Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/855755-c848-47a3-aba6-0876042a6c57/1/l-EO7qc-Tgt0XV2TIheeOAvC_7o.roa
File: l-EO7qc-Tgt0XV2TIheeOAvC_7o.roa (raw, json)
Hash identifier: QjtutuTgmfdKKy5aXqjQTvOpEDMXjL29bM5udQWwWCk=
Subject key identifier: 97:E1:0E:EE:A7:3E:4E:0B:74:5D:5D:93:22:17:9E:38:0B:C2:FF:BA
Certificate issuer: /CN=8168598fea04d38c1bcfa327994aa09eedf30334
Certificate serial: 018217724D46C93C1324DB042AB405AE1AF8
Authority key identifier: 81:68:59:8F:EA:04:D3:8C:1B:CF:A3:27:99:4A:A0:9E:ED:F3:03:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWhZj-oE04wbz6MnmUqgnu3zAzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/855755-c848-47a3-aba6-0876042a6c57/1/l-EO7qc-Tgt0XV2TIheeOAvC_7o.roa
Signing time: Tue 19 Jul 2022 17:12:23 +0000
ROA not before: Tue 19 Jul 2022 17:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 139.28.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:72:4d:46:c9:3c:13:24:db:04:2a:b4:05:ae:1a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8168598fea04d38c1bcfa327994aa09eedf30334
Validity
Not Before: Jul 19 17:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97e10eeea73e4e0b745d5d9322179e380bc2ffba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:6b:fa:d2:33:1d:9a:19:41:d4:61:73:a7:
b1:06:16:9f:20:13:ce:30:37:fa:98:3c:c6:85:74:
47:7f:2e:12:bf:e1:68:1e:78:bd:d8:25:c0:b1:f3:
5f:1b:37:65:49:60:32:99:14:67:c2:1a:7a:e7:61:
b5:69:7e:21:a5:e0:b2:d0:99:54:80:24:20:54:a1:
ba:7a:d6:74:2e:6b:34:79:a8:c2:c7:55:25:21:b2:
09:2b:f8:a7:e5:a8:01:a7:1e:39:4f:71:63:b5:1a:
6f:55:76:c1:68:14:34:8f:f1:49:a5:80:8f:af:f7:
ed:9d:cd:3f:71:6a:6f:f3:b5:7c:5f:f3:3f:c4:e2:
e4:03:05:60:ab:59:18:05:9f:8b:99:fc:15:21:6b:
7c:73:f6:f4:85:17:93:b1:72:fd:c2:ff:4b:b0:12:
30:fa:83:7e:58:1c:e3:5d:b2:8d:2d:b2:a6:7c:d2:
d4:7a:70:08:c0:e3:ad:f1:e2:a5:f6:03:14:94:c6:
12:f1:08:c1:64:bf:98:ce:48:aa:e3:5d:2a:46:c5:
09:dd:ee:09:b7:d6:3c:a9:a6:b1:cc:a8:10:6e:77:
6e:d3:cd:ee:a1:ec:51:cb:b1:cc:05:d3:de:95:e4:
cb:20:98:c7:5b:b3:15:d8:1c:7e:59:fb:58:ec:24:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E1:0E:EE:A7:3E:4E:0B:74:5D:5D:93:22:17:9E:38:0B:C2:FF:BA
X509v3 Authority Key Identifier:
keyid:81:68:59:8F:EA:04:D3:8C:1B:CF:A3:27:99:4A:A0:9E:ED:F3:03:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWhZj-oE04wbz6MnmUqgnu3zAzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/855755-c848-47a3-aba6-0876042a6c57/1/l-EO7qc-Tgt0XV2TIheeOAvC_7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/855755-c848-47a3-aba6-0876042a6c57/1/gWhZj-oE04wbz6MnmUqgnu3zAzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.240.0/22
Signature Algorithm: sha256WithRSAEncryption
41:ad:60:de:0d:64:db:15:f0:cd:4c:50:57:09:59:3b:0c:36:
9a:66:f7:89:9f:bf:48:71:52:3a:cf:27:b1:17:08:c2:a6:1c:
84:99:21:13:94:c8:4c:18:1e:70:19:a4:b1:a1:14:3f:a3:6f:
5d:51:a6:06:8e:4a:cd:4e:c5:d7:88:ab:73:e4:80:55:59:a2:
e8:8f:09:a7:a1:b6:3f:5c:26:46:c8:c7:87:36:30:70:54:6c:
e3:87:66:85:bb:6c:c8:2b:cd:54:d5:71:df:69:b0:15:ce:65:
1d:54:a8:57:80:e6:57:17:90:9a:f2:c4:1d:ef:6b:1a:11:7c:
99:2f:1a:1e:7f:ec:98:48:72:76:83:30:94:7d:26:a1:09:9b:
37:73:94:a7:11:88:da:dc:3b:16:ab:7e:55:7d:41:bb:47:90:
16:9f:37:b0:70:b5:6a:24:28:e8:f1:d2:bd:54:de:0d:8b:c6:
57:10:e5:57:cf:ac:4f:ea:43:f4:77:8d:2d:85:11:e8:a0:52:
de:e3:30:58:d4:fd:b1:4d:3c:20:2e:b1:18:ec:a5:67:8e:cc:
a3:91:fb:a5:94:db:92:a7:b6:05:f1:8e:52:5f:19:24:f6:2c:
22:98:07:33:0e:04:26:f0:c2:80:5e:69:3f:54:82:bf:43:1f:
d4:41:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:09 2024 by rpki-client on console-ams.rpki-client.org