Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/3sbZCoI9OFOQzctmJpiCBbrpkyU.roa
File: 3sbZCoI9OFOQzctmJpiCBbrpkyU.roa (raw, json)
Hash identifier: PRrSCIQmAVOXmH3MtGpOlhHDqaPJmf6I+8+kpet13go=
Subject key identifier: DE:C6:D9:0A:82:3D:38:53:90:CD:CB:66:26:98:82:05:BA:E9:93:25
Certificate issuer: /CN=535773d7face4d95307a23439fe94e9adfa64a12
Certificate serial: 0184D88559AC051F823ED4BF812BDC8282E9
Authority key identifier: 53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/3sbZCoI9OFOQzctmJpiCBbrpkyU.roa
Signing time: Sat 03 Dec 2022 15:05:28 +0000
ROA not before: Sat 03 Dec 2022 15:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 212.46.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:85:59:ac:05:1f:82:3e:d4:bf:81:2b:dc:82:82:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535773d7face4d95307a23439fe94e9adfa64a12
Validity
Not Before: Dec 3 15:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dec6d90a823d385390cdcb6626988205bae99325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7c:d7:6c:02:64:e1:63:db:f7:95:6a:8f:4a:
61:71:7b:44:17:18:9d:07:54:bb:2b:46:dc:16:2d:
db:dc:de:27:f0:bb:c0:f1:07:d9:7f:ac:52:0b:ed:
22:fc:ab:84:59:bb:9b:a4:fc:57:e6:16:b3:31:81:
88:9b:29:00:b3:58:b7:3a:30:75:e4:c8:1d:36:1c:
82:21:cf:c4:c6:85:70:e9:f8:c3:7d:93:57:58:a6:
8a:bd:9d:1a:8c:52:40:0f:5f:df:a6:ea:57:dd:24:
09:e0:2b:8a:24:f6:b9:84:60:98:b9:2e:15:e1:06:
83:1e:e6:80:d3:c9:37:73:d3:38:17:79:d5:43:8f:
70:19:24:0b:37:41:73:3c:c9:27:74:c2:4a:d0:e3:
7f:5e:30:44:cd:1f:28:01:c2:76:71:ea:c2:7f:ff:
f0:af:56:57:c2:6d:31:ec:ec:3f:54:1b:a0:21:a8:
b4:2b:13:bb:74:33:6f:8d:4b:2d:6a:30:24:3f:25:
90:f3:e1:67:49:56:eb:09:8e:79:7f:31:ec:84:3d:
c1:51:c6:98:ff:3d:8b:14:5e:77:e8:a9:f7:38:dd:
cb:a5:84:96:fe:08:57:03:83:6a:10:95:32:25:c9:
29:7d:17:34:fb:b8:5e:8c:99:db:0d:66:39:6d:3a:
36:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C6:D9:0A:82:3D:38:53:90:CD:CB:66:26:98:82:05:BA:E9:93:25
X509v3 Authority Key Identifier:
keyid:53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/3sbZCoI9OFOQzctmJpiCBbrpkyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.35.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ee:85:cc:50:6b:18:7a:12:53:8f:01:10:87:da:5c:0a:8f:
33:90:b2:60:93:aa:57:d2:b6:4b:d1:1b:af:4a:72:0b:eb:2f:
06:62:6f:61:5f:53:44:8c:67:e7:99:c0:76:ef:5b:e7:e7:9c:
18:c8:13:2c:3d:a1:f1:90:7f:aa:74:2f:ec:9e:3a:9d:9d:37:
28:3d:78:69:53:02:d2:8d:07:e8:fc:11:27:d0:0f:74:40:ca:
33:0e:5a:d1:13:1e:da:7f:77:79:c5:61:fe:f9:5c:c6:47:ae:
96:68:35:ad:c5:f6:28:1c:63:83:fe:b3:a2:17:d6:06:4f:d6:
9a:47:c9:37:d4:af:3c:49:06:be:0f:6c:4d:bd:5e:36:3c:65:
e8:a7:f9:7b:50:f2:33:68:1a:5d:56:af:7c:e7:87:a7:38:3a:
93:da:eb:ef:d4:36:10:c6:8c:bf:7e:7b:29:55:38:36:23:9e:
da:eb:89:0a:46:25:d6:5e:d1:92:38:67:43:d2:a3:fa:f0:cf:
eb:fc:0a:5f:a2:fc:66:69:01:8b:a7:29:d2:6f:5d:a6:02:94:
3d:70:40:7e:19:d2:55:b6:1a:f4:d6:a1:49:e8:e5:29:76:83:
1e:9d:3f:cc:d1:16:59:cd:10:f0:4f:e3:0d:c8:62:48:f5:94:
0d:61:a2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:11 2024 by rpki-client on console-fra.rpki-client.org