Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/P5sVR99YBvYMlzxpyh28YsxWXOQ.roa
File: P5sVR99YBvYMlzxpyh28YsxWXOQ.roa (raw, json)
Hash identifier: GG1QKNVkuHLCVT//kBnFVlAwzAg7jME3GRCN2EfGVD0=
Subject key identifier: 3F:9B:15:47:DF:58:06:F6:0C:97:3C:69:CA:1D:BC:62:CC:56:5C:E4
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 17926797
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/P5sVR99YBvYMlzxpyh28YsxWXOQ.roa
Signing time: Thu 31 Mar 2022 03:28:15 +0000
ROA not before: Thu 31 Mar 2022 03:28:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a000:1b0::/44 maxlen: 48
2a06:a005:2e0::/44 maxlen: 48
2a06:a005:2d0::/44 maxlen: 48
2a06:a001:a060::/44 maxlen: 48
2a06:a001:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395470743 (0x17926797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Mar 31 03:28:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f9b1547df5806f60c973c69ca1dbc62cc565ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:bb:1a:db:81:66:72:fb:5b:64:7a:62:8c:
14:e1:30:7f:0b:3f:a0:b2:83:48:7d:99:3a:95:84:
28:29:6a:48:48:91:f7:89:34:3c:39:5b:d8:75:19:
ad:3f:73:87:f9:ce:28:8c:a0:5e:d7:d7:de:2f:09:
1c:b5:42:02:b4:97:bc:62:73:8d:4a:3d:71:58:55:
b5:e7:0f:fd:c8:0e:93:38:56:d7:f5:d2:06:0a:32:
64:e5:96:1f:89:72:2d:b0:2c:56:56:3d:4b:19:51:
e2:50:ff:ab:da:07:e8:4c:ee:3b:62:a5:c5:a6:48:
5f:6a:79:73:06:cc:94:bb:42:48:ac:a2:69:36:76:
f3:16:99:cb:2d:af:cb:bb:a1:09:5c:0b:12:04:5e:
ef:c8:7f:49:49:5f:51:74:47:ed:dd:75:e3:e3:89:
89:3b:5b:a0:31:6e:8c:c7:54:71:19:6a:7e:7e:0d:
9b:db:51:9b:33:60:10:2d:5e:cb:68:11:b0:81:be:
6d:f7:20:e9:a4:23:7d:52:e1:03:b5:36:99:9f:84:
75:65:3b:ca:7b:1b:a6:a2:1b:be:c4:2f:f2:fd:31:
8c:08:f9:55:7e:0e:05:6c:54:6d:1e:51:5c:0c:f3:
cd:94:0c:f4:44:f4:9a:0e:83:84:34:29:50:7b:7b:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:15:47:DF:58:06:F6:0C:97:3C:69:CA:1D:BC:62:CC:56:5C:E4
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/P5sVR99YBvYMlzxpyh28YsxWXOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a000:1b0::/44
2a06:a001:a000::/44
2a06:a001:a060::/44
2a06:a005:2d0::-2a06:a005:2ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4e:2f:be:e1:be:dc:b7:1b:b5:b2:da:b0:2f:9f:b5:ef:e3:91:
df:3e:a5:cc:68:c3:a3:37:02:9d:ea:8a:ec:65:25:9d:cf:7c:
1d:9d:67:97:f2:9a:6a:40:aa:d5:90:c2:f4:65:85:95:38:45:
0a:1d:f8:92:b8:5b:ba:ce:88:8f:4f:48:8a:c4:61:c1:08:fd:
70:a8:c4:1a:40:db:cf:6f:6d:a2:68:af:f2:84:55:ad:0c:0e:
f8:c3:0e:a7:c7:2f:d0:af:c6:6d:a4:7e:b3:3f:29:4a:0b:b6:
ed:68:01:98:15:f5:22:2d:52:9b:ca:9f:e0:36:15:64:39:2c:
34:5e:ec:c8:95:4b:3b:ab:62:89:50:d4:92:25:54:4c:6b:37:
8a:4c:72:17:a4:da:a8:74:19:2a:1d:21:a0:5f:01:97:66:97:
20:bb:69:52:71:e6:bb:79:fb:8d:c5:b5:3f:87:c9:b7:15:3c:
e7:f9:68:e1:a6:db:c2:4e:0d:1c:03:e8:09:b0:c9:1c:4b:e9:
43:b8:31:78:e8:76:fb:a8:2d:6f:64:4a:81:9f:c0:ae:78:4b:
26:47:61:c7:ab:ee:e9:53:4f:8e:de:fd:0b:ea:72:4b:7e:ab:
3d:c0:38:63:d6:25:bf:7b:95:94:4f:c6:07:1a:1e:9b:a7:89:
54:67:00:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net