Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/t7v8Tc1a0I0yndnxGNVy9QpMkZA.roa
File: t7v8Tc1a0I0yndnxGNVy9QpMkZA.roa (raw, json)
Hash identifier: qExnhdThvMQZzmCZSQY2MvZilH3NT4349z/JmFkL9sI=
Subject key identifier: B7:BB:FC:4D:CD:5A:D0:8D:32:9D:D9:F1:18:D5:72:F5:0A:4C:91:90
Certificate issuer: /CN=acc6e1b035ae13a624f25e91f928a3228cceb655
Certificate serial: 01824B6BAE11B2E17396448E4E033680E23C
Authority key identifier: AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/t7v8Tc1a0I0yndnxGNVy9QpMkZA.roa
Signing time: Fri 29 Jul 2022 19:25:24 +0000
ROA not before: Fri 29 Jul 2022 19:25:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 139.28.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4b:6b:ae:11:b2:e1:73:96:44:8e:4e:03:36:80:e2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc6e1b035ae13a624f25e91f928a3228cceb655
Validity
Not Before: Jul 29 19:25:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7bbfc4dcd5ad08d329dd9f118d572f50a4c9190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7e:84:79:c3:4f:91:b2:bc:e8:5f:bc:63:c8:
f6:51:22:5b:6a:f0:89:91:6d:c1:87:dc:fc:3a:d0:
97:0f:33:ad:39:53:13:75:ec:9e:0d:cb:5a:a9:e4:
a0:50:a5:94:e3:5f:36:11:c6:8f:21:d9:44:8c:36:
d2:6b:bd:f2:90:11:71:54:16:cd:2b:2c:8c:ac:96:
1a:cb:2e:7e:9f:0d:69:57:28:ea:07:bc:2b:5c:e3:
3c:d8:b2:fd:6f:35:ab:e4:7c:34:e4:27:b9:86:31:
20:b4:3c:62:5e:04:f1:6c:c3:24:36:63:a0:2b:f9:
39:f8:4b:69:a1:3c:73:ed:6b:d6:60:20:a7:8e:40:
a5:e8:1d:c4:3a:a7:4c:6a:98:d2:c0:fb:4e:f5:36:
ae:8e:4a:15:bf:bf:82:56:27:52:7f:6e:fa:db:03:
5c:98:f4:b1:f7:6f:08:aa:31:76:ff:be:a2:cc:57:
14:7a:57:bf:6e:d4:5a:df:26:83:55:d0:4c:6d:c9:
85:72:74:7b:8e:53:5e:c6:7d:1b:74:87:03:48:bd:
64:03:d3:53:5b:7c:ab:73:6f:ec:72:f9:b6:05:63:
01:d3:fd:24:bb:84:aa:51:f4:44:02:03:dd:c8:f4:
6c:fd:f1:bf:1a:24:b1:da:b3:71:a7:c3:df:eb:1b:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:FC:4D:CD:5A:D0:8D:32:9D:D9:F1:18:D5:72:F5:0A:4C:91:90
X509v3 Authority Key Identifier:
keyid:AC:C6:E1:B0:35:AE:13:A6:24:F2:5E:91:F9:28:A3:22:8C:CE:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMbhsDWuE6Yk8l6R-SijIozOtlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/t7v8Tc1a0I0yndnxGNVy9QpMkZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0c9af1-7879-44a4-b81b-aa82a7d9b352/1/rMbhsDWuE6Yk8l6R-SijIozOtlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.32.0/22
Signature Algorithm: sha256WithRSAEncryption
30:2d:be:ed:ad:ee:72:5f:9c:0a:03:e2:01:94:3d:a6:7e:07:
