Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/030d31-e442-43dd-aad6-64e56000ce1f/1/qsJkYdpjRne4cPkiEJ2MZ3FA4UI.roa
File: qsJkYdpjRne4cPkiEJ2MZ3FA4UI.roa (raw, json)
Hash identifier: wn2FzB4fopvSVB1Z7MEemNHrfz38kX1leFrlXea0eZc=
Subject key identifier: AA:C2:64:61:DA:63:46:77:B8:70:F9:22:10:9D:8C:67:71:40:E1:42
Certificate issuer: /CN=9c2e943071a38449e97847c316ba6194fc22a495
Certificate serial: 04E61B3A
Authority key identifier: 9C:2E:94:30:71:A3:84:49:E9:78:47:C3:16:BA:61:94:FC:22:A4:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nC6UMHGjhEnpeEfDFrphlPwipJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/030d31-e442-43dd-aad6-64e56000ce1f/1/qsJkYdpjRne4cPkiEJ2MZ3FA4UI.roa
Signing time: Sat 01 Jan 2022 06:55:28 +0000
ROA not before: Sat 01 Jan 2022 06:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198047
IP address blocks: 193.35.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82189114 (0x4e61b3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2e943071a38449e97847c316ba6194fc22a495
Validity
Not Before: Jan 1 06:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aac26461da634677b870f922109d8c677140e142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:94:e7:aa:91:13:24:d8:10:b4:e4:f8:4e:
f2:76:bd:02:b4:1a:17:0f:91:c3:6e:a3:51:6c:5d:
fe:3b:3a:30:1d:6f:5b:4d:af:e6:dc:c8:10:50:e6:
19:23:fb:e9:91:52:6c:a5:f7:4a:94:04:b7:6d:da:
28:d5:1e:ff:1a:5a:80:82:62:81:de:89:f3:47:4b:
9c:49:a7:c3:c3:e3:a5:9b:f8:3a:7b:c3:92:89:f1:
fc:49:39:0c:e3:09:c9:67:2d:a9:29:56:59:e7:ed:
be:bb:91:e5:94:86:b6:38:ed:0f:85:02:05:3a:e0:
13:a0:1f:42:33:f5:8b:17:66:14:13:1c:2b:80:e3:
86:ec:71:75:cd:22:9f:ed:b2:09:5c:c5:c7:15:3f:
b4:02:57:1d:95:42:0d:b3:24:31:1a:62:fe:1b:01:
8f:7f:5d:29:fa:c2:99:e1:16:3f:35:92:a8:0d:75:
30:34:83:0b:f8:b2:b2:3d:3e:2d:57:01:4a:89:80:
b4:20:ba:56:58:c4:ea:fb:14:6c:f6:c5:f7:1a:20:
e8:a9:db:42:60:e1:42:6e:04:63:a3:23:24:c0:80:
fd:dc:da:5e:49:3b:b7:64:82:dc:3c:e6:e8:e0:0b:
9f:31:fc:7b:07:1a:ad:63:c9:88:21:03:b8:c7:46:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:64:61:DA:63:46:77:B8:70:F9:22:10:9D:8C:67:71:40:E1:42
X509v3 Authority Key Identifier:
keyid:9C:2E:94:30:71:A3:84:49:E9:78:47:C3:16:BA:61:94:FC:22:A4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nC6UMHGjhEnpeEfDFrphlPwipJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/030d31-e442-43dd-aad6-64e56000ce1f/1/qsJkYdpjRne4cPkiEJ2MZ3FA4UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/030d31-e442-43dd-aad6-64e56000ce1f/1/nC6UMHGjhEnpeEfDFrphlPwipJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.157.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c7:8c:c5:a8:f5:f3:f3:b2:ab:67:85:fe:1d:2e:4c:a0:c2:
5a:36:6f:b5:9e:a6:bf:ff:f2:f1:2f:fc:19:6e:85:18:42:9d:
67:d1:08:4a:6a:7d:14:f1:a6:53:04:26:3a:f2:0b:4a:72:22:
d2:3b:cf:c7:20:ab:6b:70:2a:60:0e:8e:44:2b:6a:ff:21:48:
2f:50:e4:25:28:40:c2:b1:6b:86:93:5f:25:87:19:ab:df:c0:
79:3b:80:75:cf:ab:6c:a9:03:a6:6b:43:e8:66:c9:f0:cf:df:
d2:6a:29:a1:31:6b:85:86:c5:03:a3:fc:f7:b2:12:8d:6e:12:
7b:26:9c:7b:cb:38:d0:ce:bc:79:56:98:b6:eb:bd:b7:11:df:
1c:0d:5b:36:27:1c:46:51:4d:06:22:33:8a:7c:bc:da:aa:42:
d1:ca:cc:f4:0c:c0:71:38:2b:14:8c:fb:95:0c:1e:fc:a3:49:
e1:c7:46:d2:78:68:a5:c6:c8:1d:02:34:fa:6c:0f:59:70:e4:
cd:31:6d:72:11:1d:52:4c:69:08:08:19:f9:f2:e5:dc:93:38:
0a:cd:6f:41:6b:5e:a8:e9:c6:a4:71:99:26:9a:b2:83:ae:62:
1d:d7:3f:56:a6:bb:f1:76:c6:70:fd:d1:06:70:fb:76:e2:8b:
7f:bc:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:25:43 2025 by rpki-client