Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/N6KXHzVWixEktWPnU9eEkzBiRXA.roa
File: N6KXHzVWixEktWPnU9eEkzBiRXA.roa (raw, json)
Hash identifier: ZeBA7mXHpgozatB0IZbSJ9v+AumsoGr7uGRE7BfY82k=
Subject key identifier: 37:A2:97:1F:35:56:8B:11:24:B5:63:E7:53:D7:84:93:30:62:45:70
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019427B57DBB299AA29699233C12849428C8
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/N6KXHzVWixEktWPnU9eEkzBiRXA.roa
Signing time: Thu 02 Jan 2025 15:49:53 +0000
ROA not before: Thu 02 Jan 2025 15:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 139.28.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7d:bb:29:9a:a2:96:99:23:3c:12:84:94:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 15:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37a2971f35568b1124b563e753d7849330624570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:bf:c9:b0:c2:fb:de:d7:69:40:b8:7b:01:
26:17:ae:0f:b9:97:a2:e5:15:81:ef:be:31:d2:15:
c7:cc:c0:1a:ab:9f:9b:fa:34:2a:71:22:e3:20:08:
df:07:e9:40:b6:57:c2:30:36:72:a8:31:f8:fb:30:
b0:64:21:c2:86:d9:ca:42:61:de:5e:a9:34:6a:f4:
f9:2b:69:7d:51:bc:5e:7f:ff:99:9b:52:91:dd:f4:
73:96:d5:19:fc:20:46:78:11:03:84:0f:41:b4:80:
7c:a8:a0:17:99:5a:51:ee:0f:09:b0:25:61:6a:18:
93:87:10:f2:51:7c:8b:5b:bd:b5:92:6b:59:73:69:
d3:39:49:fb:b3:61:1f:cb:3b:bf:29:39:da:94:5f:
22:b6:89:10:3f:ef:0a:6d:f9:ab:10:79:7f:6d:fd:
9d:7b:32:4e:82:64:f3:46:6c:f4:58:9b:26:f3:f2:
a7:9d:9b:94:16:16:6f:2b:df:ea:7f:f7:4b:89:8f:
1f:f9:e5:c5:f4:81:88:1b:98:de:ec:11:bb:49:85:
f7:f4:d5:a4:41:c4:ef:5f:d3:65:d7:ec:79:87:62:
98:c7:57:07:89:5d:90:ce:93:b2:16:84:ff:23:36:
37:91:eb:75:82:e6:d9:81:42:b5:01:c9:66:5e:30:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:97:1F:35:56:8B:11:24:B5:63:E7:53:D7:84:93:30:62:45:70
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/N6KXHzVWixEktWPnU9eEkzBiRXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.136.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8f:29:bd:85:50:53:4d:d5:61:65:56:72:3f:f2:38:24:1a:
fd:06:be:44:cb:93:6b:d9:97:cb:8e:89:2c:fe:6e:d1:34:ff:
9a:9c:c5:bd:49:d3:1e:50:e1:c7:e4:40:54:ee:07:bb:3b:9a:
68:0c:be:ee:6a:98:03:a4:89:12:77:13:16:09:30:e6:76:6f:
73:70:f7:39:9e:7c:8f:91:0f:b1:8c:48:44:f6:01:4a:7d:38:
02:c3:3f:f1:98:29:b5:e2:52:60:b3:2a:f1:dc:7e:78:1a:d5:
6d:d1:60:db:20:f1:87:2d:0d:9c:d9:2b:ed:7a:3c:c2:0d:7f:
cd:9e:2c:5d:54:e8:48:ad:d9:f9:53:34:27:d0:93:fc:d8:12:
08:fc:e4:6c:d9:e8:15:38:c0:53:e2:52:80:e2:8b:6d:f0:d8:
46:31:7f:fa:8a:de:14:b0:d9:5c:00:fc:b7:3c:7b:c3:3d:e6:
fc:1f:19:a4:c5:a3:83:5c:25:cb:c7:26:de:c8:b0:af:79:d9:
01:08:38:91:fb:8e:b4:1c:a1:62:e0:3b:48:24:b2:6a:92:95:
4e:38:2b:5a:ec:ba:58:1a:79:02:e9:68:9a:24:27:34:41:0e:
a2:c9:a3:9b:4c:d9:e9:db:f1:e6:24:09:0e:76:32:fd:f4:e1:
9d:86:71:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntX27KZqilpkjPBKElCjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx
MTliZDcwHhcNMjUwMTAyMTU0OTUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2EyOTcxZjM1NTY4YjExMjRiNTYzZTc1M2Q3ODQ5MzMwNjI0NTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsea/ybDC+97XaUC4ewEmF64PuZei
5RWB774x0hXHzMAaq5+b+jQqcSLjIAjfB+lAtlfCMDZyqDH4+zCwZCHChtnKQmHe
Xqk0avT5K2l9Ubxef/+Zm1KR3fRzltUZ/CBGeBEDhA9BtIB8qKAXmVpR7g8JsCVh
ahiThxDyUXyLW721kmtZc2nTOUn7s2Efyzu/KTnalF8itokQP+8KbfmrEHl/bf2d
ezJOgmTzRmz0WJsm8/KnnZuUFhZvK9/qf/dLiY8f+eXF9IGIG5je7BG7SYX39NWk
QcTvX9Nl1+x5h2KYx1cHiV2QzpOyFoT/IzY3ket1gubZgUK1AclmXjB7gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDeilx81VosRJLVj51PXhJMwYkVwMB8GA1UdIwQY
MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt
YjZmMmFjODZlZjI3LzEvTjZLWEh6VldpeEVrdFdQblU5ZUVrekJpUlhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3
LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAixyIMA0G
CSqGSIb3DQEBCwUAA4IBAQAXjym9hVBTTdVhZVZyP/I4JBr9Br5Ey5Nr2ZfLjoks
/m7RNP+anMW9SdMeUOHH5EBU7ge7O5poDL7uapgDpIkSdxMWCTDmdm9zcPc5nnyP
kQ+xjEhE9gFKfTgCwz/xmCm14lJgsyrx3H54GtVt0WDbIPGHLQ2c2SvtejzCDX/N
nixdVOhIrdn5UzQn0JP82BII/ORs2egVOMBT4lKA4ott8NhGMX/6it4UsNlcAPy3
PHvDPeb8HxmkxaODXCXLxybeyLCvedkBCDiR+460HKFi4DtIJLJqkpVOOCta7LpY
GnkC6WiaJCc0QQ6iyaObTNnp2/HmJAkOdjL99OGdhnH6
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:16:55 2025 by rpki-client