Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/n-YM6fE3OmZBsMjPIF83zZk61ZU.roa
File: n-YM6fE3OmZBsMjPIF83zZk61ZU.roa (raw, json)
Hash identifier: 90BEOelpws+Uh9qCnv3CvmMQXam5950h27otytyxqII=
Subject key identifier: 9F:E6:0C:E9:F1:37:3A:66:41:B0:C8:CF:20:5F:37:CD:99:3A:D5:95
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 0195E395F26B7A80675D3F687F232556F079
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/n-YM6fE3OmZBsMjPIF83zZk61ZU.roa
Signing time: Sat 29 Mar 2025 20:26:49 +0000
ROA not before: Sat 29 Mar 2025 20:26:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 139.28.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e3:95:f2:6b:7a:80:67:5d:3f:68:7f:23:25:56:f0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Mar 29 20:26:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fe60ce9f1373a6641b0c8cf205f37cd993ad595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:a0:50:11:ca:af:58:6d:e0:8c:fb:17:53:
18:bf:ad:63:17:16:36:34:d4:29:3a:c9:d2:f5:3a:
14:e3:f4:99:0f:37:fb:4f:3a:48:32:6d:6e:e4:d8:
e3:0c:2c:fc:80:a7:86:48:67:4b:cc:78:95:cd:61:
73:e3:ad:6b:0f:01:f8:6a:45:d3:ea:96:00:a8:54:
3c:68:9d:ab:72:12:a5:c1:7e:fe:f3:5c:87:00:58:
28:a6:74:c9:70:02:5c:f6:31:4a:ad:d6:4a:8e:eb:
b8:1a:7c:a1:26:0b:4b:55:c7:e7:a0:97:10:cf:b9:
5d:3b:a4:7a:82:2e:c0:7c:73:74:da:72:8c:e0:64:
ab:71:dd:22:ff:c0:95:66:ba:e0:c3:4a:d9:e8:3f:
64:0c:a6:5b:ab:91:95:ae:57:3a:73:4d:e4:8e:20:
0f:7a:2b:ce:6e:a6:1a:99:03:77:41:14:34:29:0a:
30:c2:3e:63:88:87:8b:90:4f:c2:84:6f:f0:04:c8:
d3:94:4f:03:92:5f:fc:31:21:3c:3b:72:53:1e:a4:
81:72:4b:c6:ef:80:cd:56:17:58:ff:91:fa:f3:4d:
b5:0b:99:7c:d3:72:21:27:90:85:ce:f3:b7:85:b0:
a1:f5:1b:f7:cf:ee:cf:e4:d9:52:44:cb:e8:95:bb:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E6:0C:E9:F1:37:3A:66:41:B0:C8:CF:20:5F:37:CD:99:3A:D5:95
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/n-YM6fE3OmZBsMjPIF83zZk61ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:c5:02:b5:7d:5c:7f:47:72:f5:23:86:3d:db:55:ed:93:6f:
8f:ff:92:0a:f3:00:c1:d5:04:73:b9:10:fb:bf:e7:34:cd:f1:
47:3a:54:06:5b:3e:ec:89:c3:24:1c:cd:a6:0a:a8:79:61:e6:
d4:f3:8e:2a:2a:58:3b:7b:d4:0d:d7:63:78:78:ab:d7:d5:27:
3c:4f:c0:a4:f2:ef:88:62:32:49:31:52:48:b5:35:1f:e5:c6:
fd:90:bf:6a:d8:74:02:fd:60:e2:c5:ea:70:a7:88:3b:4a:66:
00:55:38:6b:e9:64:ec:30:f3:7d:32:40:f8:0e:17:55:43:09:
b3:0a:68:9a:35:fd:ed:57:50:32:8c:c1:92:c7:04:df:06:e2:
08:2f:88:30:a0:ca:90:b7:aa:0b:95:65:c2:bc:50:ad:a5:8e:
f0:31:99:5b:ea:85:d3:1b:a4:88:fc:a7:5a:34:07:97:00:f2:
b7:60:0e:19:09:89:f6:81:3b:ae:0b:8b:d3:73:6c:97:72:2a:
5c:99:5e:3e:43:b8:20:f7:5c:17:3e:f2:1e:00:fe:17:b6:a5:
4f:17:b0:0e:63:1d:5c:96:40:02:b9:d7:39:91:31:2b:2f:fb:
68:64:2a:63:5f:41:e1:50:ef:6d:d6:0e:c6:b1:62:77:ea:5a:
14:06:dd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:55:14 2025 by rpki-client on console.sobornost.net