Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/0c-PkOX4PI2_PMLwTC1dYeZHYOM.roa
File: 0c-PkOX4PI2_PMLwTC1dYeZHYOM.roa (raw, json)
Hash identifier: mpjIfuAfztuAHI4ECXOGCCkDK1/wM+GIB/rCNtmDvTA=
Subject key identifier: D1:CF:8F:90:E5:F8:3C:8D:BF:3C:C2:F0:4C:2D:5D:61:E6:47:60:E3
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019421B22A682C7460432970ED4114BEC13A
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/0c-PkOX4PI2_PMLwTC1dYeZHYOM.roa
Signing time: Wed 01 Jan 2025 11:48:31 +0000
ROA not before: Wed 01 Jan 2025 11:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 139.28.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2a:68:2c:74:60:43:29:70:ed:41:14:be:c1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 11:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1cf8f90e5f83c8dbf3cc2f04c2d5d61e64760e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:df:7f:8e:46:b2:6a:47:bc:be:3d:ae:28:
91:a8:6d:4a:b0:ee:57:b3:37:7c:ee:e7:72:60:1f:
87:ce:5e:90:91:4a:b8:a9:da:31:6d:4f:a9:59:01:
81:a6:63:14:d0:38:46:11:4a:89:5f:24:62:a3:82:
23:a7:10:0f:87:de:f2:c9:91:81:74:72:aa:66:0c:
71:f5:78:9e:76:39:3c:8b:a7:9e:22:24:e6:de:ea:
07:60:19:27:64:50:b3:2f:1a:c4:f5:cd:f4:0f:2c:
8b:40:aa:b5:72:ce:22:81:e4:bc:09:6b:9b:97:1a:
88:36:67:32:2e:5b:92:93:8c:ed:30:f7:40:6e:06:
ac:e3:c9:2a:76:01:08:d6:ab:9f:14:36:88:96:00:
fc:d3:3e:c8:d8:a6:d2:eb:19:03:5d:d0:59:da:5b:
21:20:02:eb:ca:d2:1a:00:bb:f7:1d:dc:a3:46:a1:
15:86:4e:df:56:f9:53:ed:69:78:a5:ed:1c:7a:69:
34:4d:69:ae:94:64:58:76:f4:09:84:00:e9:82:89:
2b:ab:d6:4f:5c:7d:9c:4c:67:f1:9e:b6:9f:ab:3e:
09:4a:f7:4c:9d:69:4d:87:c3:fb:38:c3:4b:8d:c9:
d9:67:41:87:7b:bc:94:03:9c:24:66:fd:0c:a0:8f:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:8F:90:E5:F8:3C:8D:BF:3C:C2:F0:4C:2D:5D:61:E6:47:60:E3
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/0c-PkOX4PI2_PMLwTC1dYeZHYOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
60:61:ca:4d:37:d2:d0:63:01:60:8f:11:c3:09:e2:4c:cb:15:
bb:87:94:83:f6:e0:04:37:5e:93:93:6a:53:df:1f:38:62:e5:
8f:3c:82:ac:6a:d8:79:8a:c9:65:cc:73:af:4b:fb:9a:8f:b1:
5c:69:bd:74:46:ea:fe:f9:1f:21:0b:8a:0c:a2:69:cf:c2:d2:
b6:05:6a:43:87:9f:60:6c:99:a5:19:da:24:e5:fa:d3:17:e0:
04:ee:03:5f:e9:02:af:bb:f7:42:ed:d6:92:fb:ba:0c:f2:71:
5c:ef:f1:f1:2e:b5:67:d6:4e:69:8b:a6:c8:27:9f:b4:12:b5:
f9:3f:a1:0b:88:90:b1:c2:47:c9:ff:5e:88:e3:fb:92:c7:a7:
e1:ad:6e:65:6b:f0:49:4f:ea:63:f6:89:b0:5c:ae:2b:ff:1d:
07:65:0f:ca:f7:64:b5:64:55:5a:f6:46:5f:36:26:8a:44:3f:
21:b9:80:6c:be:4a:26:ae:f6:4f:5c:77:ea:e1:8f:1e:f9:e1:
f8:b3:b8:3b:4e:d6:76:39:c0:f5:6e:35:b9:48:0b:28:12:85:
f4:f0:2d:b9:7c:f0:ed:2b:2a:e5:8b:86:02:1c:86:0b:6b:8f:
cb:31:ff:56:98:b6:c3:d2:3d:34:d9:b3:cd:4c:55:39:d1:6f:
f0:ab:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:55 2025 by rpki-client on console.sobornost.net