Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/Uc_eHHiK2oso3GTkmMSET3r6doI.roa
File: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (raw, json)
Hash identifier: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=
Subject key identifier: 51:CF:DE:1C:78:8A:DA:8B:28:DC:64:E4:98:C4:84:4F:7A:FA:76:82
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 0194228E27EA73CE16F0132AE4EC868D467F
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/Uc_eHHiK2oso3GTkmMSET3r6doI.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56911
IP address blocks: 139.28.157.0/24 maxlen: 24
139.28.158.0/24 maxlen: 24
139.28.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:27:ea:73:ce:16:f0:13:2a:e4:ec:86:8d:46:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51cfde1c788ada8b28dc64e498c4844f7afa7682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:f2:79:ea:6c:6c:e3:07:b9:1c:9d:29:c5:
ee:4a:2f:bb:ca:0e:76:f1:86:92:04:c2:73:3d:c9:
7b:a5:06:47:cb:32:f7:b8:3e:23:0d:3d:82:4b:2b:
e1:d9:37:71:35:6c:73:f6:03:4b:e5:8a:ab:ae:4f:
98:44:44:02:0f:63:a9:7d:c4:a2:b5:dc:f4:f9:a6:
c4:5c:9e:f2:6f:f8:34:75:14:cd:25:b6:65:5a:87:
c7:66:7d:35:1c:36:b1:22:c6:57:a2:6d:cf:d1:23:
0e:88:7d:e6:c9:4c:19:3e:26:ae:e0:c3:ec:14:4c:
98:07:97:08:6b:51:53:60:d3:6b:93:a7:d1:0a:4b:
a8:8b:85:84:b5:c4:ce:c3:d2:1f:52:ad:e5:10:c8:
7f:58:7e:f1:a2:49:db:75:4f:6d:2d:67:79:a1:7a:
3c:5b:25:3b:27:34:e7:f2:80:dd:9d:44:e8:08:d9:
3d:29:f1:22:d1:78:3c:fe:14:7b:55:cb:4f:b3:99:
23:10:93:12:51:61:53:71:a3:ef:c5:b1:f2:24:e0:
ca:98:32:9f:a3:89:40:7f:41:83:d0:a6:f4:b4:d0:
64:01:d5:f1:0c:9d:7a:0d:5e:f6:67:b0:4e:94:2c:
7d:a0:e2:e5:b5:95:43:25:f6:06:09:39:95:ce:be:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CF:DE:1C:78:8A:DA:8B:28:DC:64:E4:98:C4:84:4F:7A:FA:76:82
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/Uc_eHHiK2oso3GTkmMSET3r6doI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.157.0-139.28.159.255
Signature Algorithm: sha256WithRSAEncryption
28:e9:c4:3a:75:cb:02:33:96:04:d6:88:65:61:89:9b:f9:29:
a5:8c:2d:43:b0:c6:c5:9a:4b:4f:0b:57:28:f7:c2:44:39:19:
52:32:6f:f8:b7:97:5d:a5:78:44:b2:e8:7d:37:ec:93:4a:b1:
3c:0f:66:e8:05:5e:27:35:66:40:67:d8:1b:4d:d7:06:27:fc:
6d:23:86:66:1e:b2:48:42:de:61:47:cc:ba:fb:fe:34:8b:72:
22:2b:e0:ee:30:f9:91:ce:09:57:07:f7:b6:b1:c2:a8:64:2d:
e9:81:7a:de:96:75:08:a5:01:f5:c5:f2:22:5d:3f:16:2f:a2:
10:b1:ee:70:33:94:8d:65:92:05:96:01:53:1f:f9:05:c2:84:
0f:d0:09:57:e3:60:2a:97:a4:53:b2:d7:4a:27:4c:5a:2e:db:
de:5d:c9:99:08:a7:d6:f5:ba:e1:ac:10:db:92:21:da:15:4b:
cc:c8:a7:17:25:1f:35:e4:3e:d5:7f:e3:84:61:0c:2a:0b:5e:
53:7e:cc:09:52:79:81:99:78:6a:a0:e2:27:49:d1:36:22:5a:
87:18:6e:28:be:4f:d2:64:12:98:e6:cd:62:2c:21:fc:02:ff:
dd:d5:6e:d4:5f:8c:17:48:99:95:15:98:ab:9c:63:62:9f:c6:
5b:7a:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:08 2025 by rpki-client