Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/7OqTUeXosE005hzdzI9myPkBOoc.roa
File: 7OqTUeXosE005hzdzI9myPkBOoc.roa (raw, json)
Hash identifier: 9Zeaf4+jTiAcL1NdB9ZyXkVT4B6PD6WiwZL0pLcmsGc=
Subject key identifier: EC:EA:93:51:E5:E8:B0:4D:34:E6:1C:DD:CC:8F:66:C8:F9:01:3A:87
Certificate issuer: /CN=535773d7face4d95307a23439fe94e9adfa64a12
Certificate serial: 018450D1138FF2A0FCC926D51C78F6DA9390
Authority key identifier: 53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/7OqTUeXosE005hzdzI9myPkBOoc.roa
Signing time: Mon 07 Nov 2022 06:39:50 +0000
ROA not before: Mon 07 Nov 2022 06:39:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 212.46.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:50:d1:13:8f:f2:a0:fc:c9:26:d5:1c:78:f6:da:93:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535773d7face4d95307a23439fe94e9adfa64a12
Validity
Not Before: Nov 7 06:39:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecea9351e5e8b04d34e61cddcc8f66c8f9013a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4e:f3:0d:cb:49:5f:14:96:c9:8a:b5:40:78:
7f:ed:7b:39:c0:fc:54:75:f3:73:24:47:b7:8f:2b:
21:0f:98:21:7b:7e:4a:77:02:ff:31:a1:4a:e5:4c:
e0:ec:ba:b9:14:c6:72:da:03:da:a7:d0:47:79:a1:
5c:1d:33:95:ef:af:f2:74:aa:f7:8e:0a:2b:0f:9d:
b9:f2:d4:e6:a9:57:56:aa:fe:37:f8:60:6e:67:d6:
6e:9e:02:58:d5:2e:52:21:54:b6:34:64:27:8f:54:
8c:9a:90:82:93:15:f9:25:ff:62:af:19:98:f3:12:
cf:e8:0a:c1:0c:c6:4c:4c:8f:59:2b:97:14:88:00:
b4:5d:66:a8:36:40:b4:95:f1:91:1b:4b:66:0c:56:
f0:4b:d5:4a:72:74:27:27:11:03:4c:ab:a4:00:32:
5c:eb:99:0e:b1:c2:4c:f8:20:40:d4:83:67:ff:51:
1b:f4:ca:8e:56:cb:f8:07:96:34:e9:fa:99:e7:0e:
7d:4d:50:88:e2:ee:b0:f9:34:bb:ec:3c:2e:13:ec:
90:cc:55:af:7e:bf:e7:72:85:4f:b2:df:98:94:c1:
79:42:c1:03:f7:f7:e4:bf:3a:44:dd:2a:01:71:c3:
20:fa:ec:54:4a:c7:90:af:07:91:86:b2:5d:49:94:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EA:93:51:E5:E8:B0:4D:34:E6:1C:DD:CC:8F:66:C8:F9:01:3A:87
X509v3 Authority Key Identifier:
keyid:53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/7OqTUeXosE005hzdzI9myPkBOoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.35.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c4:54:ad:5d:7f:79:1c:e0:18:aa:f9:d1:a4:42:95:2e:9f:
67:22:eb:96:a0:cd:76:a0:4a:f2:bd:6a:1b:45:8f:5f:b6:9d:
a1:aa:8a:73:17:b9:4b:bd:22:aa:60:30:22:3c:96:ff:25:5f:
d9:48:99:30:0a:df:e9:f3:77:fc:8b:50:5e:10:cd:6c:12:30:
f2:7b:ed:af:6a:b0:61:5c:10:76:8f:79:5b:d4:48:8c:cc:fb:
2b:f3:21:21:92:e3:70:13:84:aa:1c:1d:0b:ed:fa:bf:c9:67:
11:f5:80:00:57:2c:22:8c:81:75:2f:36:fb:d6:30:fe:ea:77:
6c:9c:2e:ea:79:40:4e:f3:61:19:ff:c3:dc:01:ae:f2:02:09:
be:a3:07:ae:dc:5e:8f:29:e2:df:6d:ae:ad:94:ae:74:30:b5:
b3:e8:d4:f1:7c:ce:3e:6f:26:3b:0c:8a:7f:f0:92:4c:da:83:
de:40:30:33:0e:a7:ea:2c:ef:b0:b3:6e:b6:4e:23:69:50:e7:
19:13:a3:6d:54:29:4c:f2:4d:d3:4e:54:a5:a3:71:28:df:f6:
ec:9a:8f:69:b3:58:e7:a0:a6:af:ee:61:1d:f7:d0:3b:ca:da:
e6:3c:fb:bf:c6:30:ed:d8:6b:52:aa:b4:20:04:10:65:8d:a6:
fb:94:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:19 2025 by rpki-client