Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/acd613-855e-4bde-82a8-7a019de9d271/1/7baUSWnlnd4NIYwr7VqWCErEC8o.roa
File: 7baUSWnlnd4NIYwr7VqWCErEC8o.roa (raw, json)
Hash identifier: Z+CJiQ/FjOr7dY6wRcsiJ+jlLOeeTypICnGacieKR4w=
Subject key identifier: ED:B6:94:49:69:E5:9D:DE:0D:21:8C:2B:ED:5A:96:08:4A:C4:0B:CA
Certificate issuer: /CN=053fc6b5d253ef043f67d8aed30c6406e9e63e22
Certificate serial: 03D1E621
Authority key identifier: 05:3F:C6:B5:D2:53:EF:04:3F:67:D8:AE:D3:0C:64:06:E9:E6:3E:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT_GtdJT7wQ_Z9iu0wxkBunmPiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/acd613-855e-4bde-82a8-7a019de9d271/1/7baUSWnlnd4NIYwr7VqWCErEC8o.roa
Signing time: Sat 01 Jan 2022 06:58:45 +0000
ROA not before: Sat 01 Jan 2022 06:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48944
IP address blocks: 185.214.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64087585 (0x3d1e621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053fc6b5d253ef043f67d8aed30c6406e9e63e22
Validity
Not Before: Jan 1 06:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edb6944969e59dde0d218c2bed5a96084ac40bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:74:5d:13:d5:f1:8c:8f:9b:5a:7b:32:a6:
5e:88:c6:37:a5:4b:c8:1f:41:89:ff:6c:d1:5c:40:
82:1c:24:7f:da:01:ed:5c:f4:39:1a:aa:28:4c:21:
7d:ee:51:1a:0d:92:ad:af:d5:db:a4:94:f8:77:d3:
4b:0d:0e:a3:d0:c2:46:c1:33:fd:01:cd:da:7d:22:
62:00:45:3c:1b:52:0c:c7:7f:87:77:bc:b8:e8:e9:
4c:38:4a:ef:6c:40:fa:4e:af:65:5a:ab:73:54:71:
2e:e8:9e:f9:09:54:ec:88:09:a6:18:8a:b7:5a:a4:
86:fd:2a:57:7b:f4:bc:4a:eb:8c:d4:aa:f0:67:04:
82:fd:83:50:27:e0:39:98:e3:e3:25:0c:3a:9c:0e:
9b:3f:d4:8a:b9:3a:72:6f:05:aa:10:6c:47:7f:14:
cc:ee:f4:b1:b1:23:2c:10:8c:93:c0:41:0d:d0:9c:
90:70:68:71:c6:3f:48:df:8c:5b:31:e9:d0:88:41:
db:97:21:82:3c:da:c3:b0:55:31:03:00:f9:1b:2f:
28:15:e4:0e:d5:b9:63:1d:cd:ab:dc:cc:ca:cd:f4:
d5:6f:18:b4:c0:8d:18:0b:50:5b:dd:f0:6f:e8:13:
e7:47:6c:47:5e:82:81:b8:06:f0:78:bf:1d:2b:eb:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B6:94:49:69:E5:9D:DE:0D:21:8C:2B:ED:5A:96:08:4A:C4:0B:CA
X509v3 Authority Key Identifier:
keyid:05:3F:C6:B5:D2:53:EF:04:3F:67:D8:AE:D3:0C:64:06:E9:E6:3E:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT_GtdJT7wQ_Z9iu0wxkBunmPiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/acd613-855e-4bde-82a8-7a019de9d271/1/7baUSWnlnd4NIYwr7VqWCErEC8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/acd613-855e-4bde-82a8-7a019de9d271/1/BT_GtdJT7wQ_Z9iu0wxkBunmPiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.36.0/22
