Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/ofScC4Vuqxqsq_N7__sDLFAZMb8.roa
File: ofScC4Vuqxqsq_N7__sDLFAZMb8.roa (raw, json)
Hash identifier: 4MmMWw+W8bTBLWIIqLxDdr177KJwKNS26ZE9BWJU2WE=
Subject key identifier: A1:F4:9C:0B:85:6E:AB:1A:AC:AB:F3:7B:FF:FB:03:2C:50:19:31:BF
Certificate issuer: /CN=775dd2fc48ec4c1c51295c0569b5c89ab749a5ea
Certificate serial: 023BC736
Authority key identifier: 77:5D:D2:FC:48:EC:4C:1C:51:29:5C:05:69:B5:C8:9A:B7:49:A5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d13S_EjsTBxRKVwFabXImrdJpeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/ofScC4Vuqxqsq_N7__sDLFAZMb8.roa
Signing time: Sat 01 Jan 2022 14:08:05 +0000
ROA not before: Sat 01 Jan 2022 14:08:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 139.28.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37472054 (0x23bc736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775dd2fc48ec4c1c51295c0569b5c89ab749a5ea
Validity
Not Before: Jan 1 14:08:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1f49c0b856eab1aacabf37bfffb032c501931bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:15:26:54:f0:f5:e3:bd:d0:07:15:46:cd:
e3:05:5d:94:35:ad:dd:70:8f:9b:6e:ab:69:da:3c:
fa:16:5a:05:05:1d:6f:19:2c:b3:38:7a:57:c3:03:
03:f4:0c:f8:95:7b:9d:af:63:97:74:33:ae:28:eb:
99:c2:58:b7:aa:49:33:ad:42:3d:d0:f8:e5:1a:99:
a2:70:3d:80:6b:eb:27:03:6a:00:a0:16:9c:92:74:
22:2e:3c:00:62:01:bb:39:b6:c9:55:f3:e9:78:af:
d0:3a:c9:7c:cd:02:de:e0:97:a2:1b:1c:d4:41:a3:
ad:73:fe:08:df:3c:e1:d5:48:05:0d:d5:27:8c:1a:
ad:70:48:23:e6:c0:43:e2:3e:d3:cd:9f:8f:3c:35:
d1:e0:1c:99:c9:c8:82:6c:90:da:69:89:9c:01:67:
c2:f8:4a:59:d7:52:13:40:ca:76:35:a4:e4:2e:c2:
39:0b:76:c8:e1:e9:5e:f4:66:dc:bf:0b:25:1c:73:
75:02:df:a8:e5:a0:14:cf:6d:a6:cf:ee:c1:2e:b9:
24:ac:ef:a5:0c:40:c9:8f:96:d4:77:e6:4b:1d:42:
80:7b:7d:d8:9c:ac:2f:a8:81:4b:e9:0b:5b:5d:31:
ed:ef:56:83:cf:0c:34:3b:87:9a:0b:52:e5:4c:00:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F4:9C:0B:85:6E:AB:1A:AC:AB:F3:7B:FF:FB:03:2C:50:19:31:BF
X509v3 Authority Key Identifier:
keyid:77:5D:D2:FC:48:EC:4C:1C:51:29:5C:05:69:B5:C8:9A:B7:49:A5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d13S_EjsTBxRKVwFabXImrdJpeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/ofScC4Vuqxqsq_N7__sDLFAZMb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/d13S_EjsTBxRKVwFabXImrdJpeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:72:be:79:87:ba:ac:b4:97:90:30:53:d3:46:e3:bd:87:00:
b2:50:b2:ab:68:08:1b:7c:46:ed:6e:27:8d:3e:a3:01:48:e4:
dc:00:85:3f:4e:ef:2a:6d:4b:08:92:a8:77:e4:a6:f3:e3:82:
c5:37:a1:0f:1c:3a:2d:76:56:db:51:63:4a:d9:fb:92:91:3b:
51:64:fb:66:12:b3:d0:d1:dc:a6:0a:b5:9e:ea:5f:2c:14:2f:
04:f5:f8:6e:90:0d:b2:3f:75:7a:75:db:fb:ee:6b:69:a9:a5:
1d:b9:8f:d0:61:c7:2a:ee:0c:ed:bd:35:6b:11:6a:36:9e:8e:
c8:6a:ec:a1:fe:65:42:d6:8a:eb:f2:9d:ee:ad:c4:a6:3a:60:
ec:df:3a:b8:cc:26:d1:c1:34:e9:49:73:42:b0:37:2c:59:08:
b9:bb:1e:83:9e:5d:c0:0e:d5:c9:1a:8c:e1:cc:07:f6:ba:c4:
66:62:ff:80:99:4c:f6:3d:c2:33:a9:7a:40:2c:c7:26:35:1d:
64:9a:ba:1d:e9:e2:dd:37:43:89:17:7f:36:3e:b9:ef:94:77:
0c:6a:e2:9f:bc:ac:9f:66:95:08:5c:b1:2e:4c:0c:09:b6:86:
12:4b:06:1d:18:21:b7:f2:c7:c2:38:d9:8f:e8:a0:72:59:1d:
7e:76:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:53 2024 by rpki-client on console-ams.rpki-client.org