Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/lEJD8NJgL4VzGg9F9W3pW9vFrls.roa
File: lEJD8NJgL4VzGg9F9W3pW9vFrls.roa (raw, json)
Hash identifier: zpOjg3gPVtU9tXNCCKf+dPPcaqabJ3wzse/8bUKvA/I=
Subject key identifier: 94:42:43:F0:D2:60:2F:85:73:1A:0F:45:F5:6D:E9:5B:DB:C5:AE:5B
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01943D4106018CEDC767540CBCD58ABD89E9
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/lEJD8NJgL4VzGg9F9W3pW9vFrls.roa
Signing time: Mon 06 Jan 2025 20:14:19 +0000
ROA not before: Mon 06 Jan 2025 20:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 139.28.48.0/23 maxlen: 23
139.28.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3d:41:06:01:8c:ed:c7:67:54:0c:bc:d5:8a:bd:89:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 6 20:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=944243f0d2602f85731a0f45f56de95bdbc5ae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:1d:39:92:d0:bd:27:94:df:59:5e:d0:b5:
a9:20:47:44:a5:66:43:db:9d:05:5f:60:3b:ad:69:
d5:6f:f1:d3:a9:87:47:ae:eb:d9:6c:38:46:8d:18:
72:4f:32:09:c6:7b:6f:34:a5:b4:37:c4:20:04:e6:
07:f4:a0:c3:4d:57:c6:33:a8:4e:62:e7:83:3c:b8:
2a:47:84:6f:83:c7:ac:82:65:32:c7:54:82:58:ae:
6d:36:c4:36:4f:79:38:a5:e7:b0:85:da:97:23:13:
5a:ea:2c:56:e3:45:de:d2:f0:99:6c:89:e5:e3:e8:
18:3b:7b:91:e7:5c:69:dd:ad:36:07:4b:bb:94:57:
40:18:5f:e0:cd:ce:54:a0:2d:f8:07:e6:4a:f5:54:
15:d0:93:f8:1f:3a:66:3a:2d:23:2d:c8:b9:1b:75:
bf:ee:b8:c3:94:ca:0d:ce:58:12:89:e3:a5:c0:69:
2a:cf:0f:56:9b:e9:3e:a9:2c:ed:5e:5e:62:c8:f9:
1a:2f:42:fa:6c:ee:72:7c:0c:19:2f:be:58:04:52:
42:c3:bd:b4:9e:cd:00:60:2f:cc:20:fc:b6:35:8c:
98:af:f5:30:23:9c:48:14:60:4f:f9:c9:eb:86:ef:
01:94:02:5a:3f:a9:53:c7:2f:47:d4:af:91:88:34:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:43:F0:D2:60:2F:85:73:1A:0F:45:F5:6D:E9:5B:DB:C5:AE:5B
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/lEJD8NJgL4VzGg9F9W3pW9vFrls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.48.0/22
Signature Algorithm: sha256WithRSAEncryption
be:55:c5:25:b2:b1:25:a4:2f:31:c6:e5:cc:37:e5:16:4f:49:
46:b2:4e:a2:13:3d:7e:63:c6:bd:dc:86:ea:c9:d6:0b:f0:69:
6c:0a:cf:e5:3a:35:7c:0c:5b:cd:82:f7:ae:44:59:06:a3:0a:
77:51:3c:1f:4c:3f:4e:0b:f9:d3:5a:1d:a4:72:97:93:a5:00:
c3:ab:a9:ca:54:05:eb:15:c3:4a:1a:83:28:86:cc:b5:74:4b:
d6:bb:d7:84:06:62:3d:4c:ca:12:ce:a5:4d:1b:b8:27:cb:66:
68:b6:dc:83:a3:f6:71:67:b0:f6:33:5e:e1:8f:61:c8:bf:6e:
0b:e3:23:cd:5e:ae:00:e8:22:ef:43:4a:82:83:e0:58:39:1a:
19:b1:d1:57:9e:27:2a:60:e0:c9:68:99:1f:39:ea:75:35:4d:
d9:70:c8:30:7e:e5:25:3d:8c:36:2f:27:76:cd:15:c8:52:42:
d3:c5:8f:b5:16:a1:47:49:5e:6a:f2:03:7a:ad:6a:41:13:3d:
c6:9b:95:3c:e3:af:6b:83:5c:0f:cb:ff:b4:65:9b:ba:e3:6c:
37:ba:12:b5:eb:4f:cc:22:0b:36:40:5e:50:90:a9:f3:02:62:
c9:70:84:78:74:ed:62:c0:31:0d:8f:50:05:eb:e3:fd:17:b4:
5e:71:cd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:31:36 2025 by rpki-client