Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BbDeUSTgwXpp6DwIwpTgyGFZeXg.roa
File: BbDeUSTgwXpp6DwIwpTgyGFZeXg.roa (raw, json)
Hash identifier: 7PmTBTYTq/tbh3PewBfRFipBy+FzIISTFppgcld3H4s=
Subject key identifier: 05:B0:DE:51:24:E0:C1:7A:69:E8:3C:08:C2:94:E0:C8:61:59:79:78
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0184C7EBAECBDE5C023CD97B09EB75AB54BE
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BbDeUSTgwXpp6DwIwpTgyGFZeXg.roa
Signing time: Wed 30 Nov 2022 09:43:42 +0000
ROA not before: Wed 30 Nov 2022 09:43:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a000:1b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:eb:ae:cb:de:5c:02:3c:d9:7b:09:eb:75:ab:54:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Nov 30 09:43:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05b0de5124e0c17a69e83c08c294e0c861597978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:6b:02:52:59:c4:b4:ee:6c:57:33:db:0c:
86:46:84:16:37:2b:cf:7e:e1:60:0a:e4:61:ee:0a:
28:a3:a1:13:a5:99:1c:bb:16:ca:5f:dc:3f:64:96:
a8:d4:18:92:5d:e9:48:86:8b:90:10:05:2b:7c:06:
4d:00:73:f1:27:d4:91:09:f4:0e:90:45:26:21:a0:
63:16:2c:8e:6a:92:71:43:5e:d2:cc:f1:db:a1:f6:
75:ac:26:01:1f:12:8f:ab:6d:a5:5a:ad:c6:31:13:
bf:52:c9:54:dd:0a:d7:ae:b0:8a:c4:6e:24:5f:3b:
49:95:5b:fb:0f:5f:4d:80:1d:f5:38:6f:c5:df:30:
0f:da:1f:e9:16:6c:23:c2:13:33:31:48:bb:73:85:
66:b8:bb:ee:48:85:04:78:87:20:a0:09:ca:51:b2:
5b:f9:81:87:3a:29:fa:c7:e0:4e:c8:f3:3c:5e:77:
cd:da:a2:08:37:d3:6f:52:ea:3d:39:92:5d:4f:e8:
ea:ea:84:f3:09:05:d2:24:59:80:a1:d9:9d:75:57:
4d:9f:7c:e6:bd:e4:bb:7c:40:f3:05:4b:15:09:09:
90:aa:1a:25:00:c8:44:e5:20:06:98:51:36:89:e4:
dd:46:25:14:e4:4c:4d:77:30:72:f7:4a:71:ff:b7:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B0:DE:51:24:E0:C1:7A:69:E8:3C:08:C2:94:E0:C8:61:59:79:78
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/BbDeUSTgwXpp6DwIwpTgyGFZeXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a000:1b0::/44
Signature Algorithm: sha256WithRSAEncryption
51:fe:7f:21:d7:c6:ab:24:bc:cb:2f:48:eb:dc:7f:07:49:c8:
07:b8:e4:11:3f:2c:39:65:bd:60:67:c5:8f:7c:7d:d4:4a:28:
b8:85:22:17:49:e1:49:7e:26:8e:3f:cb:63:04:64:66:86:24:
58:8d:f2:4c:f6:29:4e:b6:b5:b8:85:5b:a6:d4:b6:37:98:c3:
5a:e1:67:c2:2d:4d:d8:66:c7:ff:03:28:9f:61:fd:39:95:46:
54:c0:da:be:01:b6:70:dc:54:0e:17:87:73:51:3e:f8:24:72:
f1:c7:a8:cb:23:e3:68:f1:38:9a:bf:d0:5c:80:58:45:95:f3:
72:33:66:45:c1:aa:f7:e9:fe:69:fc:7f:c3:e6:41:23:e0:72:
1e:c3:19:15:2a:2f:8b:5c:20:49:b3:bf:74:13:95:d0:23:97:
83:d0:de:d2:62:61:f7:e6:73:41:f0:b7:32:ed:09:5e:d6:ca:
0b:d0:ff:51:7c:df:90:53:e7:6c:af:ca:c3:a8:d2:0a:d6:e6:
87:a9:c5:b2:9b:a2:10:21:d1:8f:52:88:42:7a:79:99:6b:22:
d0:0d:b1:88:57:01:00:8f:fa:2f:99:32:39:29:58:d0:57:c9:
30:2f:f4:25:0b:45:16:dd:53:20:d9:ff:11:dc:94:8b:5f:9e:
00:3d:a4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org