Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GbEj5e8mtvZzHzpZTHOIkjICRpg.roa
File: GbEj5e8mtvZzHzpZTHOIkjICRpg.roa (raw, json)
Hash identifier: EO90oHJxt1Y9mHluTv0fvtFvcJhHEUye+k/QxSZkwyI=
Subject key identifier: 19:B1:23:E5:EF:26:B6:F6:73:1F:3A:59:4C:73:88:92:32:02:46:98
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1918A030
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GbEj5e8mtvZzHzpZTHOIkjICRpg.roa
Signing time: Tue 03 May 2022 17:00:41 +0000
ROA not before: Tue 03 May 2022 17:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a000:1b0::/44 maxlen: 48
2a06:a005:770::/44 maxlen: 48
2a06:a001:a060::/44 maxlen: 48
2a06:a001:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421044272 (0x1918a030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 3 17:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19b123e5ef26b6f6731f3a594c73889232024698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1d:14:4a:bf:b8:82:d1:db:67:1f:71:f0:1c:
3c:3d:1e:fc:22:ac:76:39:07:91:11:eb:e2:97:81:
cb:31:b0:bf:a8:70:ec:69:85:a4:30:09:0e:06:5f:
cc:ba:b4:31:8c:7d:66:7e:57:cb:b5:aa:23:44:70:
d2:8d:bf:99:d3:96:5c:75:ae:35:5a:d6:3a:c3:68:
0a:17:9d:7b:bc:ba:f3:ff:0d:44:95:da:04:57:8c:
d8:26:46:27:3c:8e:ff:a7:0f:81:68:a1:4a:46:49:
f6:e8:ca:0b:73:40:16:bd:4d:a7:18:da:8d:ba:ee:
4b:89:cb:f8:e3:4f:41:af:c2:22:e5:75:05:70:14:
19:12:b7:1d:07:95:d3:0c:c9:94:0f:82:bf:a3:a8:
74:56:cc:12:a9:a1:aa:b3:c9:c7:ad:e2:20:f4:6b:
98:d5:2d:ad:44:34:48:38:43:4d:86:25:c8:7a:e1:
79:81:52:13:6b:10:ac:a1:b0:73:0a:f5:2d:ab:5f:
57:1e:89:d5:ff:86:18:bc:4d:e5:97:44:68:ed:08:
4e:fb:0a:fb:c7:7d:d3:ea:42:6e:7a:0f:67:5b:2f:
38:57:da:26:b2:18:c1:de:0a:af:16:f7:7a:d9:b6:
54:9e:53:58:84:8d:86:f0:03:85:96:22:d7:9a:e0:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B1:23:E5:EF:26:B6:F6:73:1F:3A:59:4C:73:88:92:32:02:46:98
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/GbEj5e8mtvZzHzpZTHOIkjICRpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a000:1b0::/44
2a06:a001:a000::/44
2a06:a001:a060::/44
2a06:a005:770::/44
Signature Algorithm: sha256WithRSAEncryption
13:ab:0b:43:9c:9b:d0:53:55:1e:ff:7e:75:93:39:51:17:ea:
f2:2d:c8:34:8f:d7:cc:43:18:44:17:8b:2f:ac:b8:7a:66:e7:
c1:f4:b8:07:e3:81:45:8e:27:b2:8b:6b:0b:0b:d6:02:1a:3d:
9a:44:76:e4:ec:ca:64:78:2b:3c:2d:e5:8c:92:8f:e8:79:00:
2e:05:3b:89:35:55:bd:06:20:2d:6e:fd:ce:b0:9c:38:51:6f:
fa:18:e5:4d:68:b1:4c:1e:72:8f:b2:93:34:34:63:d4:be:89:
78:ff:5c:37:5a:28:6d:c2:d9:52:c1:8e:31:8d:d7:77:77:8d:
41:36:39:6f:13:da:a5:64:df:f8:78:b6:42:e3:54:2f:fd:c9:
7a:40:fb:6d:0c:6f:7e:33:29:2b:16:de:64:70:03:c9:6b:d1:
3f:8a:bb:ac:af:54:46:29:f9:d0:0c:ec:7c:5a:c1:7f:ff:30:
36:79:36:ae:bf:86:e4:a3:77:bf:4f:1b:1a:70:43:42:73:26:
08:bd:60:0d:65:46:34:f0:23:11:d2:85:8d:6c:65:90:64:59:
07:dd:07:ae:80:47:58:98:8f:6b:87:74:c0:81:68:45:b4:0f:
2c:40:d7:7d:17:20:e1:a5:81:50:c1:f7:06:ff:84:11:b6:1c:
10:4e:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:40 2025 by rpki-client