Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/db-HI5k0_RnERLM4Sf9NASUrNG8.roa
File: db-HI5k0_RnERLM4Sf9NASUrNG8.roa (raw, json)
Hash identifier: ZEiUcwS3RRXTeRq4oYs/9R91hjuayyccqz3zwFIc7O4=
Subject key identifier: 75:BF:87:23:99:34:FD:19:C4:44:B3:38:49:FF:4D:01:25:2B:34:6F
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A03B83E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/db-HI5k0_RnERLM4Sf9NASUrNG8.roa
Signing time: Mon 23 May 2022 16:11:30 +0000
ROA not before: Mon 23 May 2022 16:11:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 185.147.35.0/24 maxlen: 24
2a06:a000:1b0::/44 maxlen: 48
2a06:a001:a060::/44 maxlen: 48
2a06:a001:a000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436451390 (0x1a03b83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 23 16:11:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75bf87239934fd19c444b33849ff4d01252b346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:26:32:bd:74:07:d8:4b:30:8e:c5:b9:47:
fb:eb:cd:6f:1c:f9:b1:b3:b3:6d:50:0f:c0:fd:02:
22:4c:b2:af:bf:8d:10:a9:41:dc:ea:35:86:22:b8:
76:b7:fd:af:c5:67:b8:46:62:03:ab:a5:f9:7e:aa:
61:d7:ea:77:b2:5d:90:4b:8f:c4:e7:c2:49:e1:44:
1f:3b:d6:c2:da:4d:4a:e0:85:b6:24:7a:e9:30:68:
4b:4d:45:c5:a5:29:2d:e4:ea:31:fd:8c:59:79:a4:
eb:c9:11:b4:f5:a2:90:d5:01:67:ab:55:6f:1e:e9:
18:e4:62:6c:ef:08:80:25:dd:f6:7f:47:71:34:13:
9b:94:c4:4d:0a:de:04:6d:8d:3e:7b:07:18:db:be:
47:bb:55:cc:10:3d:39:89:75:1c:a7:2d:93:63:21:
a4:4b:82:7f:8d:aa:3c:0f:6f:61:6a:1e:63:ff:6e:
bf:09:2e:99:56:ce:63:31:fd:f3:f1:75:4f:1d:3d:
91:46:e9:8c:74:ea:11:c8:ed:c3:6a:af:8a:33:42:
24:ee:e2:d7:be:ed:18:8d:7c:b2:e4:d3:c5:9f:03:
7d:a8:46:19:11:3b:4f:f9:7c:ad:bd:31:37:73:4a:
1a:2b:8f:b9:1d:0f:a4:68:b0:98:28:15:0a:4b:a1:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BF:87:23:99:34:FD:19:C4:44:B3:38:49:FF:4D:01:25:2B:34:6F
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/db-HI5k0_RnERLM4Sf9NASUrNG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.35.0/24
IPv6:
2a06:a000:1b0::/44
2a06:a001:a000::/44
2a06:a001:a060::/44
Signature Algorithm: sha256WithRSAEncryption
08:5c:ae:c7:1f:3e:0c:d0:f6:ef:30:fa:48:7b:ac:06:a9:bf:
86:52:a8:ec:f3:7b:c2:d3:28:2e:db:7e:42:81:75:f9:81:66:
5b:6c:b3:d4:c9:1b:5c:41:64:0d:90:c1:cb:3c:8d:83:a6:54:
16:18:bb:9a:70:8d:10:52:c8:35:3a:9b:ce:d1:c4:ec:8e:7e:
4a:16:10:1a:bd:31:20:11:06:d5:1a:f9:2a:d5:85:41:f0:64:
07:89:75:f5:ae:ce:76:98:cb:58:8a:b8:0f:b3:49:dc:80:48:
7b:c0:47:d0:32:be:a6:35:c4:1a:f8:0e:18:b6:93:37:09:27:
a1:65:36:3b:ae:2e:a1:fa:bd:08:69:39:5c:24:73:35:87:b7:
3e:67:66:0c:d0:12:e8:c9:88:1f:46:34:52:94:35:4d:1d:9a:
2b:c8:87:e4:7b:6c:39:ab:cb:9d:f9:63:34:f6:bd:0d:28:c0:
22:c2:aa:a8:62:12:da:c3:0b:9f:10:4d:be:be:77:ed:bc:86:
98:6b:15:0e:29:6a:fe:a1:43:a8:b1:c7:54:d5:c9:15:b9:34:
f2:03:74:68:5d:14:e4:ed:79:4c:2d:47:5d:84:f6:96:a2:6f:
5f:56:55:dd:f1:7c:31:aa:d7:b1:13:c5:f2:22:65:67:8d:39:
13:90:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net