Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/L1Ox3_KSb4u7yIdnPwE7b6Q0kR4.roa
File: L1Ox3_KSb4u7yIdnPwE7b6Q0kR4.roa (raw, json)
Hash identifier: n0b95CKiXg9bk0ZX0mlSmA+/DSxqv5cG0rC0f7JpXo8=
Subject key identifier: 2F:53:B1:DF:F2:92:6F:8B:BB:C8:87:67:3F:01:3B:6F:A4:34:91:1E
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 09E7B2EE
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/L1Ox3_KSb4u7yIdnPwE7b6Q0kR4.roa
Signing time: Sat 01 Jan 2022 04:56:14 +0000
ROA not before: Sat 01 Jan 2022 04:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202314
IP address blocks: 139.28.206.0/24 maxlen: 24
2a0d:1a45:666::/48 maxlen: 48
2a06:1e86::/32 maxlen: 48
2a0d:1a41:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166179566 (0x9e7b2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 04:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f53b1dff2926f8bbbc887673f013b6fa434911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:b3:4d:90:2d:39:2b:c9:4f:50:e6:a9:42:
9e:ec:82:96:12:79:e3:d5:21:79:3a:d4:93:8b:9f:
3f:c4:1c:c0:35:38:99:6c:86:04:75:27:e9:28:13:
db:6d:90:9e:ee:fe:95:a7:b1:52:25:62:a9:1b:ec:
c2:b3:99:15:95:55:74:4b:fe:60:a2:87:69:5a:5b:
61:50:03:c0:31:ee:f4:e5:08:b2:df:3c:63:4c:7e:
fb:47:b2:0a:4e:ba:f0:9a:53:f3:14:75:fd:87:ea:
93:b8:ea:ee:a5:01:2c:28:7c:dd:15:1f:86:06:ed:
08:bd:71:0c:5c:e1:85:d1:7c:6b:85:95:18:1c:34:
ad:b5:cb:53:84:b4:e3:5b:aa:5a:eb:6e:a6:ee:51:
b2:5b:6e:a1:35:60:79:08:e5:58:8a:6d:65:c6:15:
9c:1b:3f:ac:26:5f:90:f8:56:89:41:cd:a0:b8:33:
16:13:88:0a:d0:20:a0:73:3b:39:eb:f3:48:12:63:
f0:57:54:ff:bc:8c:12:ce:79:5d:3f:36:ac:37:e3:
05:15:d1:9d:c3:a0:7d:97:3c:ca:32:78:16:d1:b3:
f8:9a:1e:40:c5:46:07:5e:24:58:f1:5e:28:be:71:
9c:01:47:85:68:fd:9a:46:fa:b7:e7:47:f5:65:a7:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:B1:DF:F2:92:6F:8B:BB:C8:87:67:3F:01:3B:6F:A4:34:91:1E
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/L1Ox3_KSb4u7yIdnPwE7b6Q0kR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.206.0/24
IPv6:
2a06:1e86::/32
2a0d:1a41:cafe::/48
2a0d:1a45:666::/48
Signature Algorithm: sha256WithRSAEncryption
52:1a:a4:90:9a:aa:f0:a3:70:71:b9:2c:43:8e:b2:a0:9e:2d:
ac:ba:cb:87:8c:4a:74:78:58:ff:a6:0f:8f:66:ed:ed:7e:77:
c2:5b:17:ff:b2:b6:cd:0f:5e:31:f0:ec:6c:de:52:b8:6d:80:
8e:ae:fb:e3:a6:19:54:e8:4b:e4:c3:bd:4d:19:e5:19:e0:ae:
71:cf:f5:1a:3d:15:49:f9:82:19:2d:0c:31:cc:10:68:a6:99:
da:2e:a9:17:a6:52:ef:db:60:2e:90:35:ec:9b:5a:f0:22:0f:
d8:35:e1:99:f4:3e:93:b9:20:1d:fe:ca:73:08:d0:49:41:76:
aa:cf:25:9c:7b:12:cf:50:ee:d8:c2:6b:60:b9:7d:36:bc:be:
55:25:98:ec:53:3b:d8:49:54:87:b2:bd:e2:a9:af:23:22:5f:
bc:c3:16:9d:72:d9:1f:3c:be:aa:cf:1f:de:6a:2b:5a:fa:8e:
1b:cd:23:91:60:4b:f9:2a:95:d7:79:e0:c5:04:38:63:1f:3a:
cd:52:13:12:69:07:7b:f0:49:82:b5:1d:05:ca:1d:30:b9:c3:
52:38:0c:ec:9e:d6:b9:59:8b:8e:b8:3a:6e:c3:df:b8:d9:e2:
7e:3d:4e:c7:9e:ef:f6:ce:9a:42:c3:c3:a3:dc:eb:c0:45:71:
06:3d:5c:03
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIECeey7jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2M4ZDhiYmYwNTc5N2E3NWE0OWM1ZDcwZjU5NzFlY2RlYzZkZDkzMB4XDTIyMDEw
MTA0NTYxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmY1M2IxZGZmMjky
NmY4YmJiYzg4NzY3M2YwMTNiNmZhNDM0OTExZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMk+s02QLTkryU9Q5qlCnuyClhJ549UheTrUk4ufP8QcwDU4
mWyGBHUn6SgT222Qnu7+laexUiViqRvswrOZFZVVdEv+YKKHaVpbYVADwDHu9OUI
st88Y0x++0eyCk668JpT8xR1/Yfqk7jq7qUBLCh83RUfhgbtCL1xDFzhhdF8a4WV
GBw0rbXLU4S041uqWutupu5RsltuoTVgeQjlWIptZcYVnBs/rCZfkPhWiUHNoLgz
FhOICtAgoHM7OevzSBJj8FdU/7yMEs55XT82rDfjBRXRncOgfZc8yjJ4FtGz+Joe
QMVGB14kWPFeKL5xnAFHhWj9mkb6t+dH9WWnPA8CAwEAAaOCAiowggImMB0GA1Ud
DgQWBBQvU7Hf8pJvi7vIh2c/ATtvpDSRHjAfBgNVHSMEGDAWgBR3yNi78FeXp1pJ
xdcPWXHs3sbdkzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Q4all1X0JYbDZkYVNjWFhEMWx4N043RzNaTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvNDVhYmRlLTViNDQtNDcxYS05M2Q5LTUzNDVmN2U3NDA4My8x
L0wxT3gzX0tTYjR1N3lJZG5Qd0U3YjZRMGtSNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
NDVhYmRlLTViNDQtNDcxYS05M2Q5LTUzNDVmN2U3NDA4My8xL2Q4all1X0JYbDZk
YVNjWFhEMWx4N043RzNaTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wDAQCAAEwBgMEAIsczjAfBAIAAjAZAwUAKgYehgMH
ACoNGkHK/gMHACoNGkUGZjANBgkqhkiG9w0BAQsFAAOCAQEAUhqkkJqq8KNwcbks
Q46yoJ4trLrLh4xKdHhY/6YPj2bt7X53wlsX/7K2zQ9eMfDsbN5SuG2Ajq7746YZ
VOhL5MO9TRnlGeCucc/1Gj0VSfmCGS0MMcwQaKaZ2i6pF6ZS79tgLpA17Jta8CIP
2DXhmfQ+k7kgHf7KcwjQSUF2qs8lnHsSz1Du2MJrYLl9Nry+VSWY7FM72ElUh7K9
4qmvIyJfvMMWnXLZHzy+qs8f3morWvqOG80jkWBL+SqV13ngxQQ4Yx86zVITEmkH
e/BJgrUdBcodMLnDUjgM7J7WuVmLjrg6bsPfuNnifj1Ox57v9s6aQsPDo9zrwEVx
Bj1cAw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:56 2025 by rpki-client