Signature Algorithm: sha256WithRSAEncryption
61:13:db:32:6e:db:f3:c0:5c:24:0d:94:7d:c0:4e:ae:24:42:
a6:bc:de:c6:03:4b:15:d5:64:a7:e5:51:5a:5f:c4:3e:71:99:
e5:c4:73:92:95:f6:31:aa:af:7a:bc:c1:59:b0:eb:67:d9:f0:
90:00:62:86:ce:37:03:6a:57:7b:34:b0:44:e5:8e:e8:2f:81:
4b:6e:c2:e4:47:d4:1b:c9:32:65:ec:c3:63:7d:9c:a4:ed:7f:
d6:38:5f:cb:d4:3e:fc:2a:24:a8:bf:f8:19:4a:8e:d7:d9:3b:
c7:aa:0a:02:43:55:52:cd:34:f6:e1:3f:a6:32:88:87:15:37:
1d:5d:2b:6e:05:65:ab:a8:a0:2a:5e:0a:2a:a2:8d:63:27:bd:
ae:02:b2:b3:f2:b0:79:23:40:64:72:77:8d:e5:9e:cf:6f:20:
b5:1b:41:08:2e:88:ef:fa:3d:08:22:36:02:54:21:2a:b2:89:
ba:37:85:af:88:46:4a:2b:45:23:73:59:fb:c8:db:4b:5a:8e:
b3:5c:53:e1:3f:43:0e:53:60:fa:5d:ed:ca:51:1e:7f:3a:bc:
9c:0c:19:61:79:20:dc:79:4a:f4:be:b8:d8:29:54:f1:6e:a8:
de:a1:27:70:21:ff:d2:89:a8:8d:02:7f:43:13:0d:9c:29:1c:
6a:99:5c:5b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA9HmITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NTNmYzZiNWQyNTNlZjA0M2Y2N2Q4YWVkMzBjNjQwNmU5ZTYzZTIyMB4XDTIyMDEw
MTA2NTg0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRiNjk0NDk2OWU1
OWRkZTBkMjE4YzJiZWQ1YTk2MDg0YWM0MGJjYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJdgdF0T1fGMj5taezKmXojGN6VLyB9Bif9s0VxAghwkf9oB
7Vz0ORqqKEwhfe5RGg2Sra/V26SU+HfTSw0Oo9DCRsEz/QHN2n0iYgBFPBtSDMd/
h3e8uOjpTDhK72xA+k6vZVqrc1RxLuie+QlU7IgJphiKt1qkhv0qV3v0vErrjNSq
8GcEgv2DUCfgOZjj4yUMOpwOmz/Uirk6cm8FqhBsR38UzO70sbEjLBCMk8BBDdCc
kHBoccY/SN+MWzHp0IhB25chgjzaw7BVMQMA+RsvKBXkDtW5Yx3Nq9zMys301W8Y
tMCNGAtQW93wb+gT50dsR16CgbgG8Hi/HSvr2VECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTttpRJaeWd3g0hjCvtWpYISsQLyjAfBgNVHSMEGDAWgBQFP8a10lPvBD9n
2K7TDGQG6eY+IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JUX0d0ZEpUN3dRX1o5aXUwd3hrQnVubVBpSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvYWNkNjEzLTg1NWUtNGJkZS04MmE4LTdhMDE5ZGU5ZDI3MS8x
LzdiYVVTV25sbmQ0TklZd3I3VnFXQ0VyRUM4by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
YWNkNjEzLTg1NWUtNGJkZS04MmE4LTdhMDE5ZGU5ZDI3MS8xL0JUX0d0ZEpUN3dR
X1o5aXUwd3hrQnVubVBpSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnWJDANBgkqhkiG9w0BAQsFAAOC
AQEAYRPbMm7b88BcJA2UfcBOriRCprzexgNLFdVkp+VRWl/EPnGZ5cRzkpX2Maqv
erzBWbDrZ9nwkABihs43A2pXezSwROWO6C+BS27C5EfUG8kyZezDY32cpO1/1jhf
y9Q+/CokqL/4GUqO19k7x6oKAkNVUs009uE/pjKIhxU3HV0rbgVlq6igKl4KKqKN
Yye9rgKys/KweSNAZHJ3jeWez28gtRtBCC6I7/o9CCI2AlQhKrKJujeFr4hGSitF
I3NZ+8jbS1qOs1xT4T9DDlNg+l3tylEefzq8nAwZYXkg3HlK9L642ClU8W6o3qEn
cCH/0omojQJ/QxMNnCkcaplcWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:52 2024 by rpki-client on console-ams.rpki-client.org