Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/rgzdAffmWWAVB7HsZPyDscdDfUs.roa
File: rgzdAffmWWAVB7HsZPyDscdDfUs.roa (raw, json)
Hash identifier: PHFUtB9FTI42HYVNCn11UAKgdzJHvZkAvCdcalSeSVs=
Subject key identifier: AE:0C:DD:01:F7:E6:59:60:15:07:B1:EC:64:FC:83:B1:C7:43:7D:4B
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0195DC946DE53A0F2425D88BB184EACBB261
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/rgzdAffmWWAVB7HsZPyDscdDfUs.roa
Signing time: Fri 28 Mar 2025 11:47:49 +0000
ROA not before: Fri 28 Mar 2025 11:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57604
IP address blocks: 139.28.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:94:6d:e5:3a:0f:24:25:d8:8b:b1:84:ea:cb:b2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Mar 28 11:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae0cdd01f7e659601507b1ec64fc83b1c7437d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:92:34:29:93:78:f0:74:b3:ee:83:40:9c:25:
ff:57:3b:7d:a6:11:b7:8f:66:34:d9:99:d2:9a:ef:
10:2c:19:30:a4:18:34:46:48:8a:0d:1f:5a:4a:c8:
5c:77:6d:f9:f4:70:c3:1b:68:f1:b4:7e:7d:3d:59:
61:18:93:fe:fd:d7:ab:3e:64:2e:a4:ce:c1:a9:6f:
fa:01:cb:21:5e:a9:65:f0:3e:9f:0e:0b:22:2d:8d:
8d:23:2a:f3:89:73:5c:4e:01:5d:34:87:31:7c:e8:
36:d6:21:71:a2:24:af:1c:a6:46:4d:4e:e7:1a:6f:
93:ab:e4:95:80:f7:42:a6:19:4a:01:e2:89:12:08:
17:0e:6a:5b:3e:d2:c0:77:2e:a4:45:0e:f2:00:4f:
c2:7c:34:49:25:96:d9:23:3a:eb:4b:35:4b:e2:0b:
3d:2b:d8:25:68:6a:7c:05:57:6c:f4:f5:9f:da:3a:
b6:14:69:b6:6e:20:7f:00:88:95:95:da:16:bb:4c:
ba:0a:76:f2:aa:d0:e9:28:e2:77:46:09:32:42:f0:
b5:39:47:0d:1e:cd:2e:30:f7:19:60:c2:47:a6:bf:
d8:14:de:dd:21:e8:0c:79:3a:69:e9:cb:9b:f0:c3:
a9:94:ec:17:2e:41:55:55:a2:13:76:d6:08:b7:0a:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:DD:01:F7:E6:59:60:15:07:B1:EC:64:FC:83:B1:C7:43:7D:4B
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/rgzdAffmWWAVB7HsZPyDscdDfUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:78:e6:8e:80:2f:27:d0:3f:cf:1f:05:7f:33:a8:65:95:52:
a3:03:d2:0d:3a:9d:92:fe:c6:71:f6:6a:6c:fc:da:54:5b:7e:
c4:7f:f3:96:c4:55:a0:f2:13:2d:08:40:8f:92:23:8d:a2:2d:
50:73:24:28:b8:65:19:dd:df:a2:78:35:86:a1:ad:81:67:ab:
f7:fc:8a:ab:a4:a9:6c:1c:74:35:5a:1a:0f:22:3f:5e:4b:13:
bf:9c:3a:4c:8c:dd:0d:04:7e:0e:b2:26:79:48:9e:23:e3:49:
99:56:d5:ca:ed:72:c9:ba:37:36:a3:23:a1:91:e4:41:81:ad:
4d:aa:0c:80:cb:b5:14:72:40:4c:39:64:d5:a6:5a:98:7e:2a:
ba:4b:f7:44:3d:36:11:cd:b3:51:96:84:f3:1f:f4:58:c3:fa:
d4:ff:ae:4c:c8:61:c7:1a:f6:14:34:30:4f:53:11:fb:29:f7:
68:74:db:8c:43:b9:61:b5:19:b3:8a:4d:21:22:98:83:74:3b:
b7:7f:45:be:15:20:61:df:29:6a:23:7a:00:2c:8f:9a:94:dd:
54:33:4b:54:3d:bb:1f:34:97:e2:5a:64:9f:c5:5e:95:11:ce:
e3:c9:46:a4:13:10:5a:05:0b:86:2c:5a:d0:96:24:26:59:4d:
05:2d:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:59:18 2025 by rpki-client