Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/040f2d-cdc1-4e69-ad85-140bec420a5c/1/UGBlyRXnGdSFeBOnDSlNEDzwJ9o.roa
File: UGBlyRXnGdSFeBOnDSlNEDzwJ9o.roa (raw, json)
Hash identifier: pfeEKLgRx/wFEeZ7OENTj7cEVQfg8jFw1Q/1H3mMqmE=
Subject key identifier: 50:60:65:C9:15:E7:19:D4:85:78:13:A7:0D:29:4D:10:3C:F0:27:DA
Certificate issuer: /CN=8c8cc75f718810276e0dd62b07ea8e14731621d0
Certificate serial: 015F3243
Authority key identifier: 8C:8C:C7:5F:71:88:10:27:6E:0D:D6:2B:07:EA:8E:14:73:16:21:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIzHX3GIECduDdYrB-qOFHMWIdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/040f2d-cdc1-4e69-ad85-140bec420a5c/1/UGBlyRXnGdSFeBOnDSlNEDzwJ9o.roa
Signing time: Sat 01 Jan 2022 00:52:41 +0000
ROA not before: Sat 01 Jan 2022 00:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 139.28.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23016003 (0x15f3243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c8cc75f718810276e0dd62b07ea8e14731621d0
Validity
Not Before: Jan 1 00:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=506065c915e719d4857813a70d294d103cf027da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:0f:34:4c:ce:b6:01:eb:ac:da:a9:16:3c:
ec:c3:af:ac:49:b2:b9:da:f9:18:a4:9b:fc:a7:8e:
f5:c8:51:9a:70:63:4f:e3:73:a5:63:31:50:bc:2c:
e3:f6:80:96:5d:88:54:77:03:b8:cc:ce:91:34:26:
fe:ee:34:18:2d:b8:36:bb:a0:a2:1b:4f:19:98:50:
68:5a:30:e6:ff:7e:18:00:7b:f5:02:f2:f1:4f:60:
6b:a9:cf:c3:6b:d9:7a:c2:3b:e2:d1:cf:26:70:84:
d2:9f:28:50:d3:6d:fd:c4:52:08:11:31:87:e5:65:
28:22:da:c4:81:5f:fa:d0:ad:18:1f:d3:c6:f5:47:
da:43:40:07:80:46:32:03:de:29:80:c4:1d:07:db:
ba:4d:f3:8e:4d:58:e4:2b:b0:90:4b:d7:04:81:4a:
1d:bd:79:ff:5b:21:24:06:fd:9c:9c:0e:af:66:a1:
fa:b3:a9:b5:e1:b9:23:01:7e:71:9b:44:97:99:0c:
b6:f0:f4:b4:5d:a5:ff:97:b8:9e:55:a0:a4:08:a4:
5d:30:f0:49:68:ae:00:18:f2:f0:38:2c:01:9d:28:
86:3d:01:ad:2d:59:54:84:62:a3:4d:3a:51:c5:36:
5c:d5:7e:27:6e:76:e0:d5:e9:16:14:0f:75:bb:60:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:60:65:C9:15:E7:19:D4:85:78:13:A7:0D:29:4D:10:3C:F0:27:DA
X509v3 Authority Key Identifier:
keyid:8C:8C:C7:5F:71:88:10:27:6E:0D:D6:2B:07:EA:8E:14:73:16:21:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIzHX3GIECduDdYrB-qOFHMWIdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/040f2d-cdc1-4e69-ad85-140bec420a5c/1/UGBlyRXnGdSFeBOnDSlNEDzwJ9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/040f2d-cdc1-4e69-ad85-140bec420a5c/1/jIzHX3GIECduDdYrB-qOFHMWIdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.76.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:76:31:9c:7d:72:4f:ee:73:d6:50:c5:b1:7b:b8:46:1e:a2:
15:b2:a7:4a:dd:95:91:9d:2b:0b:df:b2:98:a4:61:7b:ba:c4:
e2:63:93:f5:3d:40:76:ac:df:de:64:b5:30:69:8e:3f:92:20:
58:58:d1:8e:67:3c:57:5f:17:d5:54:3b:ce:b5:2b:7e:c2:6e:
d6:14:81:f5:ee:ad:84:0a:4f:8e:aa:a2:76:cc:70:e5:3b:1d:
57:53:09:77:86:16:9e:47:01:09:46:51:e1:bb:45:85:4e:1b:
7b:9c:82:f0:5d:cd:51:24:70:61:b1:86:5f:34:68:48:5d:82:
e1:11:d2:c2:b4:7c:fd:66:fa:0b:9a:0d:f3:fb:3c:b8:d3:af:
f0:60:37:3b:fa:0f:f9:24:5e:38:55:28:91:60:f4:fb:f7:7f:
d2:52:0c:05:c6:0a:45:1e:50:69:15:16:09:ac:08:39:ac:1e:
0f:ec:5c:a3:f6:43:a1:34:71:2c:cc:a5:ad:e4:1a:11:8d:8b:
a7:1e:26:ab:a2:fb:b9:fa:83:c6:a5:79:f6:7e:d1:20:f4:5c:
f2:2b:a4:30:7c:b6:c9:70:c4:48:cf:47:d5:4e:f6:7b:bf:39:
fa:bd:82:a2:c2:18:89:c4:55:08:6c:1a:50:59:1b:a1:f3:8e:
dd:53:63:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:25 2024 by rpki-client on console-ams.rpki-client.org