Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/QxxZKgMAq_1xunPiad-qpWYnNeM.roa
File: QxxZKgMAq_1xunPiad-qpWYnNeM.roa (raw, json)
Hash identifier: qkJsiA8VOTblatI9ueIMJqmRJDecOF2K0MR3UbTXBhQ=
Subject key identifier: 43:1C:59:2A:03:00:AB:FD:71:BA:73:E2:69:DF:AA:A5:66:27:35:E3
Certificate issuer: /CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Certificate serial: 01843E9123C35C828335A825E8B44AEE4B36
Authority key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/QxxZKgMAq_1xunPiad-qpWYnNeM.roa
Signing time: Thu 03 Nov 2022 17:36:50 +0000
ROA not before: Thu 03 Nov 2022 17:36:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 139.28.24.0/24 maxlen: 24
139.28.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:91:23:c3:5c:82:83:35:a8:25:e8:b4:4a:ee:4b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Validity
Not Before: Nov 3 17:36:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=431c592a0300abfd71ba73e269dfaaa5662735e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:48:71:a3:53:85:18:51:b9:a3:4f:a0:0e:
82:f5:b3:a8:86:b0:55:9d:a1:24:8a:b9:6d:b0:21:
ed:2a:87:65:63:2b:2d:2d:5c:65:a5:62:d5:8d:8c:
6c:c6:88:e6:c0:37:da:b8:6e:2b:7c:d4:39:07:6c:
9f:e2:84:98:44:38:60:4d:f2:f3:07:22:29:de:24:
5b:18:cc:22:b4:e2:5c:75:29:62:b0:8b:7a:7a:5f:
c7:f5:30:24:12:ba:9e:34:f6:92:16:9a:c1:bc:b0:
fb:4d:bf:2d:83:d8:d7:33:5c:8c:cf:ab:b1:f7:72:
0e:37:4e:c6:4a:b0:40:9a:bf:d3:b5:b0:bc:dd:2e:
b8:41:f0:bd:64:ad:07:5b:c3:7c:0c:4a:de:ca:7f:
31:f2:3c:4e:96:da:5b:10:3e:66:f0:77:b7:f1:47:
51:cf:e1:56:fb:a3:f1:d2:f5:a0:f8:ba:98:89:24:
20:d3:c9:d0:01:b7:28:1a:79:0b:5f:26:c8:39:58:
a4:0c:9e:27:8d:f3:48:4d:92:6a:11:2a:cf:0d:73:
4c:d6:32:ec:39:c5:48:3d:f2:50:cc:8a:bf:9c:f4:
b6:db:4e:60:59:29:87:8a:cd:9c:67:92:53:ab:98:
54:1f:76:02:ce:66:d0:f9:b6:14:5f:8f:b2:49:50:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:59:2A:03:00:AB:FD:71:BA:73:E2:69:DF:AA:A5:66:27:35:E3
X509v3 Authority Key Identifier:
keyid:3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/QxxZKgMAq_1xunPiad-qpWYnNeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.24.0/23
Signature Algorithm: sha256WithRSAEncryption
74:30:df:bc:91:a9:e9:ac:bf:7b:5b:2a:2a:94:92:6b:80:1d:
fd:3d:39:1a:f5:c6:a5:e1:40:e7:20:59:ba:df:79:ec:6b:82:
9a:a1:d4:d8:cf:98:84:5a:6f:58:4c:b6:5c:76:d9:88:c1:b1:
d1:33:91:ba:3f:ab:c4:00:42:15:13:d0:09:6e:e7:da:27:61:
77:a9:38:38:98:f6:6a:48:f0:a5:ac:3a:9c:8c:61:af:fe:9d:
4e:b4:0a:b7:40:c6:b8:4d:fb:68:a1:87:26:d6:6e:d6:25:d6:
e8:e2:d6:68:cd:e7:de:3e:40:d6:03:81:6b:12:67:ec:d0:a1:
7a:13:c5:31:59:7d:99:42:65:0e:a6:62:77:61:36:5d:ac:55:
c5:4f:ce:53:b2:3c:2e:f9:e5:3e:af:9a:10:e0:25:31:ee:ed:
e9:e9:38:56:88:e7:fc:61:c3:e8:d0:71:2c:28:52:93:18:23:
63:8e:6c:54:bb:b7:8a:b8:ac:41:c1:8e:73:64:6e:a7:ed:7c:
d1:27:f5:ef:51:8d:f9:01:a3:84:c5:69:43:64:ea:8d:df:ff:
c5:f4:71:61:92:08:01:ce:19:37:4a:2a:e0:06:13:ba:bd:8d:
86:d9:8e:f3:c8:d2:d0:83:40:4d:c7:66:75:4e:95:eb:6e:f3:
7b:b2:cc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:04 2024 by rpki-client on console-fra.rpki-client.org