Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/ViWdVBTsGzmynAborFWD66x2j-0.roa
File: ViWdVBTsGzmynAborFWD66x2j-0.roa (raw, json)
Hash identifier: USnf7RxBCx7Hee02Aj5EZPORcuwxIU8crws+NY4p94A=
Subject key identifier: 56:25:9D:54:14:EC:1B:39:B2:9C:06:E8:AC:55:83:EB:AC:76:8F:ED
Certificate issuer: /CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Certificate serial: 01889F0A98F93E963A640DBECA481339C583
Authority key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/ViWdVBTsGzmynAborFWD66x2j-0.roa
Signing time: Fri 09 Jun 2023 07:24:11 +0000
ROA not before: Fri 09 Jun 2023 07:24:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 139.28.27.0/24 maxlen: 24
139.28.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:0a:98:f9:3e:96:3a:64:0d:be:ca:48:13:39:c5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Validity
Not Before: Jun 9 07:24:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56259d5414ec1b39b29c06e8ac5583ebac768fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:9a:ef:0f:bd:28:b2:b6:db:8e:8d:5f:be:
30:f3:b0:2a:96:30:0b:9c:ba:30:68:54:b8:42:dd:
8a:c0:50:6a:82:5a:b1:26:f2:44:70:14:19:2e:7d:
bd:2d:83:6f:13:07:21:6d:56:de:59:ab:53:7f:7d:
df:b4:83:72:fd:53:6b:08:29:ca:0c:46:4a:2f:76:
b0:11:a3:6c:f4:e2:65:9a:5a:20:cf:20:33:5e:71:
b9:46:0c:7f:60:84:03:61:79:11:a1:db:79:09:d5:
4a:09:33:62:31:40:de:4e:e6:ff:59:e2:77:5c:04:
0b:6e:b4:19:8d:82:46:e0:80:b2:1b:04:b5:04:6e:
5e:94:ca:34:2d:e9:83:4a:2a:b2:56:0e:3c:47:b4:
2a:21:0f:5e:2f:09:8a:ad:8d:39:7f:3d:01:c0:40:
1e:ef:3a:fe:4d:21:c8:a4:d0:17:c8:8f:4c:0a:92:
07:50:cc:d5:8e:ee:50:ab:bc:2c:6d:49:e2:d0:26:
91:d8:3a:05:cf:8d:bd:16:07:da:59:23:fb:be:67:
21:13:4e:7b:79:e2:14:14:73:fb:4b:47:53:18:4f:
8b:e7:b8:b1:84:01:6e:f0:a9:df:2a:84:14:22:1a:
23:e3:42:2b:9c:bb:53:dd:38:8e:13:67:64:86:99:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:9D:54:14:EC:1B:39:B2:9C:06:E8:AC:55:83:EB:AC:76:8F:ED
X509v3 Authority Key Identifier:
keyid:3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/ViWdVBTsGzmynAborFWD66x2j-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.26.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:1e:6b:13:31:29:a7:81:3d:82:97:d9:18:5b:6d:fe:32:ae:
7b:69:37:81:24:e3:2c:1c:71:1e:b9:9e:df:0d:58:da:73:49:
24:53:fe:2e:e4:12:33:c0:c5:d1:5c:e8:3e:71:cd:62:cc:c9:
90:ec:5e:b9:74:fe:06:90:65:91:56:39:12:0e:2f:b7:21:3b:
ec:99:cb:48:4f:6e:cb:57:0b:c3:c4:03:5d:77:05:8e:8b:b4:
f3:00:26:e7:68:8a:29:64:53:20:56:93:25:83:75:69:37:d6:
0e:21:ef:18:76:0c:e1:4e:89:0b:59:0b:b1:47:41:9c:b8:a6:
67:89:5d:81:40:4c:2e:b0:46:52:e9:4b:30:c7:c0:28:26:4c:
12:92:b9:b9:2e:69:e6:7b:65:9d:b8:d3:ca:f7:7e:de:ac:49:
75:c7:e6:90:ee:54:73:22:33:ea:5d:9c:c7:fc:92:c9:76:ae:
9e:6a:bd:c9:69:5a:2c:f8:ac:f8:15:ab:df:b8:05:ab:bb:20:
cb:e7:1b:d8:c4:92:d3:60:a3:bf:75:6a:09:3e:00:60:4f:fe:
1f:69:84:59:c5:ac:72:dd:3a:2e:74:d1:15:cb:bf:db:7b:c8:
6c:a2:b3:cc:99:02:f0:45:3a:26:54:a8:3b:c0:f2:eb:a6:d2:
9c:0f:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:04 2024 by rpki-client on console-fra.rpki-client.org