Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/gf6sEawstfvPLFa7L1cl7kPsLZY.roa
File: gf6sEawstfvPLFa7L1cl7kPsLZY.roa (raw, json)
Hash identifier: o5VUTyx68AI6sftjGDN/UXV0z8508a2vaZhHMJX9bao=
Subject key identifier: 81:FE:AC:11:AC:2C:B5:FB:CF:2C:56:BB:2F:57:25:EE:43:EC:2D:96
Certificate issuer: /CN=775dd2fc48ec4c1c51295c0569b5c89ab749a5ea
Certificate serial: 0182970377EEB102B62DACBD36E3E4B45B51
Authority key identifier: 77:5D:D2:FC:48:EC:4C:1C:51:29:5C:05:69:B5:C8:9A:B7:49:A5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d13S_EjsTBxRKVwFabXImrdJpeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/gf6sEawstfvPLFa7L1cl7kPsLZY.roa
Signing time: Sat 13 Aug 2022 11:42:43 +0000
ROA not before: Sat 13 Aug 2022 11:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 139.28.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:97:03:77:ee:b1:02:b6:2d:ac:bd:36:e3:e4:b4:5b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775dd2fc48ec4c1c51295c0569b5c89ab749a5ea
Validity
Not Before: Aug 13 11:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81feac11ac2cb5fbcf2c56bb2f5725ee43ec2d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:d0:8c:a5:1e:4f:80:cd:77:4b:e7:2e:aa:
3f:29:e1:a4:45:92:ef:dc:fa:3f:a0:a9:8f:0b:0c:
cf:6d:5e:e0:78:e6:27:44:65:d7:c6:18:f7:e4:05:
14:7e:ed:fd:42:43:65:a3:9b:eb:3d:7c:55:77:6f:
db:45:7c:7d:de:1f:22:60:2d:d8:4c:14:18:3a:97:
9a:6f:86:b7:f7:d7:dd:4f:e5:3e:bf:fb:a9:55:46:
9a:14:4f:c3:e0:95:36:d4:0b:32:40:b1:20:2f:49:
e6:d2:ae:be:cd:28:45:af:c7:ff:3a:b9:16:aa:9b:
58:5f:6b:54:ee:9a:3f:20:ce:3d:5f:ca:d4:78:16:
24:8d:6d:30:60:a9:93:dd:2f:43:7c:e9:9c:a2:7e:
7c:46:eb:b3:78:3f:ee:ed:ff:c7:50:7f:12:97:8a:
a0:f2:1d:c6:b3:d2:ff:ff:a4:d9:c9:28:c7:78:d2:
5b:34:30:bf:aa:cb:d3:b5:cb:16:a3:66:db:f5:6f:
87:c5:bf:8f:e7:9d:05:53:83:86:1c:1c:3a:1c:17:
c7:7d:de:17:44:69:e2:9d:2c:19:4c:2b:ce:d8:95:
f8:4f:85:b5:b4:1a:62:fd:37:e1:dd:d9:59:25:5f:
81:c9:df:5c:1b:c3:c9:c1:d4:45:7c:24:f7:e5:b5:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FE:AC:11:AC:2C:B5:FB:CF:2C:56:BB:2F:57:25:EE:43:EC:2D:96
X509v3 Authority Key Identifier:
keyid:77:5D:D2:FC:48:EC:4C:1C:51:29:5C:05:69:B5:C8:9A:B7:49:A5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d13S_EjsTBxRKVwFabXImrdJpeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/gf6sEawstfvPLFa7L1cl7kPsLZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/d13S_EjsTBxRKVwFabXImrdJpeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:38:02:dc:eb:de:9a:d9:c2:b5:0c:47:77:e5:fe:52:f4:40:
f6:03:19:bf:a6:41:02:8c:d4:fa:8a:7e:a4:bd:ba:92:65:90:
90:07:0f:72:40:fd:3f:c1:c9:af:0c:47:a7:17:99:f4:f2:fd:
75:f9:41:e6:56:54:d9:a3:e7:a5:44:e1:a6:6d:f0:08:df:be:
c6:c6:c2:97:66:35:84:55:fd:fd:fd:bd:f6:07:fc:dc:df:fa:
91:ed:5c:eb:e1:ee:9e:54:5b:32:91:48:48:bf:2b:52:5f:64:
4c:57:03:e5:dd:54:58:2a:74:f4:32:34:c7:ad:ec:50:1a:c3:
49:0f:af:13:74:7e:20:94:03:78:df:53:3d:b9:15:23:ee:28:
ca:79:95:18:4b:7a:bb:dc:12:32:88:72:b3:32:aa:f0:13:d6:
50:00:f1:61:e5:36:d4:9f:8b:6b:0c:88:98:fa:cb:59:cf:2e:
ae:78:bb:3d:0d:6a:e7:19:64:c5:e0:3d:13:2c:ac:c4:d6:8b:
43:66:b8:02:72:9a:80:a1:43:50:c6:29:84:2b:98:20:6e:c3:
a9:3a:69:d8:52:b0:cb:10:60:38:f2:46:7f:72:68:f1:d1:db:
48:9d:b5:82:73:56:b6:97:98:7b:7f:5b:55:ab:26:b9:75:4e:
9a:5b:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:55 2023 by rpki-client on console-fra.rpki-client.org