Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/GCgdX1ktIsbF1FrgL5vbfmFe408.roa
File: GCgdX1ktIsbF1FrgL5vbfmFe408.roa (raw, json)
Hash identifier: EJk0AinYqjwXr4pPuFXoCSgvcslgTSkBoVoDS0r4Dyg=
Subject key identifier: 18:28:1D:5F:59:2D:22:C6:C5:D4:5A:E0:2F:9B:DB:7E:61:5E:E3:4F
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 01856D4ADB139CE032D77C5EDA1009C31C59
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/GCgdX1ktIsbF1FrgL5vbfmFe408.roa
Signing time: Sun 01 Jan 2023 12:25:00 +0000
ROA not before: Sun 01 Jan 2023 12:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202314
IP address blocks: 139.28.206.0/24 maxlen: 24
2a0d:1a45:666::/48 maxlen: 48
2a06:1e86::/32 maxlen: 48
2a0d:1a41:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:db:13:9c:e0:32:d7:7c:5e:da:10:09:c3:1c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 12:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18281d5f592d22c6c5d45ae02f9bdb7e615ee34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:83:8c:ba:24:49:de:26:c3:56:84:00:07:
ec:0f:15:45:06:c7:c9:d4:53:2d:1f:87:16:57:6e:
4b:22:e9:ae:8b:7f:9c:ee:22:eb:5c:66:a8:88:91:
d9:28:45:d9:ab:6a:2d:9b:86:01:fc:3a:6d:ac:44:
99:60:40:22:8c:5d:2a:df:4f:57:b5:40:87:81:01:
d4:34:32:0f:f1:6d:3b:98:ef:89:e4:3d:0a:bb:75:
3f:31:7d:19:a6:25:5a:4f:2e:73:bd:84:8b:42:d5:
e2:69:13:f4:a9:98:fd:ba:bc:aa:38:b4:a5:5c:12:
bf:5e:eb:b7:5f:3e:85:fc:5e:f7:08:ea:dc:b3:42:
d0:ef:e7:36:c7:1d:a0:62:b6:f6:73:b0:bd:9e:d8:
aa:6b:8c:4b:a6:bb:41:9b:45:65:2b:34:d8:44:81:
be:75:d3:af:a5:f1:ff:f7:4c:a4:d6:fe:92:fe:0e:
69:66:9b:b3:d6:ad:b4:b8:1a:31:0b:42:7e:e2:7f:
29:ca:43:af:f3:4b:5b:88:e5:58:a1:c3:81:8d:0d:
60:13:4a:30:e6:6b:aa:0a:c1:56:73:a7:1f:7d:cf:
b5:85:72:0f:b6:2b:53:16:45:24:8a:36:71:82:9c:
d5:9c:b6:a1:75:e3:a3:c5:1f:be:07:07:89:6e:c4:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:1D:5F:59:2D:22:C6:C5:D4:5A:E0:2F:9B:DB:7E:61:5E:E3:4F
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/GCgdX1ktIsbF1FrgL5vbfmFe408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.206.0/24
IPv6:
2a06:1e86::/32
2a0d:1a41:cafe::/48
2a0d:1a45:666::/48
Signature Algorithm: sha256WithRSAEncryption
1f:11:9e:61:49:98:67:e7:35:4f:e5:3b:f7:e1:b3:44:46:c0:
f7:9e:38:1b:e7:70:4e:97:d6:36:54:6d:c3:21:0f:c8:2b:c6:
67:64:60:cd:e2:38:87:d9:5f:fe:72:9b:de:80:51:3d:f4:39:
e6:d6:6f:eb:d8:9a:71:40:d6:5d:29:4d:99:d8:01:0d:93:9d:
12:42:9d:f1:85:0e:c6:51:71:1c:40:9a:b0:fc:d0:62:11:71:
c0:c0:8c:d4:f8:17:b9:b8:1e:e7:24:db:de:a1:0b:7f:b1:5b:
01:0f:03:fb:a3:12:f7:8d:79:57:b0:67:81:32:94:e4:f1:8f:
b6:d1:62:26:8c:64:b3:52:a8:6a:a9:50:ca:19:08:79:d9:1c:
15:0a:cf:3d:6d:09:08:18:89:5e:d1:92:e3:a7:30:92:c0:0d:
ed:aa:94:f7:5f:9f:64:da:7a:a6:bd:aa:33:bd:9d:17:a2:ed:
ed:5b:b5:11:de:cc:4e:80:8f:e5:cc:53:a8:f8:9a:c0:18:76:
6e:80:28:e9:64:b1:bd:4c:81:2d:22:ce:1a:d4:75:e3:79:2d:
b8:c9:18:d2:4e:23:14:ec:bf:8e:b1:f5:55:58:a2:11:ea:c8:
ed:41:5d:48:bb:f0:d6:f1:d0:fd:5e:77:a7:cc:f3:65:28:53:
50:d4:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:24 2024 by rpki-client on console-ams.rpki-client.org