Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/1XUc9G2SwzlmdoaauoikjnNXKEg.roa
File: 1XUc9G2SwzlmdoaauoikjnNXKEg.roa (raw, json)
Hash identifier: EKBm3Yal/dRHqHUvPURyOTG57Oe6jB9bPRmbIbURjQQ=
Subject key identifier: D5:75:1C:F4:6D:92:C3:39:66:76:86:9A:BA:88:A4:8E:73:57:28:48
Certificate issuer: /CN=09bdc2359b8ad2f0c60ef774d071d671ced80456
Certificate serial: 018297028858AA6A1D5CC446C26B42B14BF0
Authority key identifier: 09:BD:C2:35:9B:8A:D2:F0:C6:0E:F7:74:D0:71:D6:71:CE:D8:04:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cb3CNZuK0vDGDvd00HHWcc7YBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/1XUc9G2SwzlmdoaauoikjnNXKEg.roa
Signing time: Sat 13 Aug 2022 11:41:41 +0000
ROA not before: Sat 13 Aug 2022 11:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 139.28.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:97:02:88:58:aa:6a:1d:5c:c4:46:c2:6b:42:b1:4b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bdc2359b8ad2f0c60ef774d071d671ced80456
Validity
Not Before: Aug 13 11:41:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5751cf46d92c3396676869aba88a48e73572848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:c3:ac:2e:ed:d5:14:5c:d5:03:b2:a8:22:
ab:7f:47:f2:27:5f:99:40:ee:42:74:b9:43:a1:58:
a7:e6:13:49:ef:95:f6:05:54:cd:e7:bb:b4:02:00:
af:41:de:16:52:35:a9:fc:63:5b:22:42:29:5e:3b:
37:30:2e:0f:34:6a:7f:96:6f:5f:63:ea:82:c9:39:
44:fd:d8:6e:1d:c1:c5:b1:4c:34:35:20:d5:36:be:
03:64:55:45:02:18:88:32:43:fb:b1:f8:41:94:8c:
d5:7d:67:48:c2:67:4b:24:ab:44:31:80:ef:69:d9:
b9:6d:bd:c8:ab:7b:a4:50:5e:c7:81:e1:7f:32:cf:
14:eb:b4:4e:7a:45:ca:55:71:d5:bf:95:3c:58:54:
a8:3c:80:1c:43:ff:4f:db:4c:2c:2c:a4:20:2d:30:
49:29:5c:39:32:59:10:be:8a:ff:bd:13:0b:63:a5:
4a:8e:62:60:5c:7a:4a:ab:1d:16:0e:a1:14:49:51:
10:79:3c:b1:0c:05:3b:1f:a5:e7:5e:99:c5:a6:50:
23:e2:4b:70:0b:dc:ce:8c:26:e9:82:87:cf:eb:3a:
f9:94:ed:5c:71:b3:25:4a:69:fe:04:7d:74:63:7e:
90:fb:60:6b:7a:5a:16:d6:5a:20:e0:18:9b:0e:57:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:1C:F4:6D:92:C3:39:66:76:86:9A:BA:88:A4:8E:73:57:28:48
X509v3 Authority Key Identifier:
keyid:09:BD:C2:35:9B:8A:D2:F0:C6:0E:F7:74:D0:71:D6:71:CE:D8:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cb3CNZuK0vDGDvd00HHWcc7YBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/1XUc9G2SwzlmdoaauoikjnNXKEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/571ef4-af5a-4cbe-8910-d87f32d198b6/1/Cb3CNZuK0vDGDvd00HHWcc7YBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:f7:d5:85:b1:14:b9:e5:e5:e5:ec:ea:d1:31:b4:30:c6:72:
04:f6:00:79:26:93:09:2a:84:03:4e:43:4c:39:7b:ec:29:6b:
3e:a8:19:47:71:4c:f9:47:24:52:b9:9c:b9:00:f0:b8:db:24:
c8:86:e3:be:b6:25:ec:99:0c:8d:c3:5e:df:b6:20:56:38:f0:
1c:2b:31:d6:f8:39:83:77:d5:2b:be:2e:38:67:95:97:d4:42:
8a:cb:17:80:1b:d9:83:df:63:2e:13:8d:56:96:c7:32:6a:61:
84:55:4b:64:91:4b:cc:b3:9d:bc:e1:f9:09:4a:75:99:97:f5:
04:71:d0:34:57:18:9c:c9:5d:d7:6b:66:6e:fa:6d:29:35:2c:
ca:c9:59:02:df:13:e6:34:5b:c5:14:d4:8d:f8:69:82:65:53:
c7:2e:fa:46:0f:3c:93:98:bd:b3:4f:da:b1:e5:60:e1:b6:3b:
30:1b:4c:bc:9a:fc:ad:38:c5:79:a9:62:67:43:4f:8f:7e:e5:
87:83:50:c3:de:1a:f9:0b:76:d6:4a:f9:2d:92:8f:78:75:ce:
68:70:4b:3e:ca:4e:4d:c7:7b:69:12:90:ce:4e:57:d7:01:a1:
94:af:e5:d6:80:f7:58:09:50:d3:28:83:f3:9c:19:c2:76:df:
f2:66:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:26 2024 by rpki-client on console-fra.rpki-client.org