Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/ooQx6-ecyy9-Ut_aaPn6NopPH74.roa
File: ooQx6-ecyy9-Ut_aaPn6NopPH74.roa (raw, json)
Hash identifier: 9NaICI+nrudDKtrTiQ/KJDizqpx6MwskDjNCtzN95+U=
Subject key identifier: A2:84:31:EB:E7:9C:CB:2F:7E:52:DF:DA:68:F9:FA:36:8A:4F:1F:BE
Certificate issuer: /CN=535773d7face4d95307a23439fe94e9adfa64a12
Certificate serial: 01826C63E8C7195FC34448E26C48D3F62958
Authority key identifier: 53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/ooQx6-ecyy9-Ut_aaPn6NopPH74.roa
Signing time: Fri 05 Aug 2022 05:04:23 +0000
ROA not before: Fri 05 Aug 2022 05:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 212.46.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6c:63:e8:c7:19:5f:c3:44:48:e2:6c:48:d3:f6:29:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535773d7face4d95307a23439fe94e9adfa64a12
Validity
Not Before: Aug 5 05:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a28431ebe79ccb2f7e52dfda68f9fa368a4f1fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5e:10:9e:82:fc:33:26:a0:6d:b3:82:f1:7c:
4a:c3:82:48:c7:e7:4a:f3:1a:46:61:af:51:74:82:
2b:b5:5f:b6:6b:f4:e1:2d:ee:38:78:5c:19:ad:7f:
36:66:7f:79:d5:27:01:75:24:a8:98:90:b9:36:28:
36:7c:b7:14:7d:60:f9:ac:59:66:f0:6a:c1:8b:d3:
83:9a:33:36:4a:ef:ad:bf:1d:e7:ee:59:d0:90:bb:
47:57:16:01:c3:ba:1e:4b:f9:2d:ac:07:19:e3:8c:
74:e8:9d:39:b0:03:4a:bd:d0:9d:75:c7:5b:e6:ad:
30:fe:69:82:6b:a2:31:dc:f1:c3:59:48:5b:01:5f:
38:37:b1:8b:4c:48:7c:0a:14:1e:50:d5:90:9b:13:
97:0a:a1:46:f8:6e:d1:1c:ab:c7:cd:6c:80:a6:e0:
13:c9:b4:86:b1:01:99:63:97:ef:35:69:2c:5c:4c:
f1:3f:ae:45:1e:e5:c7:cf:f4:2f:20:e1:4f:6d:6d:
2e:50:5c:61:33:1b:81:c1:90:62:ec:bb:14:14:fa:
8c:67:50:8e:04:15:e1:2c:d8:a6:d8:3d:20:40:e2:
67:e0:19:8b:54:30:7f:ac:1d:51:b7:cf:a2:7f:1d:
df:b9:12:ad:c6:fd:ee:15:73:9b:05:0d:c0:62:ad:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:84:31:EB:E7:9C:CB:2F:7E:52:DF:DA:68:F9:FA:36:8A:4F:1F:BE
X509v3 Authority Key Identifier:
keyid:53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/ooQx6-ecyy9-Ut_aaPn6NopPH74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.35.0/24
Signature Algorithm: sha256WithRSAEncryption
27:80:5d:1d:df:4b:e0:b9:fb:19:cd:a2:93:56:c1:c3:83:c2:
9a:36:2f:44:a4:5b:cc:12:00:bc:82:75:aa:38:ba:30:d0:f8:
73:70:f3:5c:e8:be:5d:95:51:ed:70:10:54:35:47:04:ac:99:
