Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/s6qyVnkvpWdQacvnyt03YxwLl5s.roa
File: s6qyVnkvpWdQacvnyt03YxwLl5s.roa (raw, json)
Hash identifier: aF0JD0GY3TjkFtGaSn4h66X3AtTMzuMVUag/2q6/vbU=
Subject key identifier: B3:AA:B2:56:79:2F:A5:67:50:69:CB:E7:CA:DD:37:63:1C:0B:97:9B
Certificate issuer: /CN=acc6e1b035ae13a624f25e91f928a3228cceb655
Certificate serial: 0233BE3D
Authority key identifier: AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/s6qyVnkvpWdQacvnyt03YxwLl5s.roa
Signing time: Sat 01 Jan 2022 15:58:40 +0000
ROA not before: Sat 01 Jan 2022 15:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 139.28.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36945469 (0x233be3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc6e1b035ae13a624f25e91f928a3228cceb655
Validity
Not Before: Jan 1 15:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3aab256792fa5675069cbe7cadd37631c0b979b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:09:ed:fc:7e:78:51:e4:a0:82:b0:cd:00:
7e:88:da:66:40:02:7e:ed:03:dd:c1:9b:50:89:af:
68:69:59:79:a1:4e:92:0a:46:87:cb:9f:a5:9b:f7:
70:d3:3c:78:4a:c2:fe:de:86:80:fc:e8:2a:f3:79:
f1:53:f1:eb:b7:97:a4:ab:2f:f9:50:52:5b:ad:af:
34:30:14:3f:62:6f:53:82:ab:fb:bd:88:2e:69:a2:
07:7d:4b:7c:f5:ac:fb:77:5f:95:1b:ec:95:f7:24:
4f:8e:62:36:28:a9:a0:cc:d6:81:44:c9:ff:98:5a:
d2:0d:52:eb:22:17:66:e6:b6:24:3d:9b:ea:32:5f:
0e:6f:0a:06:57:c0:86:92:10:ce:75:ba:5a:4d:28:
d0:02:89:c5:a1:3c:20:f2:24:56:aa:94:07:59:aa:
da:61:cd:8b:ba:8f:cc:f2:7a:b1:c1:3a:ce:e8:ae:
ec:a3:39:39:c2:a7:b2:fb:52:11:47:e7:19:e5:78:
7b:e4:d0:87:b6:a6:67:2e:89:71:e7:37:09:fa:8d:
71:1c:bd:26:33:1b:9d:52:66:e6:ed:9a:f9:00:5a:
f2:57:cb:4e:f4:11:76:af:28:0c:8c:35:e3:28:ba:
e7:07:2e:14:b9:f4:b4:20:6b:97:a1:44:bc:f0:60:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:B2:56:79:2F:A5:67:50:69:CB:E7:CA:DD:37:63:1C:0B:97:9B
X509v3 Authority Key Identifier:
keyid:AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/s6qyVnkvpWdQacvnyt03YxwLl5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/rMbhsDWuE6Yk8l6R-SijIozOtlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.32.0/22
Signature Algorithm: sha256WithRSAEncryption
83:c7:9b:11:6b:bb:9e:02:31:77:bb:29:66:87:3f:00:11:d0:
7e:99:6e:4b:f7:98:a6:c5:e7:54:04:76:20:fc:a7:5e:d3:c3:
b6:db:8f:8f:d8:ef:ff:51:a4:7c:02:4d:96:41:5f:bc:81:fd:
b5:1d:91:43:55:17:b8:84:ff:f3:ca:e2:8f:f2:87:c8:e5:ea:
c4:7d:13:cf:b6:5d:6c:ee:cc:5b:7c:d0:c4:8a:dd:8a:35:56:
eb:7e:9d:9d:2d:94:05:c9:7d:2c:6f:7c:ee:dd:a2:4f:9a:5a:
e0:5e:ea:9a:00:69:69:50:68:e9:25:f6:bc:bf:37:c8:91:b4:
ba:64:88:88:bc:d9:01:e7:26:00:5b:1c:ea:aa:4b:d2:60:d3:
65:46:6c:81:92:86:09:62:c6:aa:da:38:35:33:82:7e:e8:dd:
23:7c:e5:bb:3c:f1:7b:ca:28:f9:ff:48:04:77:50:b3:d2:18:
61:ec:01:29:c8:24:c5:77:bc:41:6e:29:a1:ec:5f:e2:44:c9:
eb:e6:67:a7:a4:97:18:91:07:5b:53:ac:d3:f1:ff:d6:dc:b6:
63:51:f8:bc:ed:e2:39:6f:2b:29:07:95:82:a2:00:2d:7a:28:
da:c2:f6:6e:32:3f:e8:59:eb:4f:45:e9:28:09:69:f5:4f:7d:
17:9b:2c:38
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAjO+PTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Y2M2ZTFiMDM1YWUxM2E2MjRmMjVlOTFmOTI4YTMyMjhjY2ViNjU1MB4XDTIyMDEw
MTE1NTg0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjNhYWIyNTY3OTJm
YTU2NzUwNjljYmU3Y2FkZDM3NjMxYzBiOTc5YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANJXCe38fnhR5KCCsM0AfojaZkACfu0D3cGbUImvaGlZeaFO
kgpGh8ufpZv3cNM8eErC/t6GgPzoKvN58VPx67eXpKsv+VBSW62vNDAUP2JvU4Kr
+72ILmmiB31LfPWs+3dflRvslfckT45iNiipoMzWgUTJ/5ha0g1S6yIXZua2JD2b
6jJfDm8KBlfAhpIQznW6Wk0o0AKJxaE8IPIkVqqUB1mq2mHNi7qPzPJ6scE6zuiu
7KM5OcKnsvtSEUfnGeV4e+TQh7amZy6Jcec3CfqNcRy9JjMbnVJm5u2a+QBa8lfL
TvQRdq8oDIw14yi65wcuFLn0tCBrl6FEvPBgeDUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSzqrJWeS+lZ1Bpy+fK3TdjHAuXmzAfBgNVHSMEGDAWgBSsxuGwNa4TpiTy
XpH5KKMijM62VTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JNYmhzRFd1RTZZazhsNlItU2lqSW96T3RsVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvMGM5YWYxLTc4NzktNDRhNC1iODFiLWFhODJhN2Q5YjM1Mi8x
L3M2cXlWbmt2cFdkUWFjdm55dDAzWXh3TGw1cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
MGM5YWYxLTc4NzktNDRhNC1iODFiLWFhODJhN2Q5YjM1Mi8xL3JNYmhzRFd1RTZZ
azhsNlItU2lqSW96T3RsVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoscIDANBgkqhkiG9w0BAQsFAAOC
AQEAg8ebEWu7ngIxd7spZoc/ABHQfpluS/eYpsXnVAR2IPynXtPDttuPj9jv/1Gk
fAJNlkFfvIH9tR2RQ1UXuIT/88rij/KHyOXqxH0Tz7ZdbO7MW3zQxIrdijVW636d
nS2UBcl9LG987t2iT5pa4F7qmgBpaVBo6SX2vL83yJG0umSIiLzZAecmAFsc6qpL
0mDTZUZsgZKGCWLGqto4NTOCfujdI3zluzzxe8oo+f9IBHdQs9IYYewBKcgkxXe8
QW4poexf4kTJ6+Znp6SXGJEHW1Os0/H/1ty2Y1H4vO3iOW8rKQeVgqIALXoo2sL2
bjI/6FnrT0XpKAlp9U99F5ssOA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:07:18 2025 by rpki-client