19:45:6f:05:4c:94:58:31:92:bb:ee:dd:5e:11:a7:ea:b5:5c:
52:cc:57:87:26:1a:85:0a:ca:72:56:e1:98:90:b9:1a:cb:2c:
b8:2a:b8:1c:97:cc:24:ac:92:60:ed:e0:08:ac:35:53:c3:e3:
55:8d:60:10:5d:af:fd:05:dc:0d:57:1f:a2:1d:9e:4c:06:d3:
38:85:66:62:a2:6a:61:f1:3c:6b:ea:27:17:f1:25:9e:56:fd:
2f:d0:2f:cf:7c:66:89:df:1e:77:7f:30:f0:60:31:40:d8:10:
41:27:49:7b:0f:97:f7:76:4c:4f:c9:eb:8a:e0:88:73:d6:ce:
5d:ba:59:37:49:e9:de:8f:5b:54:e8:d8:c9:5d:f9:80:8e:89:
55:ed:c4:d6:39:b8:30:c1:85:85:9c:52:f7:d4:37:f2:f1:a4:
99:63:15:0d:f5:8b:2f:bf:03:8a:75:c8:3c:60:db:1e:0c:1c:
98:d9:97:f4:05:e8:96:ab:8e:f6:e4:b6:9f:e6:4f:fc:b7:fe:
63:70:75:6e:6d:dc:24:f3:f8:53:53:84:00:3c:ef:b7:8d:e5:
af:3f:11:ae:cf:f4:68:38:86:6c:63:4e:53:97:7f:f6:aa:5b:
2a:81:cc:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJLa64RsuFzlkSOTgM2gOI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzZlMWIwMzVhZTEzYTYyNGYyNWU5MWY5MjhhMzIyOGNj
ZWI2NTUwHhcNMjIwNzI5MTkyNTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2JiZmM0ZGNkNWFkMDhkMzI5ZGQ5ZjExOGQ1NzJmNTBhNGM5MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX6EecNPkbK86F+8Y8j2USJbavCJ
kW3Bh9z8OtCXDzOtOVMTdeyeDctaqeSgUKWU4182EcaPIdlEjDbSa73ykBFxVBbN
KyyMrJYayy5+nw1pVyjqB7wrXOM82LL9bzWr5Hw05Ce5hjEgtDxiXgTxbMMkNmOg
K/k5+EtpoTxz7WvWYCCnjkCl6B3EOqdMapjSwPtO9TaujkoVv7+CVidSf2762wNc
mPSx928IqjF2/76izFcUele/btRa3yaDVdBMbcmFcnR7jlNexn0bdIcDSL1kA9NT
W3yrc2/scvm2BWMB0/0ku4SqUfREAgPdyPRs/fG/GiSx2rNxp8Pf6xsejQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLe7/E3NWtCNMp3Z8RjVcvUKTJGQMB8GA1UdIwQY
MBaAFKzG4bA1rhOmJPJekfkooyKMzrZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1iaHNEV3VFNllrOGw2Ui1TaWpJb3pPdGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYzlhZjEtNzg3OS00NGE0LWI4MWIt
YWE4MmE3ZDliMzUyLzEvdDd2OFRjMWEwSTB5bmRueEdOVnk5UXBNa1pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wYzlhZjEtNzg3OS00NGE0LWI4MWItYWE4MmE3ZDliMzUy
LzEvck1iaHNEV3VFNllrOGw2Ui1TaWpJb3pPdGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixwgMA0G
CSqGSIb3DQEBCwUAA4IBAQAwLb7tre5yX5wKA+IBlD2mfgcZRW8FTJRYMZK77t1e
EafqtVxSzFeHJhqFCspyVuGYkLkayyy4Krgcl8wkrJJg7eAIrDVTw+NVjWAQXa/9
BdwNVx+iHZ5MBtM4hWZiomph8Txr6icX8SWeVv0v0C/PfGaJ3x53fzDwYDFA2BBB
J0l7D5f3dkxPyeuK4Ihz1s5dulk3Senej1tU6NjJXfmAjolV7cTWObgwwYWFnFL3
1Dfy8aSZYxUN9YsvvwOKdcg8YNseDByY2Zf0BeiWq4725Laf5k/8t/5jcHVubdwk
8/hTU4QAPO+3jeWvPxGuz/RoOIZsY05Tl3/2qlsqgczm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:23 2024 by rpki-client on console-ams.rpki-client.org