Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/xvzdKoDARkIX2euWkdVuz9rOV2c.roa
File: xvzdKoDARkIX2euWkdVuz9rOV2c.roa (raw, json)
Hash identifier: +yIG2l+rrLDOVpUKZYG5qd8fpVk44/2he1nhI7PTdg0=
Subject key identifier: C6:FC:DD:2A:80:C0:46:42:17:D9:EB:96:91:D5:6E:CF:DA:CE:57:67
Certificate issuer: /CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Certificate serial: 01849A3D41016503FE9CB1FDE58A9BB0290F
Authority key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/xvzdKoDARkIX2euWkdVuz9rOV2c.roa
Signing time: Mon 21 Nov 2022 12:50:16 +0000
ROA not before: Mon 21 Nov 2022 12:50:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 139.28.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:3d:41:01:65:03:fe:9c:b1:fd:e5:8a:9b:b0:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Validity
Not Before: Nov 21 12:50:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6fcdd2a80c0464217d9eb9691d56ecfdace5767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d1:8b:c1:fe:d3:2f:f0:e6:1c:56:30:70:34:
a1:ff:d7:3b:29:af:ab:e0:16:ca:54:4d:9d:9c:72:
60:82:0a:75:f1:f2:33:9a:6a:4e:3f:73:23:3a:6b:
68:3e:32:17:ab:a4:38:76:39:76:5e:87:05:46:99:
ae:f8:48:ba:5f:17:40:7b:ce:16:d2:56:be:82:f1:
cc:b9:c8:7b:96:d2:3f:0c:10:47:9e:42:57:00:ba:
5a:e5:34:0e:86:52:a1:7a:80:d9:81:b0:b2:dd:00:
e1:46:33:81:c7:61:c3:27:61:4e:22:d0:67:ec:c4:
c7:73:6b:38:f6:6c:7d:f4:00:a9:db:5b:61:73:67:
75:a1:53:86:99:01:49:11:86:69:ec:9a:b2:04:d5:
2c:55:d8:66:9f:8e:11:4a:6c:a5:fb:88:7c:fb:f6:
f2:4c:93:50:4a:9e:dd:17:ec:94:a3:67:c9:e3:9e:
37:bb:0e:9d:ee:46:ea:9f:0d:e1:2a:20:65:aa:40:
c9:6c:24:c7:12:c2:42:46:cf:dc:7d:0f:ff:a7:87:
2f:53:ae:f1:a5:a0:6d:7f:e8:86:e6:71:24:b5:57:
8d:29:65:4d:66:f4:f5:7f:b0:90:99:b6:5c:3a:41:
9a:1e:4a:62:52:09:41:1b:de:14:26:82:01:31:13:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FC:DD:2A:80:C0:46:42:17:D9:EB:96:91:D5:6E:CF:DA:CE:57:67
X509v3 Authority Key Identifier:
keyid:3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/xvzdKoDARkIX2euWkdVuz9rOV2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.25.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d0:03:d9:3d:f7:d9:99:dd:c3:64:19:b1:0d:e3:53:9e:1a:
63:df:10:b5:39:72:d0:25:9c:ea:2d:d0:e2:79:d8:1a:54:7e:
61:58:13:f4:2a:26:f0:a1:a6:7c:b6:7d:d5:60:53:e8:84:18:
78:56:e4:d7:47:cb:88:40:cb:4f:79:a6:64:69:ca:ec:16:55:
7b:8f:dd:cc:dc:02:29:c9:8c:99:37:b5:d3:ed:e8:2e:ee:8c:
b3:d1:02:74:35:a8:f4:ac:f7:69:fb:7c:43:7b:b5:f5:7d:12:
5b:52:26:6a:b9:34:a2:06:a1:db:45:72:ce:8c:33:e3:fa:51:
c6:a9:49:98:47:60:69:8a:f3:ba:2e:2f:e1:d5:78:44:29:fc:
33:8e:47:55:0d:52:14:4e:0a:05:1f:b2:1a:e8:ef:dd:49:5c:
e5:2f:35:2a:90:f7:41:b9:8a:23:c1:c6:63:ba:54:a9:f4:59:
b9:f8:02:6a:49:20:66:4d:ce:22:1c:44:ab:c4:1c:dd:3b:39:
8f:fa:e7:2f:8d:50:a6:72:97:a3:1e:71:96:f0:70:12:4f:0d:
88:8a:fd:1f:a9:22:8f:64:cc:16:90:fe:cb:3c:8a:32:a8:73:
bc:58:6c:c7:5b:ce:28:5b:f7:ea:64:da:51:46:2b:1b:5b:1f:
f5:70:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:37 2024 by rpki-client on console-ams.rpki-client.org