Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/P45rAV8VKnRKZvaSuhWGDY_YFk4.roa
File: P45rAV8VKnRKZvaSuhWGDY_YFk4.roa (raw, json)
Hash identifier: PBXkdBh0bLGuEDzAGzWRTdyptv2rcMaj4PePnlGyJDk=
Subject key identifier: 3F:8E:6B:01:5F:15:2A:74:4A:66:F6:92:BA:15:86:0D:8F:D8:16:4E
Certificate issuer: /CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Certificate serial: 018B6B3856618153D83CC747DBA12E941BB1
Authority key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/P45rAV8VKnRKZvaSuhWGDY_YFk4.roa
Signing time: Thu 26 Oct 2023 09:02:16 +0000
ROA not before: Thu 26 Oct 2023 09:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 139.28.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:38:56:61:81:53:d8:3c:c7:47:db:a1:2e:94:1b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Validity
Not Before: Oct 26 09:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f8e6b015f152a744a66f692ba15860d8fd8164e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:25:5b:3e:d5:00:51:9e:6e:6a:76:70:92:98:
02:07:76:aa:48:37:3b:f9:cf:8b:60:c6:ea:0d:72:
44:ec:0d:29:35:bb:b4:b9:22:ff:41:78:90:4a:01:
1f:28:af:7c:51:52:cb:9d:8d:1e:27:0d:d7:1a:13:
7a:73:dc:84:ca:49:b6:61:b5:0d:92:95:73:98:c3:
05:c2:32:49:6d:46:6b:6b:b9:b5:61:20:9c:16:d7:
03:71:eb:a8:8b:90:c6:0a:a8:85:49:09:7c:9b:1c:
06:49:27:6e:dc:01:e8:9f:ff:b5:97:dc:04:2c:6c:
9d:b7:17:cb:54:9d:94:d0:a0:bc:94:41:d7:52:0f:
8f:58:ae:e8:bc:8e:6b:b7:e6:71:93:6c:4f:58:8d:
ab:dd:49:f7:c8:d9:1f:25:b2:5a:54:f1:79:b4:b7:
e2:e0:a3:b3:5a:8c:c0:40:23:33:fa:eb:5b:c0:1e:
12:89:8e:ba:01:81:be:25:e0:7d:85:ef:15:cd:01:
b8:75:12:af:ba:07:1d:b9:14:14:7d:f5:f4:d5:b5:
e6:4b:34:9b:f0:16:d3:c0:cb:56:01:aa:67:2e:cb:
1b:23:c0:c1:bd:32:19:69:f9:09:db:60:5f:d9:dd:
81:73:f3:7a:31:00:22:26:59:37:09:31:46:3f:c3:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8E:6B:01:5F:15:2A:74:4A:66:F6:92:BA:15:86:0D:8F:D8:16:4E
X509v3 Authority Key Identifier:
keyid:3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/P45rAV8VKnRKZvaSuhWGDY_YFk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.26.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9a:8d:41:ec:0f:0c:e9:8e:39:3a:70:82:da:cf:5b:40:5c:
88:94:f4:29:f6:f2:d1:30:c5:a2:39:de:df:a8:09:b5:31:6c:
04:c8:0a:db:99:d1:b9:19:18:d9:3d:1c:f3:47:7a:87:9f:3b:
79:5c:d8:3d:41:6e:9b:0f:cb:55:5c:e5:7f:9c:7c:22:6d:a8:
5f:a1:6e:27:4c:fa:2f:7c:0f:af:bd:9c:af:2a:23:bb:f7:9c:
7e:39:04:a5:b8:10:d3:e2:fc:29:21:56:78:5d:30:58:8e:bc:
d8:d7:19:d3:d6:37:32:d0:09:ac:f3:99:78:f0:7f:fa:93:02:
65:e3:3c:7b:04:1a:2f:d5:6e:de:06:ef:8e:cf:a9:c8:8c:c8:
d9:93:78:8f:f8:1b:b9:f9:3d:89:67:e5:58:d3:70:7a:5e:8b:
69:b2:9c:fa:eb:93:7e:1f:c7:a2:6e:a1:86:1b:8c:f5:6d:f3:
31:c4:c8:55:76:30:08:4d:83:a2:fe:36:a0:8b:0e:ff:47:77:
f6:2d:f1:bd:e0:fe:b6:ba:31:3a:19:78:f7:07:4b:e1:1b:bb:
fd:31:14:eb:69:cf:42:50:da:25:cd:3d:c0:9a:0d:d8:38:38:
99:78:1a:89:29:9d:5b:84:4f:ad:a9:1d:bd:c1:f2:c0:8b:25:
76:6b:08:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:37 2024 by rpki-client on console-ams.rpki-client.org