Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UN6Gdbr6pnglq8BpirbL2KBTDKM.roa
File: UN6Gdbr6pnglq8BpirbL2KBTDKM.roa (raw, json)
Hash identifier: NUraX/MyAm+JpoOmonxmCZBFOmqVVbfFHBPqQu6LLSo=
Subject key identifier: 50:DE:86:75:BA:FA:A6:78:25:AB:C0:69:8A:B6:CB:D8:A0:53:0C:A3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183F84BFCCEE0D0556477D8570BD2F461C6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UN6Gdbr6pnglq8BpirbL2KBTDKM.roa
Signing time: Fri 21 Oct 2022 02:07:52 +0000
ROA not before: Fri 21 Oct 2022 02:07:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a000:1b0::/44 maxlen: 48
2a06:a001:a060::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f8:4b:fc:ce:e0:d0:55:64:77:d8:57:0b:d2:f4:61:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Oct 21 02:07:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50de8675bafaa67825abc0698ab6cbd8a0530ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:19:54:34:2d:5a:1b:5d:b8:1a:9d:b0:c7:
33:87:87:55:24:f7:bf:f7:58:a3:ed:60:3c:8e:39:
21:ae:82:f8:ef:38:47:09:ea:f0:00:9f:e2:55:32:
87:53:e7:dd:cb:93:1f:05:58:4c:5d:b8:f0:a4:91:
7d:f8:d2:ad:0b:6d:7d:ed:14:8d:f3:3f:31:17:24:
ad:eb:d2:d8:dd:71:d1:b3:79:df:23:04:25:16:03:
03:e1:ca:b2:a0:1b:1c:2e:30:2b:5e:ce:a2:4e:a8:
8f:ec:2f:03:aa:3e:d2:e9:fa:75:23:78:f7:a3:20:
f3:dd:69:92:96:6e:ac:c0:2b:aa:72:d7:44:cd:de:
de:07:88:90:09:fa:05:58:1c:95:45:4f:fc:82:85:
97:d9:90:22:82:09:ff:2b:c9:19:e5:84:e1:15:46:
e8:b5:d5:f6:24:fb:4e:fd:6c:21:e0:e1:36:2e:fa:
29:47:77:ac:fa:9a:5c:16:90:0e:39:b8:28:17:57:
d4:75:11:4e:8a:2d:e7:08:e0:b8:e5:c3:50:c5:77:
53:b3:bf:48:1d:4e:b8:ca:a6:22:5d:70:9b:61:00:
bc:7b:b8:69:7f:4d:a3:3f:6d:ca:3e:33:43:d9:62:
80:bc:83:84:da:bc:a2:62:20:43:3e:4d:c4:0c:31:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DE:86:75:BA:FA:A6:78:25:AB:C0:69:8A:B6:CB:D8:A0:53:0C:A3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/UN6Gdbr6pnglq8BpirbL2KBTDKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a000:1b0::/44
2a06:a001:a060::/44
Signature Algorithm: sha256WithRSAEncryption
a2:b5:cb:2e:c2:f6:6c:b0:99:40:08:7e:70:6f:6c:24:83:03:
83:bb:23:ec:6e:3c:70:bc:0c:a0:8d:ee:54:87:2d:84:86:bc:
1e:93:aa:98:95:8d:b9:13:99:ad:a5:67:6f:bc:b1:28:92:49:
e4:ae:c9:d9:26:41:1c:c7:a9:13:ac:eb:92:59:06:49:22:cb:
8f:0b:93:7e:ef:21:cf:d1:c3:df:5c:53:1a:18:1a:69:d9:a2:
6f:df:1f:b0:bf:3e:f3:cf:37:e0:52:df:bb:08:72:16:79:b2:
11:d6:db:f4:37:56:f7:14:1f:15:1d:27:f0:a9:d9:a7:4b:8d:
8c:c6:f3:eb:9c:3e:3e:b6:c1:fc:8f:8b:5a:e4:ac:29:91:87:
09:9f:f8:82:33:76:59:6b:ac:86:fb:dd:64:09:d8:57:7d:34:
89:22:c4:88:10:f4:b8:d8:8a:ff:6f:c7:4f:b7:d9:10:ab:18:
12:be:6a:d0:39:a9:e3:61:b1:cc:e5:7b:93:e0:b7:2b:fc:5f:
4d:7a:87:a7:20:89:b6:29:16:f8:17:8e:71:b8:ed:e0:94:93:
3e:c4:3b:8a:e2:eb:5e:eb:b9:a5:0e:c6:b9:5d:dc:67:cd:73:
86:03:d8:b7:8e:13:5c:ea:6b:ef:9c:70:73:0b:29:83:7a:e5:
30:bf:ed:e3
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYP4S/zO4NBVZHfYVwvS9GHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMDIxMDIwNzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGRlODY3NWJhZmFhNjc4MjVhYmMwNjk4YWI2Y2JkOGEwNTMwY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1oZVDQtWhtduBqdsMczh4dVJPe/
91ij7WA8jjkhroL47zhHCerwAJ/iVTKHU+fdy5MfBVhMXbjwpJF9+NKtC2197RSN
8z8xFySt69LY3XHRs3nfIwQlFgMD4cqyoBscLjArXs6iTqiP7C8Dqj7S6fp1I3j3
oyDz3WmSlm6swCuqctdEzd7eB4iQCfoFWByVRU/8goWX2ZAiggn/K8kZ5YThFUbo
tdX2JPtO/Wwh4OE2LvopR3es+ppcFpAOObgoF1fUdRFOii3nCOC45cNQxXdTs79I
HU64yqYiXXCbYQC8e7hpf02jP23KPjND2WKAvIOE2ryiYiBDPk3EDDEoJwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFDehnW6+qZ4JavAaYq2y9igUwyjMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvVU42R2RicjZwbmdscThCcGlyYkwyS0JUREtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAuZMjMBgE
AgACMBIDBwQqBqAAAbADBwQqBqABoGAwDQYJKoZIhvcNAQELBQADggEBAKK1yy7C
9mywmUAIfnBvbCSDA4O7I+xuPHC8DKCN7lSHLYSGvB6TqpiVjbkTma2lZ2+8sSiS
SeSuydkmQRzHqROs65JZBkkiy48Lk37vIc/Rw99cUxoYGmnZom/fH7C/PvPPN+BS
37sIchZ5shHW2/Q3VvcUHxUdJ/Cp2adLjYzG8+ucPj62wfyPi1rkrCmRhwmf+IIz
dllrrIb73WQJ2Fd9NIkixIgQ9LjYiv9vx0+32RCrGBK+atA5qeNhsczle5Pgtyv8
X016h6cgibYpFvgXjnG47eCUkz7EO4ri617ruaUOxrld3GfNc4YD2LeOE1zqa++c
cHMLKYN65TC/7eM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org