Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/KC65iLduV38Y-_4YeZcOkvub1x0.roa
File: KC65iLduV38Y-_4YeZcOkvub1x0.roa (raw, json)
Hash identifier: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=
Subject key identifier: 28:2E:B9:88:B7:6E:57:7F:18:FB:FE:18:79:97:0E:92:FB:9B:D7:1D
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019423D80913BC95918D87AD7BB1DFD87EA1
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/KC65iLduV38Y-_4YeZcOkvub1x0.roa
Signing time: Wed 01 Jan 2025 21:49:08 +0000
ROA not before: Wed 01 Jan 2025 21:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 139.20.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:09:13:bc:95:91:8d:87:ad:7b:b1:df:d8:7e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Jan 1 21:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=282eb988b76e577f18fbfe1879970e92fb9bd71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:c2:ff:5c:a1:38:2f:8e:df:29:f9:77:08:
0e:77:2c:7e:84:0a:75:85:d5:0c:9c:ea:42:53:d7:
37:82:c7:82:38:e1:b4:54:70:7f:6a:4d:c2:32:bb:
69:53:69:44:d8:8c:14:24:14:35:fc:44:6b:56:65:
40:c4:72:7f:72:a9:2e:24:7d:de:c9:37:74:55:86:
e2:2b:10:9d:d8:c0:8c:0e:9b:f6:61:b1:77:e7:d0:
38:68:cc:12:32:ed:6a:32:39:5f:77:aa:39:40:97:
30:03:e2:24:53:ad:31:ef:7f:bd:6a:c5:db:66:97:
b6:43:d2:8c:a5:53:3a:0d:8a:04:c1:23:07:dd:2f:
4c:94:2f:6f:93:66:f5:63:0f:2a:2c:b0:28:6b:7e:
bf:56:05:84:12:fe:f1:55:3b:e4:6f:61:d2:15:fd:
aa:e4:72:f7:97:df:22:96:3f:76:fe:55:56:30:9a:
7a:9c:12:d6:98:1f:34:a0:27:ea:3f:ea:e8:16:13:
36:87:e7:74:75:9c:b4:89:bc:c9:40:79:31:23:0e:
1e:c8:4a:b1:8a:5c:93:f0:41:4c:ee:24:0b:63:0e:
45:47:83:09:3a:12:05:18:a6:f2:32:1f:dd:a2:05:
13:7e:bc:88:5a:e7:95:cb:16:89:0d:47:8c:12:9d:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2E:B9:88:B7:6E:57:7F:18:FB:FE:18:79:97:0E:92:FB:9B:D7:1D
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/KC65iLduV38Y-_4YeZcOkvub1x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:74:f0:11:49:44:a7:23:38:56:45:af:6d:e9:18:5f:fc:2a:
0d:2a:36:91:a5:ac:44:3b:32:cc:3e:18:09:5b:f8:fb:d7:c3:
66:78:2e:dd:ff:65:aa:b7:da:34:db:78:75:c5:9f:ef:37:c2:
6a:db:31:be:e0:ba:37:3e:7c:77:69:e4:dd:2b:fc:c5:4e:5e:
8a:d8:44:25:cf:66:f2:b8:51:cd:e9:ff:98:c1:83:ea:4c:b5:
81:18:46:63:43:e8:b8:4b:59:19:ef:f7:4b:41:1f:2a:b1:01:
2e:af:9f:7b:09:a1:a1:66:82:ac:b3:ed:07:d1:0b:bc:60:39:
77:5a:62:75:51:73:f3:3e:ce:4b:34:dd:97:ad:46:73:4c:9f:
ee:98:a9:16:a0:8e:8c:86:8a:6e:fd:47:cf:fc:3e:0a:dc:19:
08:76:2a:66:5c:68:62:98:fa:27:09:2d:5e:7c:6c:49:20:57:
d1:16:2e:8a:59:e6:62:51:f8:a8:6b:c3:73:7d:c2:ff:ea:42:
3d:64:d1:2e:72:da:31:ad:e8:cb:6f:e1:2b:bc:37:fc:96:d2:
20:94:17:19:f5:5f:df:ff:00:f8:c8:46:95:c0:ff:fa:1a:89:
ea:d6:a1:03:ca:06:47:12:1b:b4:05:6b:20:4e:08:fd:88:a8:
3c:9e:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:44 2025 by rpki-client