Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/9uevT_GdZi3oWyUC_YRY_MFZQ_k.roa
File: 9uevT_GdZi3oWyUC_YRY_MFZQ_k.roa (raw, json)
Hash identifier: z2+d6yk/8GLkmH2Dx4/9ETB3F9Oiv/IGFWfTlcXbfUE=
Subject key identifier: F6:E7:AF:4F:F1:9D:66:2D:E8:5B:25:02:FD:84:58:FC:C1:59:43:F9
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBC3FDB7B809B4D28AB3FEFCCDB168
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/9uevT_GdZi3oWyUC_YRY_MFZQ_k.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 139.28.32.0/22 maxlen: 22
141.98.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c3:fd:b7:b8:09:b4:d2:8a:b3:fe:fc:cd:b1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6e7af4ff19d662de85b2502fd8458fcc15943f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:ec:ac:bd:8f:34:0c:04:4a:82:ec:5b:42:
30:aa:a8:6d:cc:13:12:ff:3c:ab:ca:13:95:96:c0:
16:3e:f0:f8:c4:9d:76:6b:ca:0b:84:50:bf:7e:ff:
a2:22:f4:f8:07:21:98:c1:34:00:c9:60:b9:65:37:
9a:e1:c8:98:1f:3b:06:58:e3:83:05:58:82:c6:e5:
2b:61:53:48:8b:3e:6c:54:28:4f:7f:5d:7f:e6:fb:
17:aa:d1:35:20:0a:b6:f7:59:36:a5:b1:81:d6:a4:
90:15:fd:65:c3:6d:9b:cf:c9:3a:69:98:1d:cd:0b:
50:cc:bc:35:42:72:c3:05:6d:40:56:24:6e:92:ff:
cb:b8:46:74:9d:0a:af:f6:d4:fb:e5:b1:0f:f6:d7:
88:c1:f0:0a:e6:6a:dd:84:91:51:57:3f:71:79:51:
dc:46:cd:f7:3f:9c:28:95:16:54:42:ba:80:4c:77:
2e:60:26:fe:96:d7:3f:ae:ef:63:73:c4:89:83:7b:
79:1d:c5:c0:e2:cd:60:2c:de:5d:ee:18:93:3c:38:
25:d5:10:2b:1f:b9:59:8a:2b:45:fa:5b:68:f5:70:
cc:2e:08:62:62:a6:cc:d9:03:8c:5f:e8:74:e3:8d:
78:20:de:93:58:af:f2:5b:cd:e6:71:39:31:6b:95:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E7:AF:4F:F1:9D:66:2D:E8:5B:25:02:FD:84:58:FC:C1:59:43:F9
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/9uevT_GdZi3oWyUC_YRY_MFZQ_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.32.0/22
141.98.48.0/22
Signature Algorithm: sha256WithRSAEncryption
98:fc:52:fb:63:bf:86:6e:1b:f5:cd:c9:b2:83:ed:6c:a6:47:
22:52:4d:d6:b6:1f:29:73:ea:8e:20:f7:16:da:aa:9f:0c:50:
00:cf:36:ae:de:61:54:61:8c:90:e9:63:04:d2:60:8c:4b:46:
29:d3:91:92:d2:c9:07:a6:30:fe:54:c7:ee:0c:b5:be:16:3e:
b7:26:fd:c9:0b:22:68:b8:63:6b:a5:79:5f:a6:53:da:7c:82:
c5:10:b8:56:4a:65:82:e9:02:2d:c1:5b:de:77:dc:93:87:72:
46:11:2b:83:9b:d1:9c:ba:5a:74:65:6d:88:e5:58:7c:52:5e:
5f:d4:13:c4:ee:81:9c:03:02:c0:63:18:a7:a5:e3:d6:32:e8:
d0:0a:cc:64:97:75:b3:d0:f6:c7:0e:88:d9:65:b8:61:7f:0c:
72:7e:d8:f6:20:8b:0c:43:b9:fe:59:ad:5d:70:16:93:8b:c8:
58:14:f7:66:3a:a8:71:ee:7a:03:0d:7f:0f:e7:07:bf:3d:8a:
5d:2c:81:f0:68:76:5b:10:d2:f2:5a:6f:20:a7:15:8c:6d:42:
73:82:b9:e1:e4:c9:d1:2e:c2:f7:d9:8b:b5:96:a1:f5:f0:c6:
09:82:65:45:44:55:c8:cd:ad:a1:01:89:82:18:7b:00:70:76:
3f:84:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:26:33 2025 by rpki-client