Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/A4rgosaZXaAS3oVmHvTkN0aKZ20.roa
File: A4rgosaZXaAS3oVmHvTkN0aKZ20.roa (raw, json)
Hash identifier: i5AmRhEAy4xjK2z3q69PkI+4nAInhkmaOK8g8v0DHM4=
Subject key identifier: 03:8A:E0:A2:C6:99:5D:A0:12:DE:85:66:1E:F4:E4:37:46:8A:67:6D
Certificate issuer: /CN=535773d7face4d95307a23439fe94e9adfa64a12
Certificate serial: 0184D801827F6B45C81E8225CFA943A3DF66
Authority key identifier: 53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/A4rgosaZXaAS3oVmHvTkN0aKZ20.roa
Signing time: Sat 03 Dec 2022 12:41:28 +0000
ROA not before: Sat 03 Dec 2022 12:41:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 212.46.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:01:82:7f:6b:45:c8:1e:82:25:cf:a9:43:a3:df:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535773d7face4d95307a23439fe94e9adfa64a12
Validity
Not Before: Dec 3 12:41:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=038ae0a2c6995da012de85661ef4e437468a676d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6e:f4:7f:2a:47:e3:e2:bb:8f:36:50:ee:7b:
f9:fb:90:ba:46:ef:09:b3:b6:9c:1c:24:d8:25:5a:
9a:0e:d2:bb:19:ec:cc:ea:08:f8:d3:f4:8d:4a:03:
23:fd:29:4d:d0:59:ab:05:e8:2e:00:a4:e6:34:2b:
49:8f:e0:86:6d:6b:c0:50:c2:f4:09:76:b1:31:34:
00:c2:80:c6:d0:46:71:cc:bd:fe:7f:76:58:d9:af:
f7:64:3f:3e:87:82:47:ae:3d:28:fa:45:4f:77:9e:
f0:4b:11:d6:8b:f1:de:32:ca:50:9c:83:85:a0:cf:
29:bb:27:67:46:f7:79:43:90:03:bf:26:28:78:45:
82:df:e3:ed:0d:36:08:e3:be:59:8b:c3:82:eb:2d:
1f:01:21:bd:d4:59:01:fa:2a:15:9c:3c:d0:1b:41:
ca:24:1f:70:58:09:56:56:70:1d:dc:b6:72:07:2b:
f2:e8:7f:f1:e9:bc:3d:a6:2a:bf:93:4c:3d:90:59:
0a:b4:ad:54:85:fb:11:5d:d2:4e:bc:36:0d:d8:bc:
b5:65:7f:b3:36:ae:0d:29:4a:f9:d4:5f:3b:51:1e:
a2:f6:70:d4:8f:68:b9:45:1d:a9:5a:a4:14:13:e6:
1c:0a:94:76:b2:8d:51:ca:f3:3c:c3:f3:50:51:4b:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:E0:A2:C6:99:5D:A0:12:DE:85:66:1E:F4:E4:37:46:8A:67:6D
X509v3 Authority Key Identifier:
keyid:53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/A4rgosaZXaAS3oVmHvTkN0aKZ20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.35.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fd:b9:60:f3:05:fb:6d:df:cd:5c:58:e1:c2:92:19:c4:8e:
8d:f0:ce:3d:98:61:8c:13:55:8d:91:92:c9:fe:fa:ef:a5:9d:
3b:55:3b:8c:f0:a6:e2:6a:36:ab:ca:fa:e4:61:bd:cb:9a:8f:
cb:4c:12:81:7d:96:ae:89:39:65:ce:e2:07:17:d1:2b:f5:6d:
00:6b:80:8a:63:50:5e:8b:d7:4b:fb:34:e4:5d:46:c7:4e:d8:
db:b0:bd:07:3a:7f:c6:de:5b:7f:68:a7:95:3c:7c:02:58:ed:
5c:c6:1c:d2:c3:eb:72:5c:e7:35:6e:17:22:c0:36:14:a4:89:
25:98:45:77:9f:3a:bc:f7:84:b7:e7:c5:be:12:85:9c:ea:f5:
34:0b:05:54:66:71:9b:28:5c:bf:cc:7a:4d:b0:0b:dd:d5:ba:
18:d9:ad:8c:0e:83:0d:41:a2:9c:7e:bd:c3:e6:3d:76:20:72:
90:44:be:bd:b0:8d:b9:21:41:24:82:55:e6:32:f3:1a:b5:b3:
ed:da:16:30:6e:e7:70:06:d7:a7:f0:de:27:db:84:62:f5:b0:
2f:3c:90:64:25:cf:5d:70:24:4a:b7:bb:80:f8:8b:a7:a5:1a:
90:42:82:c0:36:72:38:85:a9:b1:b5:44:3f:72:e4:e0:d8:e1:
32:28:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:32 2024 by rpki-client on console-ams.rpki-client.org