Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/acAq7MIcmx18UIHmz-jlBD_t3Ys.roa
File: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (raw, json)
Hash identifier: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=
Subject key identifier: 69:C0:2A:EC:C2:1C:9B:1D:7C:50:81:E6:CF:E8:E5:04:3F:ED:DD:8B
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 0194228E289C66E8963FB918CB3ED5B5E1C8
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/acAq7MIcmx18UIHmz-jlBD_t3Ys.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208017
IP address blocks: 139.28.156.0/22 maxlen: 24
139.28.156.0/24 maxlen: 24
139.28.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:28:9c:66:e8:96:3f:b9:18:cb:3e:d5:b5:e1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c02aecc21c9b1d7c5081e6cfe8e5043feddd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:a5:0f:5e:7d:8b:e9:0e:d1:22:0e:1e:94:
1d:90:3c:ae:71:b7:8b:9a:ae:b4:f1:76:d0:59:78:
60:60:d2:5d:40:d8:de:40:1d:6f:9d:a5:53:93:70:
38:9f:c5:d4:e6:d4:50:f2:b1:8f:23:31:e5:32:9b:
81:ad:bf:5b:ff:1b:7e:cf:d9:76:c9:25:3a:43:a5:
fc:b8:ba:06:ee:23:6b:70:53:e2:37:45:bc:88:39:
39:d5:e3:8a:6c:25:d8:5b:67:b0:38:12:fb:25:53:
b9:50:84:25:28:54:f9:85:3a:25:35:c8:1c:63:d6:
34:c6:cd:c3:04:a0:e7:73:aa:94:75:82:32:a1:96:
2d:6f:84:79:d3:aa:e0:82:ea:ed:60:41:2c:35:b3:
90:a4:9f:30:b8:05:ab:4b:b8:62:38:4d:f5:e1:37:
d4:1a:c8:bb:5b:74:a3:84:42:e8:12:45:98:3c:c6:
f0:8b:98:f5:89:fc:ea:c0:d0:e9:ad:25:2b:bf:f7:
b6:9c:4c:80:21:7d:80:c4:aa:d9:ac:4c:04:c1:aa:
b4:ea:9f:b0:3e:ad:45:c4:f1:bc:2c:37:21:c1:0f:
bc:c4:df:b2:da:e5:c4:6d:79:a8:7a:a6:92:05:bc:
ff:d0:6c:0e:cd:99:df:71:7a:11:2b:e4:b0:7f:23:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:2A:EC:C2:1C:9B:1D:7C:50:81:E6:CF:E8:E5:04:3F:ED:DD:8B
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/acAq7MIcmx18UIHmz-jlBD_t3Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.156.0/22
Signature Algorithm: sha256WithRSAEncryption
98:89:d3:69:06:de:83:dc:73:4e:62:c2:44:12:a5:79:84:93:
56:84:81:d8:b8:bd:f2:59:6d:38:73:06:88:d7:d8:57:b6:b3:
90:f8:0a:fc:e6:07:09:20:94:84:29:b4:8c:cd:9b:5f:b4:b0:
19:44:2a:17:e2:e5:2c:e9:1d:e3:e7:b4:42:61:01:ee:aa:92:
6e:f1:94:81:44:68:f8:dd:c8:4d:6c:59:2a:1f:2a:7b:ce:31:
84:ef:17:35:7d:e0:fe:7e:59:a2:b1:9d:f2:90:f7:0b:03:b5:
f5:30:44:18:49:d2:83:53:b6:f5:20:f7:af:33:2d:04:ae:8a:
5b:86:2b:53:52:e3:dd:a4:2c:53:17:a1:03:ae:01:1a:fd:5e:
6f:5c:3b:ea:9d:df:86:66:ae:25:af:b2:a3:d7:88:cb:22:11:
39:3c:2d:b0:fa:e3:21:d1:eb:00:27:d7:d7:ff:ea:66:26:a5:
73:41:9d:c1:a6:70:80:3a:3f:5a:89:0a:e9:5e:8a:ab:6c:8a:
f6:81:de:e2:77:d0:2c:5e:da:f9:ac:ab:95:2d:91:ae:d2:4f:
16:27:08:53:b6:dc:d5:76:fe:92:25:75:99:d1:a9:6b:60:65:
b5:b6:4b:42:8c:b9:2f:5b:8a:66:ba:1f:92:6c:8c:19:29:db:
ca:52:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:06:16 2025 by rpki-client