c3:15:cf:9e:ef:27:d0:
38:f6:6d:b7:56:b7:c2:66:be:44:49:25:0a:da:2d:e3:44:28:
90:f8:8d:de:2f:3f:f6:df:12:6b:8c:d8:e4:76:87:af:94:f9:
e6:e2:d7:db:70:54:e4:69:7e:5b:74:d1:46:93:8e:c1:6f:ce:
f7:18:fa:1b:54:d1:1b:d1:11:7b:e5:74:9b:32:53:7e:0b:7c:
fa:c7:a4:42:31:44:37:27:c6:e9:31:1c:5a:58:27:3d:fd:8e:
1d:55:93:cd:70:2f:d8:f5:e0:2d:45:7d:83:29:8d:59:5d:4d:
9e:af:72:25:0c:39:3e:17:a7:f3:df:0b:bd:ab:6f:c2:11:d7:
a5:57:b9:3f:87:1c:52:f4:15:77:85:b0:dc:5f:59:b8:83:bf:
5a:cf:12:99:77:7a:5b:38:cd:49:35:4b:dd:3a:2b:42:71:f8:
f3:a9:73:9a:0b:3a:4e:6e:fc:9f:b7:24:d2:f4:7d:58:a4:9c:
d2:ac:b0:a7:24:26:65:53:13:5a:91:8e:8b:c3:7e:7c:80:1d:
da:ec:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:51 2024 by rpki-client on console-ams.rpki-client.org