Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/FRUYfScKLln5tR1k4YNLGnoEHgM.roa
File: FRUYfScKLln5tR1k4YNLGnoEHgM.roa (raw, json)
Hash identifier: 0cFo6/GlV3yt1sjzUtMZtQirSihbFNDgdL/reAjktUc=
Subject key identifier: 15:15:18:7D:27:0A:2E:59:F9:B5:1D:64:E1:83:4B:1A:7A:04:1E:03
Certificate issuer: /CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Certificate serial: 018B6B1CDEDE5D371DF00364707F52059D24
Authority key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/FRUYfScKLln5tR1k4YNLGnoEHgM.roa
Signing time: Thu 26 Oct 2023 08:32:15 +0000
ROA not before: Thu 26 Oct 2023 08:32:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 139.28.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:1c:de:de:5d:37:1d:f0:03:64:70:7f:52:05:9d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Validity
Not Before: Oct 26 08:32:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1515187d270a2e59f9b51d64e1834b1a7a041e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:73:69:09:c6:fc:7c:11:73:96:24:46:9c:
d3:1c:3e:d7:6c:3e:97:fc:6d:e7:77:06:c0:33:0b:
f9:63:44:98:d8:bc:26:5d:3b:83:97:b7:64:bb:05:
46:6f:50:5f:48:51:76:b7:a7:55:84:02:62:71:43:
31:85:ab:19:12:d3:f0:94:1c:45:e7:fc:8c:12:17:
a9:e4:db:10:10:e4:69:6b:9d:3f:43:ed:45:ce:df:
c2:fe:61:66:95:09:e5:fd:50:fa:49:93:4f:15:e7:
e1:b2:b5:fd:8b:2c:62:a8:94:f6:81:98:04:4f:cc:
43:88:73:65:28:db:0b:fa:15:b1:19:1f:0d:0e:05:
c3:12:08:8a:f1:71:ca:bf:4b:a8:5b:36:af:3c:ba:
8a:5b:83:1b:da:3d:60:5a:05:50:cf:ba:cf:28:0f:
18:c1:62:2c:e0:77:0c:2b:ec:48:aa:42:33:bd:8e:
cc:00:5a:cb:bc:e9:43:3b:0d:45:1e:97:e3:39:d3:
00:02:3e:e8:06:89:f1:08:89:ff:50:90:ad:6b:50:
ee:08:4c:ec:f2:0f:2e:1f:3d:58:b4:23:fa:10:92:
2a:78:7e:2f:02:57:6d:6a:01:c5:6b:10:6d:80:bd:
aa:97:87:93:9e:83:20:63:d0:92:6f:6c:ed:4c:4f:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:15:18:7D:27:0A:2E:59:F9:B5:1D:64:E1:83:4B:1A:7A:04:1E:03
X509v3 Authority Key Identifier:
keyid:3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/FRUYfScKLln5tR1k4YNLGnoEHgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.27.0/24
Signature Algorithm: sha256WithRSAEncryption
36:83:ff:3b:f7:ed:85:ae:c4:e4:9c:eb:11:35:8e:c7:24:bb:
28:a2:f5:f5:66:5a:cf:d9:ed:0b:71:80:12:5b:68:bb:1d:86:
d4:75:dc:fd:01:dd:30:fa:36:4c:c0:77:a1:d0:9a:fd:c4:bb:
17:a7:dc:d6:a4:6d:f9:c4:c5:27:67:ae:97:d3:4b:95:ae:6b:
59:c7:be:c8:11:18:f3:64:b2:ae:76:78:8b:e7:c3:b1:78:3d:
27:58:6b:ac:2b:0c:9b:9d:4b:d7:14:c2:83:d1:78:33:05:93:
7e:9b:e7:8b:58:e1:8e:37:12:17:7d:72:45:15:e2:61:5e:8d:
e2:d9:de:eb:29:a2:b4:ef:19:84:93:ae:9a:a3:81:18:7c:fd:
91:dc:6e:c8:63:c0:58:a7:01:84:ac:12:70:5c:01:7d:73:7e:
ca:36:67:9c:88:02:99:e9:72:97:18:8f:f0:4d:60:dd:0a:3c:
92:a4:00:2a:37:2c:01:14:33:03:de:52:d1:2b:0e:a3:22:e3:
f2:0b:cc:07:c3:6c:98:d7:5f:53:eb:0d:87:f8:c5:83:87:99:
f2:4f:b3:49:3a:71:0d:12:0b:ab:f1:95:c7:82:14:1c:8a:12:
4c:4e:ff:e2:c4:88:a6:95:58:45:41:d3:00:03:34:2f:44:9f:
81:fa:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:37 2024 by rpki-client on console-ams.rpki-client.org