Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/oqyYLuOlCc36aoHeS4_qiBtgKVI.roa
File: oqyYLuOlCc36aoHeS4_qiBtgKVI.roa (raw, json)
Hash identifier: C8FOkrg5pWpoJiNwaxojtRH1CzmmcfDSMSbFv8I6GeU=
Subject key identifier: A2:AC:98:2E:E3:A5:09:CD:FA:6A:81:DE:4B:8F:EA:88:1B:60:29:52
Certificate issuer: /CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Certificate serial: 01857295A24F08A695DE53019F4D8A54BACB
Authority key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/oqyYLuOlCc36aoHeS4_qiBtgKVI.roa
Signing time: Mon 02 Jan 2023 13:04:47 +0000
ROA not before: Mon 02 Jan 2023 13:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 139.28.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:a2:4f:08:a6:95:de:53:01:9f:4d:8a:54:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Validity
Not Before: Jan 2 13:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2ac982ee3a509cdfa6a81de4b8fea881b602952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:8b:4f:f2:43:9f:e9:c0:2d:6f:73:bc:1f:
40:8b:50:67:9c:c9:a4:51:17:48:93:47:8f:b3:50:
20:f3:23:b5:63:5c:ad:ab:6d:72:ef:e8:9c:5b:0d:
43:74:e4:6a:bc:07:a4:17:61:0a:1e:eb:f9:3b:85:
42:27:7b:d5:93:b0:e6:d3:1b:f6:85:cd:dd:df:b1:
cc:61:4a:f2:54:3c:1e:ca:8c:05:3b:97:a6:57:4d:
58:90:72:56:9f:ae:63:a1:31:40:be:f9:63:9c:50:
8b:53:86:a2:9f:aa:36:c9:e2:44:e4:39:96:86:8a:
61:72:5b:a5:fd:7a:f2:08:c8:7f:f6:2e:de:d7:18:
cc:c3:fc:1a:b5:e9:f4:bc:63:28:10:bb:14:89:f6:
dc:9f:3d:2d:70:68:27:bd:c8:91:27:8d:49:71:36:
6b:cf:4f:22:0a:31:41:4c:87:6e:0a:32:9e:3b:d2:
22:30:4c:3a:ce:bf:89:00:80:1c:c6:1c:dc:58:ad:
3f:d8:75:88:7d:eb:d9:da:e7:18:77:43:43:ef:52:
84:ee:40:fc:03:84:bf:3c:1b:c8:bf:e0:87:56:81:
4b:d1:67:fa:29:df:d6:82:73:ce:c5:e5:04:83:b9:
d5:d1:2b:2e:45:15:82:c1:2c:3a:85:f8:3e:d8:ff:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:98:2E:E3:A5:09:CD:FA:6A:81:DE:4B:8F:EA:88:1B:60:29:52
X509v3 Authority Key Identifier:
keyid:3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/oqyYLuOlCc36aoHeS4_qiBtgKVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.24.0/24
Signature Algorithm: sha256WithRSAEncryption
80:73:8a:38:08:83:6f:b2:1d:24:28:89:ea:70:9b:ca:96:74:
f7:4a:fc:77:77:5a:a1:79:4d:39:9a:1c:fd:8d:e7:27:e5:97:
fb:72:e5:39:27:b1:08:95:a8:c4:73:4f:c2:f3:26:cd:d4:25:
5e:e0:99:9b:57:ac:fc:4d:b6:11:f1:f1:d3:7d:23:49:bb:1e:
78:02:ac:52:40:6b:bb:8c:df:e6:89:1f:d4:59:d6:59:d8:e8:
a3:84:f0:93:34:bc:3c:7d:6a:a8:9c:d2:5c:2e:ed:4f:83:29:
90:3e:a1:ed:25:3b:d1:85:b2:13:72:67:7d:2c:d8:2e:11:a9:
64:b1:c5:f5:eb:81:0b:5f:99:68:07:8e:e0:03:b5:83:cf:57:
24:c4:de:62:3e:d8:89:56:5f:d8:27:22:b0:a6:be:d0:0c:d4:
09:32:5d:52:ec:06:3a:45:74:b1:56:e0:08:81:25:b8:71:0a:
7b:f7:f2:66:1c:79:f1:8b:41:a2:ec:3b:d7:b9:2b:42:86:89:
e5:13:13:9d:3e:66:5b:bd:d0:2e:ad:45:61:77:84:58:7e:67:
fc:07:51:51:56:20:47:62:9b:8b:2e:65:e6:f7:f9:3f:54:0c:
e9:3d:29:aa:e0:da:57:1d:f6:b2:3b:2f:1b:72:1c:6b:5e:0b:
06:5c:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:45 2023 by rpki-client on console.sobornost.net