4e:7d:6b:da:34:d5:e3:af:ac:2b:98:43:b5:00:4e:4c:0a:2e:
5c:c3:fa:a7:6f:25:56:6c:49:fa:ef:bb:5e:ae:ad:39:22:ed:
12:bc:d0:54:8b:a7:36:69:c9:ca:b2:48:1c:bb:cf:a5:94:49:
e8:f7:19:8b:f8:61:a7:c0:c2:87:d2:61:6c:b8:d7:0f:e9:df:
41:b8:2f:91:f6:9f:b3:a6:ac:03:c9:be:7a:73:50:a2:a9:6c:
c3:9c:ba:5a:0e:9d:0c:3e:73:d3:af:f3:8f:7a:b1:5d:da:14:
4e:b8:d5:e8:fd:fd:cf:c2:09:a9:76:34:63:a3:f5:cb:51:89:
d4:47:cc:bc:ef:93:33:2b:8b:2a:f5:9a:79:d7:45:03:54:90:
e9:76:b1:ad:b5:5d:02:5c:89:6e:a3:18:62:90:e9:d9:38:02:
9e:58:37:47:c9:9c:e3:d8:48:89:ab:2e:d9:a8:22:c2:a7:34:
d9:4c:04:1c:4f:46:62:90:8c:5c:cf:ef:0f:97:a8:b1:b9:11:
4d:a1:bc:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJsY+jHGV/DREjibEjT9ilYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTc3M2Q3ZmFjZTRkOTUzMDdhMjM0MzlmZTk0ZTlhZGZh
NjRhMTIwHhcNMjIwODA1MDUwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjg0MzFlYmU3OWNjYjJmN2U1MmRmZGE2OGY5ZmEzNjhhNGYxZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV4QnoL8MyagbbOC8XxKw4JIx+dK
8xpGYa9RdIIrtV+2a/ThLe44eFwZrX82Zn951ScBdSSomJC5Nig2fLcUfWD5rFlm
8GrBi9ODmjM2Su+tvx3n7lnQkLtHVxYBw7oeS/ktrAcZ44x06J05sANKvdCddcdb
5q0w/mmCa6Ix3PHDWUhbAV84N7GLTEh8ChQeUNWQmxOXCqFG+G7RHKvHzWyApuAT
ybSGsQGZY5fvNWksXEzxP65FHuXHz/QvIOFPbW0uUFxhMxuBwZBi7LsUFPqMZ1CO
BBXhLNim2D0gQOJn4BmLVDB/rB1Rt8+ifx3fuRKtxv3uFXObBQ3AYq1E/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKKEMevnnMsvflLf2mj5+jaKTx++MB8GA1UdIwQY
MBaAFFNXc9f6zk2VMHojQ5/pTprfpkoSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFkejFfck9UWlV3ZWlORG4tbE9tdC1tU2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82ZmYyNGEtYzkxNS00NDkzLWEzNGUt
YmNmZTRlN2IzZGNjLzEvb29ReDYtZWN5eTktVXRfYWFQbjZOb3BQSDc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82ZmYyNGEtYzkxNS00NDkzLWEzNGUtYmNmZTRlN2IzZGNj
LzEvVTFkejFfck9UWlV3ZWlORG4tbE9tdC1tU2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4jMA0G
CSqGSIb3DQEBCwUAA4IBAQAngF0d30vgufsZzaKTVsHDg8KaNi9EpFvMEgC8gnWq
OLow0PhzcPNc6L5dlVHtcBBUNUcErJlOfWvaNNXjr6wrmEO1AE5MCi5cw/qnbyVW
bEn677terq05Iu0SvNBUi6c2acnKskgcu8+llEno9xmL+GGnwMKH0mFsuNcP6d9B
uC+R9p+zpqwDyb56c1CiqWzDnLpaDp0MPnPTr/OPerFd2hROuNXo/f3PwgmpdjRj
o/XLUYnUR8y875MzK4sq9Zp510UDVJDpdrGttV0CXIluoxhikOnZOAKeWDdHyZzj
2EiJqy7ZqCLCpzTZTAQcT0ZikIxcz+8Pl6ixuRFNobwb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:32 2024 by rpki-client on console-ams.rpki-client.org