Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/uUZYCmWz7CbNLdPnkSBMljp6O8c.roa
File: uUZYCmWz7CbNLdPnkSBMljp6O8c.roa (raw, json)
Hash identifier: UK6Zmu3WNTUX8Ys4Z9uiA92OswIxwo7ed72nvk3bDnU=
Subject key identifier: B9:46:58:0A:65:B3:EC:26:CD:2D:D3:E7:91:20:4C:96:3A:7A:3B:C7
Certificate issuer: /CN=535773d7face4d95307a23439fe94e9adfa64a12
Certificate serial: 01856F26E749C78DE35687CD281D9E531EB1
Authority key identifier: 53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/uUZYCmWz7CbNLdPnkSBMljp6O8c.roa
Signing time: Sun 01 Jan 2023 21:04:58 +0000
ROA not before: Sun 01 Jan 2023 21:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 212.46.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e7:49:c7:8d:e3:56:87:cd:28:1d:9e:53:1e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535773d7face4d95307a23439fe94e9adfa64a12
Validity
Not Before: Jan 1 21:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b946580a65b3ec26cd2dd3e791204c963a7a3bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:34:c3:ab:28:f9:f1:aa:29:f2:7d:3e:84:
b4:be:15:64:ab:9d:98:55:e6:99:d9:38:d8:8f:a7:
84:76:6d:c1:6c:ed:9c:24:eb:cb:58:14:56:cd:4e:
04:11:c5:c5:53:9f:e6:fd:4d:82:f5:51:77:cb:ca:
0a:e0:5d:dd:2f:96:b3:b0:74:4c:a7:9b:6b:9b:0f:
20:09:d4:da:a6:b9:a9:a6:65:5b:43:25:86:bd:7a:
3a:d9:25:e0:c3:5b:67:48:88:08:8f:6a:54:74:50:
65:4d:2f:c5:a3:7f:b5:95:1c:9e:42:c5:1e:27:6c:
fe:8e:18:22:fc:0a:11:0c:7c:78:c2:52:1b:67:4c:
37:cb:38:52:2e:23:d6:47:48:4a:7a:95:ec:a6:61:
cd:06:19:9e:69:7e:61:52:65:f3:28:3a:7a:73:ef:
a6:8b:93:6b:ca:4c:5f:78:81:f6:2a:19:f6:ed:68:
ed:d0:f6:9f:da:4e:40:60:b4:61:b2:cc:88:31:18:
b7:1c:6a:ff:92:85:e4:65:58:61:67:6f:01:78:82:
17:23:31:ea:9e:90:b4:f2:98:56:84:cb:34:34:df:
56:a4:67:93:82:a3:77:c2:4e:b1:9a:0f:ec:2d:45:
8d:75:a7:1c:1e:a6:4f:5b:20:d8:4d:bf:bb:a4:2b:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:58:0A:65:B3:EC:26:CD:2D:D3:E7:91:20:4C:96:3A:7A:3B:C7
X509v3 Authority Key Identifier:
keyid:53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/uUZYCmWz7CbNLdPnkSBMljp6O8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c8:87:32:de:fe:39:39:11:e9:fb:82:c7:d4:c3:e7:63:6b:
ca:63:a9:37:a4:95:49:e2:50:55:51:58:ca:15:d5:1c:99:d1:
6b:24:18:b8:ce:3b:1a:6e:e9:96:95:b5:52:78:de:ec:c2:06:
b4:d2:a6:b5:57:9a:e7:c0:99:be:90:a9:fd:b5:70:3c:31:99:
ac:d7:97:32:a0:15:0e:64:e2:aa:48:76:44:22:25:92:9e:9e:
a0:36:63:e7:24:aa:6f:28:59:7d:1a:f4:93:a2:2f:25:c0:2c:
fd:d8:20:a7:6e:ba:47:6a:2b:82:97:ac:44:fa:cc:dc:f7:5f:
0d:12:23:6d:0b:c2:70:47:01:d1:79:31:60:08:6d:92:2b:8b:
e1:9d:5a:e7:29:29:f2:33:21:d5:39:89:b3:d1:d0:8f:1d:9a:
05:0d:fc:53:83:84:e9:a3:e2:7a:96:59:40:72:cd:f9:a6:81:
1d:00:41:26:89:dd:b7:41:1e:20:65:cd:27:35:00:d0:45:73:
2f:b7:ca:14:4f:ba:06:ac:26:73:f3:1b:8e:f1:46:12:e4:81:
cc:35:55:ab:4c:e9:ba:79:db:36:0a:aa:fc:04:5d:d0:10:09:
0e:87:9b:0d:32:ea:4a:b6:b5:b7:08:83:09:65:c0:ba:d1:bd:
80:80:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:32 2024 by rpki-client on console-ams.rpki-client.org