Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/zjax_lvlHvuj83seEfT7Y0bSTKQ.roa
File: zjax_lvlHvuj83seEfT7Y0bSTKQ.roa (raw, json)
Hash identifier: DF54+jCSavBDVfFzXZiwQjCjBhL4TIIfaL6QWB7DmDM=
Subject key identifier: CE:36:B1:FE:5B:E5:1E:FB:A3:F3:7B:1E:11:F4:FB:63:46:D2:4C:A4
Certificate issuer: /CN=1196f87d5decfcbf04450b5fcf65b5b345f22464
Certificate serial: 018CC8DEA8755511CFAD298A35BEB9295F1B
Authority key identifier: 11:96:F8:7D:5D:EC:FC:BF:04:45:0B:5F:CF:65:B5:B3:45:F2:24:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/zjax_lvlHvuj83seEfT7Y0bSTKQ.roa
Signing time: Tue 02 Jan 2024 06:31:24 +0000
ROA not before: Tue 02 Jan 2024 06:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205394
IP address blocks: 139.28.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:a8:75:55:11:cf:ad:29:8a:35:be:b9:29:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1196f87d5decfcbf04450b5fcf65b5b345f22464
Validity
Not Before: Jan 2 06:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce36b1fe5be51efba3f37b1e11f4fb6346d24ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:22:d6:3c:ea:e0:95:63:ee:1e:96:4b:b1:
de:1a:ab:3d:c5:26:0b:c2:0c:f5:85:19:59:ac:3e:
0b:e8:79:35:0c:52:07:65:14:21:54:8e:ed:95:c2:
8c:6a:f1:62:10:27:1c:e8:4e:12:7d:ed:b6:ef:6c:
3c:79:8e:cd:da:4f:ff:bd:22:86:4c:de:bf:0b:08:
4e:42:51:f9:01:de:9b:2f:e6:f8:75:80:ee:35:51:
15:bc:ab:c6:12:62:ea:2f:97:59:d0:ab:2d:0f:c6:
ea:f8:41:ee:0d:0e:89:b2:26:62:2a:81:e5:30:23:
3b:72:b4:64:f6:5c:80:e8:ec:57:05:94:da:3c:05:
7f:da:90:d3:47:d9:2b:63:bd:a2:6e:68:7f:39:09:
58:02:d2:fe:ca:e8:9c:b8:e3:3e:0a:f4:49:1d:4a:
79:b7:87:9d:82:f2:9c:31:61:49:59:1d:9b:f7:bb:
8e:2d:c6:59:2e:20:b2:59:5d:3e:f1:58:77:3d:fb:
b8:e0:b2:40:e8:e5:6b:6d:c1:05:b5:7a:9d:75:f6:
f3:89:8e:3e:b1:57:9d:0c:a5:5a:4c:d7:52:5b:73:
b5:a4:41:fc:33:cf:55:54:e5:16:62:7b:ae:ee:49:
1c:cc:17:ae:45:81:93:2c:e9:01:c0:0e:9e:22:a9:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:B1:FE:5B:E5:1E:FB:A3:F3:7B:1E:11:F4:FB:63:46:D2:4C:A4
X509v3 Authority Key Identifier:
keyid:11:96:F8:7D:5D:EC:FC:BF:04:45:0B:5F:CF:65:B5:B3:45:F2:24:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/zjax_lvlHvuj83seEfT7Y0bSTKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8f5ef0-9a25-4946-aa71-0d3392a9eb93/1/EZb4fV3s_L8ERQtfz2W1s0XyJGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:aa:5e:e1:c1:1e:90:6f:40:0a:70:e1:42:2e:59:92:63:cd:
66:ca:cc:ba:0b:04:a2:83:92:a6:cb:de:56:dc:12:ee:54:02:
fd:ec:38:92:d9:1a:cc:f7:cc:d7:78:81:e7:1f:c6:44:43:f6:
80:ab:22:ef:5a:8d:2c:ae:41:f8:f8:70:19:ea:bc:ab:b5:70:
ac:7c:f1:35:b8:ee:3e:42:fe:a5:2a:ab:35:e9:ab:0c:43:97:
64:49:d3:c8:9f:3f:af:cd:87:8b:1e:7f:d0:7a:c6:db:94:71:
11:d0:36:4f:d9:5f:ab:e8:b7:c0:75:ec:22:af:f4:5a:fe:36:
9f:3b:78:75:bd:9b:14:1c:bf:49:41:c5:6d:3a:6d:e8:82:f4:
78:f4:a8:fe:7c:f9:c8:9f:ac:73:60:66:4a:22:1c:41:f5:68:
34:4f:07:6d:2a:b9:36:69:05:80:a0:ab:11:5d:30:8e:9d:49:
bc:6e:03:8c:68:3c:0d:08:96:a7:df:42:0b:1e:5b:b8:da:42:
39:10:6e:e4:23:48:16:04:6e:6f:5b:2a:4a:da:0a:a3:61:a1:
8a:dd:dc:27:bc:db:48:28:40:ad:61:f7:72:d1:21:4c:4c:52:
27:1e:2d:bd:95:d0:9a:b7:36:2d:4b:ef:fc:c3:ad:71:32:ba:
e2:de:62:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 15:32:17 2024 by rpki-client on console-fra.rpki-client.org