Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/dXU4DETp8nIDnLG7KEh2JLzmLfs.roa
File: dXU4DETp8nIDnLG7KEh2JLzmLfs.roa (raw, json)
Hash identifier: 6MeBPQNbwHlZMr7MIfbBomU5a0ddmvu6v9rTAYtxlHM=
Subject key identifier: 75:75:38:0C:44:E9:F2:72:03:9C:B1:BB:28:48:76:24:BC:E6:2D:FB
Certificate issuer: /CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Certificate serial: 01942143F87B66F344C5A97D001FD59F631F
Authority key identifier: 42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/dXU4DETp8nIDnLG7KEh2JLzmLfs.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209383
IP address blocks: 139.28.192.0/22 maxlen: 22
139.28.192.0/23 maxlen: 23
139.28.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f8:7b:66:f3:44:c5:a9:7d:00:1f:d5:9f:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4285821bb7a8445efbf433d4c19890a7fa949fa8
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7575380c44e9f272039cb1bb28487624bce62dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:c8:29:ab:18:f8:e0:1c:d1:16:1b:4c:ba:
0a:bf:02:aa:99:c0:83:a6:c0:11:35:2d:a1:ad:ee:
c1:e4:65:d7:35:7c:28:53:99:a9:8c:0b:7d:25:90:
cc:83:69:10:86:14:94:05:fe:9c:53:ab:27:ef:37:
da:eb:8d:28:64:81:22:fd:97:69:19:ef:5f:d4:de:
ab:04:ea:d3:7f:66:f1:79:58:57:cc:4c:ea:7d:31:
4f:de:69:1d:7b:ea:91:3a:ce:10:96:0d:75:a3:ed:
7c:48:5b:1e:3d:0e:c8:c9:65:f5:b1:60:95:28:e1:
09:7d:74:dc:3b:98:61:f2:c6:a4:0e:d4:07:16:8a:
b4:69:e1:1c:5b:b0:ef:f0:78:29:59:b5:07:79:19:
2b:1a:e2:ba:05:bf:ae:ce:41:54:bf:99:d0:9d:af:
bc:6d:ad:22:b9:dd:f1:20:21:70:36:36:e2:95:6b:
11:67:d7:4e:cf:f6:c0:8a:36:56:75:59:1c:8c:1f:
56:ab:6d:6f:4d:0a:5e:1c:e0:e6:f6:05:cf:78:1b:
69:9c:81:b6:f9:14:39:24:73:c1:3b:f2:11:d9:3e:
55:2e:a0:77:ac:5e:80:3c:ab:24:1f:68:1b:0b:2e:
ae:50:f4:75:35:bb:9f:ff:23:41:65:2d:83:80:c8:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:75:38:0C:44:E9:F2:72:03:9C:B1:BB:28:48:76:24:BC:E6:2D:FB
X509v3 Authority Key Identifier:
keyid:42:85:82:1B:B7:A8:44:5E:FB:F4:33:D4:C1:98:90:A7:FA:94:9F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoWCG7eoRF779DPUwZiQp_qUn6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/dXU4DETp8nIDnLG7KEh2JLzmLfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/QoWCG7eoRF779DPUwZiQp_qUn6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.192.0/22
Signature Algorithm: sha256WithRSAEncryption
07:46:5f:63:69:3d:ff:16:73:e2:f7:f4:0b:7c:12:2b:34:ca:
94:0e:4e:cb:ea:71:02:96:d9:b0:b1:db:c1:6c:98:18:42:03:
68:65:e2:3c:0c:1f:9b:a4:5f:35:63:79:26:fb:9b:3e:77:bb:
a4:53:d3:67:d7:96:58:1d:c7:b9:a0:d2:d2:1d:e3:b2:30:5e:
c1:00:94:f7:af:b9:7e:08:b1:0b:85:3d:1c:78:c5:ac:e3:83:
2c:59:5c:06:7e:5c:ac:7f:ec:34:3e:34:59:bd:5a:09:9f:c6:
f1:37:a0:a2:84:fe:21:34:f1:4c:5d:b5:d6:dc:65:dd:c4:62:
4a:88:28:b1:8a:2b:fb:fe:30:69:a0:a0:bf:71:19:7b:77:a2:
33:23:7d:75:f3:e5:d6:38:70:53:b5:c4:a5:06:0b:b6:34:6b:
ae:71:95:6e:e7:8a:8a:f5:92:41:be:a5:ce:c3:82:ea:49:fc:
c3:52:d8:16:53:9b:88:d7:db:42:fa:b4:30:46:6e:10:5a:d9:
fc:cb:e0:56:6c:b3:1a:6e:15:a8:94:ce:9c:f2:7d:8a:e9:86:
cc:3d:c8:48:2d:68:e1:d9:b7:7e:95:03:b3:b1:fd:4c:3f:e1:
60:d0:fc:0e:08:52:5e:1a:dd:a6:38:1c:1b:3a:07:3d:ae:3b:
94:f7:fd:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ/h7ZvNExal9AB/Vn2MfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODU4MjFiYjdhODQ0NWVmYmY0MzNkNGMxOTg5MGE3ZmE5
NDlmYTgwHhcNMjUwMTAxMDk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTc1MzgwYzQ0ZTlmMjcyMDM5Y2IxYmIyODQ4NzYyNGJjZTYyZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykHIKasY+OAc0RYbTLoKvwKqmcCD
psARNS2hre7B5GXXNXwoU5mpjAt9JZDMg2kQhhSUBf6cU6sn7zfa640oZIEi/Zdp
Ge9f1N6rBOrTf2bxeVhXzEzqfTFP3mkde+qROs4Qlg11o+18SFsePQ7IyWX1sWCV
KOEJfXTcO5hh8sakDtQHFoq0aeEcW7Dv8HgpWbUHeRkrGuK6Bb+uzkFUv5nQna+8
ba0iud3xICFwNjbilWsRZ9dOz/bAijZWdVkcjB9Wq21vTQpeHODm9gXPeBtpnIG2
+RQ5JHPBO/IR2T5VLqB3rF6APKskH2gbCy6uUPR1Nbuf/yNBZS2DgMgb/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHV1OAxE6fJyA5yxuyhIdiS85i37MB8GA1UdIwQY
MBaAFEKFghu3qERe+/Qz1MGYkKf6lJ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEvZFhVNERFVHA4bklEbkxHN0tFaDJKTHptTGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvUW9XQ0c3ZW9SRjc3OURQVXdaaVFwX3FVbjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixzAMA0G
CSqGSIb3DQEBCwUAA4IBAQAHRl9jaT3/FnPi9/QLfBIrNMqUDk7L6nECltmwsdvB
bJgYQgNoZeI8DB+bpF81Y3km+5s+d7ukU9Nn15ZYHce5oNLSHeOyMF7BAJT3r7l+
CLELhT0ceMWs44MsWVwGflysf+w0PjRZvVoJn8bxN6CihP4hNPFMXbXW3GXdxGJK
iCixiiv7/jBpoKC/cRl7d6IzI3118+XWOHBTtcSlBgu2NGuucZVu54qK9ZJBvqXO
w4LqSfzDUtgWU5uI19tC+rQwRm4QWtn8y+BWbLMabhWolM6c8n2K6YbMPchILWjh
2bd+lQOzsf1MP+Fg0PwOCFJeGt2mOBwbOgc9rjuU9/3f
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:40:42 2025 by rpki-client