Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/zVuALZWMjwi5PBMELLTwWWbkaNo.roa
File: zVuALZWMjwi5PBMELLTwWWbkaNo.roa (raw, json)
Hash identifier: gucSil2aX1N5uZhH6wjMmj2l3zJSdQfiPG+FyN+VehA=
Subject key identifier: CD:5B:80:2D:95:8C:8F:08:B9:3C:13:04:2C:B4:F0:59:66:E4:68:DA
Certificate issuer: /CN=535773d7face4d95307a23439fe94e9adfa64a12
Certificate serial: 077E11
Authority key identifier: 53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/zVuALZWMjwi5PBMELLTwWWbkaNo.roa
Signing time: Thu 03 Mar 2022 05:48:11 +0000
ROA not before: Thu 03 Mar 2022 05:48:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10753
IP address blocks: 212.46.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491025 (0x77e11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535773d7face4d95307a23439fe94e9adfa64a12
Validity
Not Before: Mar 3 05:48:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd5b802d958c8f08b93c13042cb4f05966e468da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:80:65:33:20:a1:c0:df:c8:62:49:f8:28:
51:d6:9b:e2:fc:dd:b6:3e:14:e0:69:e9:d6:05:61:
49:e1:56:8f:8a:93:8c:4e:72:9c:42:a1:26:6f:e9:
d9:62:4f:4f:24:76:d2:8d:02:a5:fb:df:17:58:9d:
59:c6:ec:eb:2d:8a:fd:70:39:eb:bf:db:0f:86:57:
7b:c8:40:05:43:a2:be:c7:a7:95:a8:d1:f8:fa:82:
9d:30:b6:89:4d:f7:e3:90:3a:62:c0:3a:5f:95:93:
e2:03:e3:38:9e:bc:48:9d:59:4a:12:e2:d1:20:c7:
d3:b0:25:73:81:cf:97:4a:62:64:ba:5f:c4:62:67:
0a:29:8c:d1:a1:57:16:20:0e:1c:21:f1:1e:51:e7:
cd:c6:28:26:8d:93:0d:ef:7c:6e:bf:04:0a:a4:6c:
40:55:3e:3d:f8:fa:4a:4a:58:c3:5f:39:75:80:61:
99:3f:b4:1f:2c:ad:a3:eb:e9:2e:66:79:f9:85:94:
f2:27:69:72:ed:9f:2f:53:5e:e4:51:59:a0:e6:81:
4e:95:37:bb:6d:b3:ef:21:fc:59:df:da:d5:3c:62:
7c:22:22:83:ea:43:ae:80:b3:58:61:b4:c5:1a:c1:
c8:ee:7a:15:30:1b:cf:4b:c9:79:ad:66:1e:c2:76:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5B:80:2D:95:8C:8F:08:B9:3C:13:04:2C:B4:F0:59:66:E4:68:DA
X509v3 Authority Key Identifier:
keyid:53:57:73:D7:FA:CE:4D:95:30:7A:23:43:9F:E9:4E:9A:DF:A6:4A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dz1_rOTZUweiNDn-lOmt-mShI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/zVuALZWMjwi5PBMELLTwWWbkaNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff24a-c915-4493-a34e-bcfe4e7b3dcc/1/U1dz1_rOTZUweiNDn-lOmt-mShI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.35.0/24
Signature Algorithm: sha256WithRSAEncryption
81:34:65:c8:41:7d:27:ac:ef:aa:02:02:00:c5:91:e1:7f:d9:
cc:93:34:bb:f6:67:f1:b2:f7:b4:1e:86:3e:1c:96:a1:86:c4:
86:b6:68:ff:52:61:a7:7d:c6:1c:40:e7:c2:25:19:ff:5a:4e:
19:aa:d6:0a:1d:0e:15:b0:5e:e8:04:9e:c7:88:c2:16:5d:22:
e9:21:52:5b:c1:ff:1a:8d:0d:53:ad:e6:60:8b:67:8b:b4:6b:
8a:b2:02:b2:c8:58:08:24:a4:1c:00:c9:76:08:90:90:32:13:
a4:27:b7:71:8e:69:73:8b:b6:02:1a:16:a4:6a:b2:ea:26:74:
3f:33:72:12:a8:c4:00:c1:ee:8a:f5:5f:de:1e:c9:88:84:e2:
81:3c:16:e3:8a:0c:f8:d7:5b:24:73:2c:d6:bf:19:a6:c9:f7:
1a:04:e1:51:f8:6c:6a:b2:44:4a:55:f9:d4:e1:56:0a:4a:94:
d7:cf:9a:bd:fc:1b:38:a8:8e:19:0a:55:54:50:ab:0a:32:a1:
41:96:1d:0b:e1:4c:3f:3f:ae:f4:d3:f9:a7:99:a5:34:83:d8:
4d:da:17:66:f8:8b:78:2a:a5:4d:e9:70:ae:e4:8b:5a:a9:1a:
69:4d:9c:bf:4b:eb:be:77:f5:de:ec:ec:0d:89:51:85:bb:a3:
28:e6:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:32 2024 by rpki-client on console-ams.rpki-client.org