Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0beb0d-642a-4bfb-a054-945206307648/1/7O7Ecw3wl2eccWDUTY2zfLh7dmU.roa
File: 7O7Ecw3wl2eccWDUTY2zfLh7dmU.roa (raw, json)
Hash identifier: wjbZfmnk15RfODruPMA5SAk6kN4QwyPhXxqNxzOY7i8=
Subject key identifier: EC:EE:C4:73:0D:F0:97:67:9C:71:60:D4:4D:8D:B3:7C:B8:7B:76:65
Certificate issuer: /CN=95a2e4d38434514f8b900aa4e536185bcdf51888
Certificate serial: 04231245
Authority key identifier: 95:A2:E4:D3:84:34:51:4F:8B:90:0A:A4:E5:36:18:5B:CD:F5:18:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laLk04Q0UU-LkAqk5TYYW831GIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0beb0d-642a-4bfb-a054-945206307648/1/7O7Ecw3wl2eccWDUTY2zfLh7dmU.roa
Signing time: Sat 01 Jan 2022 06:06:42 +0000
ROA not before: Sat 01 Jan 2022 06:06:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209632
IP address blocks: 139.28.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69407301 (0x4231245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a2e4d38434514f8b900aa4e536185bcdf51888
Validity
Not Before: Jan 1 06:06:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eceec4730df097679c7160d44d8db37cb87b7665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:b8:93:54:8c:09:02:02:c7:f0:78:54:d8:
2b:a9:d1:d4:82:4b:01:47:72:df:fb:ad:db:86:82:
79:71:66:8a:e6:d4:c8:45:a4:22:df:a7:db:67:f3:
2c:66:1e:da:05:77:cf:24:bf:7b:e5:5a:ee:dd:2d:
99:10:b5:5a:6a:d5:51:d9:59:ba:58:85:a6:9d:87:
90:34:63:56:6a:ba:62:1b:3a:ae:01:3b:cb:36:a4:
27:d5:27:0b:c8:ac:53:1d:87:ae:cf:9b:b3:71:00:
da:6e:75:b7:88:08:7d:26:5f:a9:d4:34:f6:74:b3:
4d:cc:3d:ae:89:b4:96:f2:a7:52:bc:d0:95:86:59:
49:b1:42:0f:a0:94:c6:6a:b6:78:35:05:fc:60:13:
42:d0:a6:82:3f:26:de:c4:8c:32:f7:53:8b:85:1c:
dc:eb:2f:93:16:36:47:59:61:a8:fc:5f:53:c1:89:
c7:ed:63:81:a5:98:50:a9:36:fe:19:11:4e:fd:da:
f4:93:c9:ef:56:dd:d0:e7:8f:25:ae:fe:c5:28:b2:
36:a7:12:03:6b:af:12:a3:36:95:a2:04:5c:bd:61:
cb:5d:27:89:38:47:36:01:86:28:7b:62:05:5e:80:
be:55:97:00:d3:58:aa:7f:82:b3:24:0a:29:da:50:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EE:C4:73:0D:F0:97:67:9C:71:60:D4:4D:8D:B3:7C:B8:7B:76:65
X509v3 Authority Key Identifier:
keyid:95:A2:E4:D3:84:34:51:4F:8B:90:0A:A4:E5:36:18:5B:CD:F5:18:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laLk04Q0UU-LkAqk5TYYW831GIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0beb0d-642a-4bfb-a054-945206307648/1/7O7Ecw3wl2eccWDUTY2zfLh7dmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0beb0d-642a-4bfb-a054-945206307648/1/laLk04Q0UU-LkAqk5TYYW831GIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.188.0/22
Signature Algorithm: sha256WithRSAEncryption
38:e2:df:9e:5a:f8:08:75:7f:01:7f:62:f0:62:bf:89:55:6b:
54:3c:7f:66:73:a0:30:39:a7:a6:83:5f:12:ba:77:b4:6d:38:
56:4d:15:83:d9:44:89:62:e6:39:60:66:04:ca:89:03:3d:06:
96:2f:18:63:b0:88:f8:85:ce:cb:ed:de:04:8c:8e:3d:12:d0:
c0:7c:9e:0a:fd:f3:bb:51:1b:5e:55:f7:f4:3b:ea:c3:f5:8e:
e0:1f:29:ea:07:6a:46:dc:f0:ae:ae:31:4f:b0:38:d7:f7:8f:
31:80:0b:a3:da:12:78:ae:01:33:a6:f4:e1:9d:7e:9b:53:0a:
83:42:b7:7c:bc:6d:c5:72:d6:ab:70:fd:f4:4e:51:bc:6e:a8:
b2:aa:20:ab:99:55:bf:5b:21:ef:6f:ec:ca:fb:50:11:e0:07:
37:d9:e6:bc:80:70:db:33:af:b1:f8:fa:ef:93:00:d2:62:a3:
f5:78:57:0d:bc:22:2a:98:5d:1b:c3:ff:e3:f0:a3:cd:99:70:
ba:99:8c:aa:fb:8b:85:58:be:30:88:3c:92:60:73:9c:0b:00:
5a:e2:b3:8a:f2:69:df:a8:85:ce:89:89:30:6c:77:b7:80:5a:
af:63:90:b2:5f:e7:c4:7d:a0:f2:a5:10:d3:d8:1a:9c:83:4c:
40:90:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:44 2025 by rpki-client