Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/TneHvTMLzkj46U2xVqb5W4mUK-A.roa
File: TneHvTMLzkj46U2xVqb5W4mUK-A.roa (raw, json)
Hash identifier: 73AGG7e/cMI/2/R2Y/945GlKJSLdYTmwicPSZSKOHis=
Subject key identifier: 4E:77:87:BD:33:0B:CE:48:F8:E9:4D:B1:56:A6:F9:5B:89:94:2B:E0
Certificate issuer: /CN=a94c21a1252574ad273cd7803552cf1eb4623958
Certificate serial: 06EA8FC2
Authority key identifier: A9:4C:21:A1:25:25:74:AD:27:3C:D7:80:35:52:CF:1E:B4:62:39:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUwhoSUldK0nPNeANVLPHrRiOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/TneHvTMLzkj46U2xVqb5W4mUK-A.roa
Signing time: Tue 10 May 2022 06:48:15 +0000
ROA not before: Tue 10 May 2022 06:48:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200064
IP address blocks: 139.28.57.0/24 maxlen: 24
139.28.56.0/22 maxlen: 24
139.28.58.0/24 maxlen: 24
139.28.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116035522 (0x6ea8fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a94c21a1252574ad273cd7803552cf1eb4623958
Validity
Not Before: May 10 06:48:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e7787bd330bce48f8e94db156a6f95b89942be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:74:4d:0b:1f:8f:df:c7:19:20:66:df:da:
74:28:32:53:3c:d9:9f:f6:9f:9f:93:f6:d0:16:69:
c8:5a:8c:24:de:88:f5:59:69:1e:0a:1b:a6:7b:2a:
fa:1a:15:38:72:2a:7f:98:4a:6c:57:22:16:bb:cb:
af:e3:e5:58:6f:02:f4:75:82:14:5e:81:38:b8:2e:
68:6d:aa:fe:5e:53:4a:9e:df:35:30:5b:e0:fd:31:
06:34:c4:a2:65:99:91:1b:09:fc:7a:e4:b3:37:65:
ce:d5:08:93:39:85:7f:61:15:11:ce:32:b6:67:df:
04:68:60:cc:e9:49:c5:b3:a7:36:c7:cc:71:13:be:
9a:29:83:ec:90:f6:96:47:11:13:28:dd:b8:90:6d:
c1:fe:6f:5b:57:45:dd:cf:76:f6:0a:c4:39:a2:38:
3e:d6:08:8d:eb:5e:06:94:cf:e0:86:66:61:c5:66:
95:36:78:3a:e3:a2:0e:b1:5d:b7:81:87:27:e5:fd:
d5:da:20:e2:0e:0c:26:e7:04:21:0e:52:af:55:aa:
83:26:88:d2:1c:2d:db:bf:8d:de:d3:b0:c3:19:0f:
7b:00:60:12:9d:df:2c:80:bd:4d:23:03:af:0f:fa:
96:c8:92:b3:ac:7f:74:5c:5e:3e:76:0a:e4:d4:fc:
42:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:77:87:BD:33:0B:CE:48:F8:E9:4D:B1:56:A6:F9:5B:89:94:2B:E0
X509v3 Authority Key Identifier:
keyid:A9:4C:21:A1:25:25:74:AD:27:3C:D7:80:35:52:CF:1E:B4:62:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUwhoSUldK0nPNeANVLPHrRiOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/TneHvTMLzkj46U2xVqb5W4mUK-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/qUwhoSUldK0nPNeANVLPHrRiOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.56.0/22
Signature Algorithm: sha256WithRSAEncryption
81:d0:c8:db:4f:63:03:d7:dd:f3:c2:be:c2:bb:c8:46:1b:bd:
64:bc:98:52:2c:81:0e:1b:65:58:5d:fa:46:8c:50:f8:d6:60:
cb:d1:a5:8d:3a:b9:05:37:ab:df:e7:31:c6:e8:89:8b:63:9c:
36:d8:84:ac:24:87:75:4c:5d:19:6e:7a:87:4e:79:9d:52:6e:
6e:74:a1:bb:2c:39:7c:59:87:0a:bb:d0:6a:a7:41:de:4d:e7:
5b:ca:05:98:2c:77:6e:78:19:1f:72:bc:5c:8b:81:66:d2:ac:
cc:5e:b0:3a:2c:56:b8:2d:2b:06:e1:bf:9a:7d:a7:92:7d:e0:
64:80:89:21:dc:9b:4c:aa:a7:c8:cb:8b:dc:75:72:9a:d3:77:
b9:90:de:8e:b8:08:91:88:5b:da:fd:38:af:ad:b2:a0:10:82:
c2:c3:0b:85:04:72:15:f9:7a:7e:16:48:db:43:57:04:4c:ff:
de:6b:bd:a7:e8:44:7a:3a:a3:cb:0e:f0:ac:5c:67:d2:0e:c5:
29:4b:5b:61:a1:42:5e:04:76:96:94:c3:c7:74:1c:3c:ac:2f:
32:bf:07:fc:f4:8f:0c:3a:a3:4e:d3:7c:80:b6:46:0c:ac:63:
09:b4:cb:1c:47:a3:bc:80:15:03:e9:9c:ff:4f:67:99:b5:cc:
ee:8c:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:19 2024 by rpki-client on console-ams.rpki-client.org