Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/73xtU4d_uNPol3nMC8iYdvYocyE.roa
File: 73xtU4d_uNPol3nMC8iYdvYocyE.roa (raw, json)
Hash identifier: +cn7YsTWFj0D5gigkoWIaJ2IckbkDb5Ddf5drRt3SkI=
Subject key identifier: EF:7C:6D:53:87:7F:B8:D3:E8:97:79:CC:0B:C8:98:76:F6:28:73:21
Certificate issuer: /CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Certificate serial: 0188977A431EF9EB52753F4CDEE8E20AE3DA
Authority key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/73xtU4d_uNPol3nMC8iYdvYocyE.roa
Signing time: Wed 07 Jun 2023 20:09:12 +0000
ROA not before: Wed 07 Jun 2023 20:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 139.28.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:7a:43:1e:f9:eb:52:75:3f:4c:de:e8:e2:0a:e3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Validity
Not Before: Jun 7 20:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef7c6d53877fb8d3e89779cc0bc89876f6287321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:9e:c4:af:80:e4:0f:c6:6e:e9:88:5c:0c:
28:ce:26:8e:80:d5:fb:7d:29:0a:40:8d:8c:95:66:
29:37:c5:22:6d:46:89:c4:44:53:cc:dc:1d:0e:f7:
10:10:c1:e1:6d:6d:30:b0:e3:56:ce:88:e5:cf:c3:
58:ce:d4:aa:14:ed:16:fd:1d:4e:3e:c2:b2:70:b5:
4f:67:37:e5:91:9c:e4:ca:b7:3f:f9:49:1b:6a:ef:
3b:30:97:0a:3f:96:4a:61:be:84:71:62:01:a1:3b:
f6:c7:a6:08:50:8b:28:5c:a3:a5:dc:63:e2:59:b5:
40:bb:e0:38:46:eb:51:8f:a9:e3:a1:99:d8:ba:14:
9d:74:ee:50:f4:48:d5:47:69:43:0f:3d:85:c4:bf:
99:6b:81:c1:5e:65:c8:41:f5:eb:8c:e8:6b:ee:9d:
94:aa:bb:1e:db:f5:2c:87:88:7b:3a:ca:18:82:00:
a0:ee:78:9b:2c:d4:9a:62:ad:f1:56:3c:d5:6f:ee:
d9:bd:04:67:8e:90:6d:79:46:9c:0a:dc:84:0a:b1:
b9:54:07:6b:a1:1b:59:11:63:85:a1:50:63:3e:a9:
a4:46:00:b6:4f:ab:4e:85:b6:dd:b5:a1:4a:69:ce:
0f:e1:15:74:b4:97:d1:48:00:af:50:06:1a:14:c7:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7C:6D:53:87:7F:B8:D3:E8:97:79:CC:0B:C8:98:76:F6:28:73:21
X509v3 Authority Key Identifier:
keyid:3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/73xtU4d_uNPol3nMC8iYdvYocyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f1:db:6b:c4:50:41:9e:a8:01:08:20:2d:9d:3d:d6:2e:28:
c7:f5:4d:25:4b:9f:2c:cc:fd:a5:a7:60:09:7d:82:39:3b:39:
0b:11:bf:44:70:95:10:6e:1e:14:0e:45:27:77:14:02:97:63:
ef:e2:61:83:c1:72:da:e2:92:ae:b3:f8:cb:c9:86:ef:c3:0e:
35:7e:d3:6a:f9:5e:b7:52:0b:c6:9d:08:11:bb:06:1f:f7:55:
4a:23:83:ca:fc:ca:32:8c:38:45:c3:b6:6c:85:e2:1d:ad:54:
c7:e3:9b:46:96:ea:26:74:06:b0:28:9a:50:8e:1d:dd:84:7f:
dc:af:eb:b5:8d:32:79:19:85:91:19:33:c3:73:7c:81:65:45:
ff:10:5a:7c:18:5f:ed:a4:a9:a1:ed:e7:b5:99:82:80:f1:c5:
64:52:77:69:12:cb:af:59:93:e7:b3:a2:db:0f:a4:02:30:46:
19:3e:78:0a:17:3f:76:24:fa:52:ec:05:8d:e1:4d:19:b7:ad:
35:13:4b:b4:1b:35:1b:4f:a1:27:fc:90:de:0a:91:05:f5:27:
6b:e1:6c:9f:b0:49:7a:0f:ff:c1:11:ad:5a:01:ee:97:65:81:
00:d8:d5:d5:50:af:ea:36:1a:da:cc:69:e4:0f:b1:4e:a9:54:
68:d5:af:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiXekMe+etSdT9M3ujiCuPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTUxYWQ1MDQwZjQ1MDNhZmM3MWRjNTAxODljNGE5NjRk
MWNkNDAwHhcNMjMwNjA3MjAwOTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjdjNmQ1Mzg3N2ZiOGQzZTg5Nzc5Y2MwYmM4OTg3NmY2Mjg3MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl2exK+A5A/GbumIXAwoziaOgNX7
fSkKQI2MlWYpN8UibUaJxERTzNwdDvcQEMHhbW0wsONWzojlz8NYztSqFO0W/R1O
PsKycLVPZzflkZzkyrc/+Ukbau87MJcKP5ZKYb6EcWIBoTv2x6YIUIsoXKOl3GPi
WbVAu+A4RutRj6njoZnYuhSddO5Q9EjVR2lDDz2FxL+Za4HBXmXIQfXrjOhr7p2U
qrse2/Ush4h7OsoYggCg7nibLNSaYq3xVjzVb+7ZvQRnjpBteUacCtyECrG5VAdr
oRtZEWOFoVBjPqmkRgC2T6tOhbbdtaFKac4P4RV0tJfRSACvUAYaFMdb6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO98bVOHf7jT6Jd5zAvImHb2KHMhMB8GA1UdIwQY
MBaAFDrlGtUED0UDr8cdxQGJxKlk0c1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VVYTFRUVBSUU92eHgzRkFZbkVxV1RSelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wOTU2MGQtMjkyMy00MzQ5LWFmNWMt
YTU4M2YxNzA4MmFhLzEvNzN4dFU0ZF91TlBvbDNuTUM4aVlkdllvY3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wOTU2MGQtMjkyMy00MzQ5LWFmNWMtYTU4M2YxNzA4MmFh
LzEvT3VVYTFRUVBSUU92eHgzRkFZbkVxV1RSelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAixwbMA0G
CSqGSIb3DQEBCwUAA4IBAQBd8dtrxFBBnqgBCCAtnT3WLijH9U0lS58szP2lp2AJ
fYI5OzkLEb9EcJUQbh4UDkUndxQCl2Pv4mGDwXLa4pKus/jLyYbvww41ftNq+V63
UgvGnQgRuwYf91VKI4PK/MoyjDhFw7ZsheIdrVTH45tGluomdAawKJpQjh3dhH/c
r+u1jTJ5GYWRGTPDc3yBZUX/EFp8GF/tpKmh7ee1mYKA8cVkUndpEsuvWZPns6Lb
D6QCMEYZPngKFz92JPpS7AWN4U0Zt601E0u0GzUbT6En/JDeCpEF9Sdr4WyfsEl6
D//BEa1aAe6XZYEA2NXVUK/qNhrazGnkD7FOqVRo1a/V
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:26 2025 by rpki-client