Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ix5B43H9FMwWyXgU8e_BOavy0d0.roa
File: Ix5B43H9FMwWyXgU8e_BOavy0d0.roa (raw, json)
Hash identifier: +DRmLEAVcpbShDucvnUguqTojvWS1lrLVKq/kqHiYHQ=
Subject key identifier: 23:1E:41:E3:71:FD:14:CC:16:C9:78:14:F1:EF:C1:39:AB:F2:D1:DD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 194DBFC9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ix5B43H9FMwWyXgU8e_BOavy0d0.roa
Signing time: Fri 06 May 2022 04:29:24 +0000
ROA not before: Fri 06 May 2022 04:29:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a000:1b0::/44 maxlen: 48
2a06:a005:2d0::/44 maxlen: 48
2a06:a005:770::/44 maxlen: 48
2a06:a001:a060::/44 maxlen: 48
2a06:a001:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424525769 (0x194dbfc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 6 04:29:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=231e41e371fd14cc16c97814f1efc139abf2d1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:37:3d:f9:12:65:10:61:51:82:02:39:56:
87:c0:8f:64:a9:4e:23:5d:ed:1e:e5:a8:a9:73:89:
0f:75:bb:89:5e:65:5c:b4:52:4d:d8:2c:88:ae:44:
eb:8b:73:85:ba:ca:cc:23:89:02:62:c1:8b:ca:f9:
41:eb:39:e2:92:68:cb:8e:42:f4:0a:73:76:86:b5:
0a:85:df:aa:d0:1c:43:a6:93:56:e2:bb:7a:fc:eb:
87:03:47:1c:4e:d6:4d:4c:37:71:08:21:9f:3d:96:
24:30:48:4c:82:a0:7e:8b:c7:ff:80:93:7b:70:5a:
3a:d9:08:36:5a:02:a2:91:fe:fc:f8:46:1c:01:8f:
a1:2d:44:82:db:24:17:ae:d1:93:e0:c5:9e:3e:2f:
34:99:2a:b0:96:36:ef:5a:6e:96:81:ad:b5:97:f2:
aa:91:08:69:96:a6:a3:1c:8d:95:d2:c4:83:e3:7c:
2f:86:ed:cf:f7:94:c4:34:e9:73:c8:9e:23:95:64:
c6:24:be:24:f2:1c:73:0c:c8:8e:97:e2:14:2b:77:
eb:52:8c:9e:01:9e:e1:59:ba:2e:f7:83:0a:fd:ff:
c2:c9:49:64:16:a5:1b:b0:16:a0:bb:fb:f8:89:79:
74:95:5c:0a:3d:5c:13:07:38:45:92:e1:ac:b0:3b:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:41:E3:71:FD:14:CC:16:C9:78:14:F1:EF:C1:39:AB:F2:D1:DD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Ix5B43H9FMwWyXgU8e_BOavy0d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a000:1b0::/44
2a06:a001:a000::/44
2a06:a001:a060::/44
2a06:a005:2d0::/44
2a06:a005:770::/44
Signature Algorithm: sha256WithRSAEncryption
65:7d:c9:84:d2:99:63:2f:cd:1f:5a:ae:e6:20:b9:b4:f3:5c:
b6:1b:1d:70:27:d2:cc:35:b3:6c:da:96:51:03:88:2a:78:a5:
b5:b8:df:2d:ed:7c:ec:8a:7a:5b:c0:60:79:90:63:ff:b7:de:
2d:41:bf:a0:62:8b:60:13:5a:74:fd:d5:ca:12:a6:e4:9e:35:
24:51:68:f4:c9:42:30:4d:3f:06:29:35:65:2a:17:1a:8e:bc:
72:b2:f2:cb:d2:55:b5:47:71:8b:dc:c5:e2:51:5d:1a:e5:f8:
12:9d:ef:1e:be:27:8b:b3:b8:21:c8:70:31:17:3a:52:60:e2:
ba:ab:e8:c3:61:db:c2:70:12:b2:e6:ec:22:f9:31:7a:f9:91:
25:68:68:2f:fb:f4:5e:fd:79:58:a0:9c:64:8c:89:03:c9:af:
4f:2c:94:39:4c:e2:e1:39:88:d4:64:59:5a:15:47:87:76:c0:
93:86:af:88:b4:15:8a:ba:c6:fb:f1:f3:cd:9f:5b:da:66:d1:
da:0c:f5:57:92:80:f7:d4:9f:02:54:68:f5:98:0a:79:55:0f:
47:da:60:f7:e6:b6:ed:63:f7:3d:0e:c6:d0:39:b5:7a:73:da:
52:98:2e:0c:02:82:33:3b:1c:2f:f4:0b:31:44:3e:14:70:60:
b9:ed:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:35 2025 by rpki-client