Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/ye3jvC5CA2SxajHdh0_caG_bcr4.roa
File: ye3jvC5CA2SxajHdh0_caG_bcr4.roa (raw, json)
Hash identifier: UK6CS8VfcDZXiOAiSdBJW6VF2XuwjGf9dx7dBLDZYH4=
Subject key identifier: C9:ED:E3:BC:2E:42:03:64:B1:6A:31:DD:87:4F:DC:68:6F:DB:72:BE
Certificate issuer: /CN=535773d7face4d95307a23439fe94e9adfa64a12
Certificate serial: 01825DF3ED80595150DFBDFAE13239B5EF6C
Authority key identifier: 53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/ye3jvC5CA2SxajHdh0_caG_bcr4.roa
Signing time: Tue 02 Aug 2022 09:47:23 +0000
ROA not before: Tue 02 Aug 2022 09:47:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 212.46.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:f3:ed:80:59:51:50:df:bd:fa:e1:32:39:b5:ef:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535773d7face4d95307a23439fe94e9adfa64a12
Validity
Not Before: Aug 2 09:47:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9ede3bc2e420364b16a31dd874fdc686fdb72be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:45:76:3b:33:9e:90:ef:b6:5f:5d:3b:f5:
d1:13:08:22:ad:35:d8:7d:7b:a2:03:d3:94:4c:20:
af:e4:51:63:d9:6f:93:9b:70:c3:aa:d7:e1:8c:61:
bf:f8:96:31:72:9d:29:03:9f:69:a2:b2:ff:71:c3:
3c:47:27:ae:ab:c9:d7:e0:92:3e:f2:3c:45:5f:43:
09:b0:3a:5f:7c:5a:e7:ee:15:21:83:f5:ae:1a:8a:
43:b1:be:cc:42:72:47:6d:10:a4:75:7b:4b:ef:45:
d9:85:12:1a:9b:92:9c:4b:fa:72:0e:6d:c4:22:65:
4d:7e:26:d5:ee:d4:fc:a8:4f:29:da:dc:95:4b:05:
43:22:14:7e:15:15:cb:70:86:46:60:c7:fc:20:6d:
5e:3b:bc:67:95:7d:c8:ec:c3:5a:b3:ef:ea:33:f2:
88:24:92:89:12:33:db:53:8e:c1:06:3d:3c:49:53:
e9:6b:36:41:d9:ea:f2:5c:b6:6b:12:60:3c:32:31:
6b:55:53:47:65:e3:e3:3f:41:f2:ef:3e:85:71:82:
91:01:d8:ff:02:92:9e:ad:bf:bd:12:4d:46:74:1b:
2a:6e:ed:e9:a7:e8:d8:01:93:43:78:e7:6c:1a:69:
1e:4b:38:00:61:d9:7f:93:e4:00:90:c3:f4:eb:2c:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:E3:BC:2E:42:03:64:B1:6A:31:DD:87:4F:DC:68:6F:DB:72:BE
X509v3 Authority Key Identifier:
keyid:53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/ye3jvC5CA2SxajHdh0_caG_bcr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.35.0/24
Signature Algorithm: sha256WithRSAEncryption
42:31:bf:7b:e9:d4:93:9f:a8:74:b8:be:19:14:65:69:97:ed:
5f:91:bd:92:ab:e0:b8:06:81:87:f2:e2:a8:de:76:47:2c:86:
42:f9:2b:20:45:c2:79:b4:5d:b7:fa:f0:8f:12:2b:c5:73:d8:
e9:4a:1a:54:3e:b7:b0:00:68:7f:10:c9:a2:15:26:04:c9:72:
36:98:eb:fa:4c:f9:f2:0f:cb:c0:90:96:f0:a7:f4:66:fa:38:
3e:23:4c:4b:a0:09:7d:fb:ec:d1:60:18:21:79:03:15:a5:83:
71:2c:3d:3c:1a:2b:c4:be:95:cc:22:42:0b:d6:47:ad:9b:8c:
6a:07:be:fa:a7:11:21:df:f9:c0:94:57:19:a7:84:92:ab:03:
46:fc:56:0f:e9:4e:3d:75:da:47:35:52:fc:8a:35:76:64:77:
f4:2c:30:bb:d3:af:79:b6:da:61:cd:cc:3f:29:b9:1d:67:84:
74:59:18:62:58:8b:27:9f:e7:cb:55:a6:3b:80:8b:77:db:45:
87:0b:3e:b4:8c:c2:69:49:60:27:4e:ad:e3:59:7f:67:33:be:
bd:20:16:40:d9:c1:46:06:ef:f0:d5:f4:4b:fb:6f:3f:c9:8d:
91:62:38:fa:75:4e:37:a6:42:97:a8:8b:e3:d8:84:4d:55:cc:
d3:b5:fa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:32 2024 by rpki-client on console-ams.rpki-client.org