Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/raNOLV5k70PfadnYK1E6jY_D7po.roa
File: raNOLV5k70PfadnYK1E6jY_D7po.roa (raw, json)
Hash identifier: zOIV+hPkQ3Rtx8pHR2zdyO/PJTJO9vNSLezPbghuk04=
Subject key identifier: AD:A3:4E:2D:5E:64:EF:43:DF:69:D9:D8:2B:51:3A:8D:8F:C3:EE:9A
Certificate issuer: /CN=a94c21a1252574ad273cd7803552cf1eb4623958
Certificate serial: 05C28873
Authority key identifier: A9:4C:21:A1:25:25:74:AD:27:3C:D7:80:35:52:CF:1E:B4:62:39:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUwhoSUldK0nPNeANVLPHrRiOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/raNOLV5k70PfadnYK1E6jY_D7po.roa
Signing time: Sat 01 Jan 2022 10:59:25 +0000
ROA not before: Sat 01 Jan 2022 10:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200064
IP address blocks: 139.28.57.0/24 maxlen: 24
139.28.56.0/24 maxlen: 24
139.28.58.0/24 maxlen: 24
139.28.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96634995 (0x5c28873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a94c21a1252574ad273cd7803552cf1eb4623958
Validity
Not Before: Jan 1 10:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ada34e2d5e64ef43df69d9d82b513a8d8fc3ee9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:68:71:2c:d6:8c:53:f5:a6:3a:40:61:50:
f4:16:62:87:36:26:c0:aa:68:ec:a3:d7:80:16:53:
56:04:95:ea:fa:99:56:f4:40:86:bb:39:c2:4a:d0:
7c:05:45:e3:c0:da:d9:52:c7:78:7a:ad:ef:12:a8:
e3:01:14:e5:e9:45:48:27:d1:88:b5:13:bd:e7:45:
9d:a2:47:40:f5:03:b9:cb:35:fc:de:27:33:57:11:
a5:69:c1:a6:29:12:c7:df:8e:05:60:43:29:ef:f5:
9b:29:ea:da:0a:f8:c9:63:07:1e:32:76:70:4f:f5:
e4:8d:16:c0:b1:3f:22:cc:ef:d8:13:5c:1a:c1:70:
31:70:96:a0:d6:7e:35:d5:46:d6:28:1c:b1:ca:df:
73:14:a0:8f:0f:cb:73:0c:84:f7:a2:84:3d:3e:62:
3f:54:26:9c:a1:b6:66:42:0a:80:b7:08:52:11:e7:
78:69:c8:5a:84:5a:3c:18:f7:74:ae:fc:9a:84:5b:
08:62:45:7a:d4:a2:8b:c3:e5:83:51:14:b8:39:57:
e0:db:4d:c3:3d:44:16:d4:d2:b1:a8:30:e5:be:6b:
07:d4:87:43:52:ff:85:9e:46:4d:5f:4b:3d:f3:52:
be:a5:b1:5d:f8:85:8b:61:d6:9d:35:a4:60:b9:f7:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A3:4E:2D:5E:64:EF:43:DF:69:D9:D8:2B:51:3A:8D:8F:C3:EE:9A
X509v3 Authority Key Identifier:
keyid:A9:4C:21:A1:25:25:74:AD:27:3C:D7:80:35:52:CF:1E:B4:62:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUwhoSUldK0nPNeANVLPHrRiOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/raNOLV5k70PfadnYK1E6jY_D7po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5e527-2cc8-4644-ae72-80f3147b8715/1/qUwhoSUldK0nPNeANVLPHrRiOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.56.0/22
Signature Algorithm: sha256WithRSAEncryption
90:0e:fc:5f:d6:e7:c6:c4:0a:48:f9:31:e5:ab:70:39:13:0e:
af:58:f3:1a:03:52:0c:1d:0d:3a:ee:ac:b2:f1:1c:ff:93:69:
79:e0:64:59:fe:5a:c7:df:c3:df:3e:03:e4:86:f1:b6:9e:20:
46:4d:0a:ee:e2:9d:3a:1c:61:82:e2:55:c2:4d:52:ae:31:63:
c4:97:3d:76:10:01:05:04:6b:95:90:77:33:2f:cd:39:fc:d0:
05:1d:49:47:35:09:b8:b3:e7:43:be:d6:39:22:60:c2:c7:18:
c4:41:cf:8e:72:1e:c2:66:1a:31:97:bf:30:fb:d0:6a:23:87:
d2:67:9e:5c:22:5b:d6:72:2d:0d:21:83:48:4d:fe:11:3e:f1:
3a:5f:76:e6:6f:70:57:a8:18:f8:11:e9:2d:f2:57:24:ad:ae:
97:2e:32:52:2a:65:68:fc:d6:08:e2:51:fe:68:58:eb:03:98:
f3:e3:49:be:15:5b:d2:b2:f7:7a:e0:21:40:51:7c:7c:b6:bf:
8c:34:9c:c8:f3:c8:e2:e0:df:6c:23:86:4f:55:9a:58:95:eb:
de:8a:c8:ea:88:94:16:5d:03:86:fa:98:eb:d8:f7:9e:84:0d:
b9:90:49:ca:d4:d8:66:f9:68:d0:a8:0d:8e:8f:d5:a4:7e:94:
16:93:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:19 2024 by rpki-client on console-ams.rpki-client.org