Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Rpf6pkEbI_TeSYBQiIV5V9KSHJA.roa
File: Rpf6pkEbI_TeSYBQiIV5V9KSHJA.roa (raw, json)
Hash identifier: JefmSIz005PZpzw5XGT8k/QOfmOCzZ/2nGse+NeMECo=
Subject key identifier: 46:97:FA:A6:41:1B:23:F4:DE:49:80:50:88:85:79:57:D2:92:1C:90
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0181D49B303701D55F55C52677556212C5CC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Rpf6pkEbI_TeSYBQiIV5V9KSHJA.roa
Signing time: Wed 06 Jul 2022 17:42:29 +0000
ROA not before: Wed 06 Jul 2022 17:42:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a000:1b0::/44 maxlen: 48
2a06:a001:a060::/44 maxlen: 48
2a06:a001:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:9b:30:37:01:d5:5f:55:c5:26:77:55:62:12:c5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 6 17:42:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4697faa6411b23f4de49805088857957d2921c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:64:b3:91:bb:7f:23:ea:fc:f6:16:f0:d4:
af:d1:a9:5f:df:fc:94:9e:61:28:3c:cd:f6:68:57:
ee:7c:cb:06:8c:ec:8e:d6:b1:96:73:68:52:f3:08:
72:56:d8:14:08:c8:ee:55:ca:ae:a9:d8:39:87:1d:
dc:bb:33:12:5c:8b:75:be:a2:91:15:4c:f0:24:1d:
f6:c2:3d:48:09:20:45:27:5b:ec:45:f0:d6:22:ba:
cb:61:cc:a3:f5:53:31:4e:a7:6f:8a:5f:1e:18:87:
67:d8:c9:d5:00:12:60:be:1f:2f:13:48:87:71:59:
ea:a1:da:1a:df:74:42:57:ec:d1:4a:69:51:5e:68:
f7:67:fb:e8:6a:fd:5f:85:e9:7f:dd:df:46:8a:d5:
80:9a:3a:c9:6f:e1:64:12:8c:62:c4:5d:cb:67:d5:
61:ea:ee:d5:f3:f2:8c:49:8c:66:e6:db:58:06:7d:
bf:70:b0:5a:49:77:aa:c6:0f:e7:08:59:5c:91:e7:
bf:e9:f1:1b:5b:97:dc:fd:c8:88:f0:6a:f0:2f:9f:
e9:cc:6f:53:ba:f1:a1:ba:81:ac:fd:3a:e2:d5:85:
e2:de:b3:e1:90:34:e8:13:d8:2b:18:d2:f4:aa:d3:
b2:bd:a1:2f:0f:c0:f3:f2:e5:09:9e:d8:29:10:dc:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:97:FA:A6:41:1B:23:F4:DE:49:80:50:88:85:79:57:D2:92:1C:90
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/Rpf6pkEbI_TeSYBQiIV5V9KSHJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a000:1b0::/44
2a06:a001:a000::/44
2a06:a001:a060::/44
Signature Algorithm: sha256WithRSAEncryption
51:40:7e:9e:d1:56:ce:61:b2:47:a7:c4:1c:b9:af:28:83:a2:
1d:a1:35:d7:9c:e4:1d:8f:90:b5:62:42:a8:ca:f7:d4:66:65:
f4:40:63:2b:f3:54:3e:67:13:d6:a2:d3:6c:eb:f9:b8:34:f4:
6d:98:a3:60:74:30:15:ad:a2:5d:83:d4:a0:b0:3a:eb:93:22:
2f:2a:2f:b4:c7:4e:5e:cc:f8:20:dc:27:21:d3:31:1f:d1:f1:
ad:09:fb:06:da:8b:19:0f:88:8f:bb:9c:f2:61:ea:e6:f0:79:
b8:64:88:b3:d9:69:46:fb:7e:a3:3d:e1:f2:ca:e9:bb:16:f3:
e7:30:5d:34:4f:97:f4:7c:9b:47:12:d1:55:b7:9a:a9:3e:e2:
43:d1:90:f3:10:33:ae:79:fa:f7:e3:dc:52:50:32:df:b3:e6:
c2:55:ea:58:b0:87:7c:42:f7:75:69:75:eb:8d:80:3e:b1:08:
f5:f5:8a:5c:c1:a1:c6:e5:47:86:42:ce:c4:17:03:a7:a8:10:
82:25:84:16:01:c7:86:45:80:d5:7b:f2:f3:80:66:cf:e8:29:
61:b2:fd:2e:79:7b:50:52:4c:06:b8:37:ba:30:22:e1:31:0f:
4c:9e:bb:5a:12:87:d7:85:47:8a:09:6e:fc:fe:d3:a4:f8:f7:
36:87:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org