Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/C50qQEZFrBCUqEL2cBKQfepwmrk.roa
File: C50qQEZFrBCUqEL2cBKQfepwmrk.roa (raw, json)
Hash identifier: DPcnvMvMt8MxCba+l/mn9WU2+uNrQdW4TUfl5aPzQuM=
Subject key identifier: 0B:9D:2A:40:46:45:AC:10:94:A8:42:F6:70:12:90:7D:EA:70:9A:B9
Certificate issuer: /CN=9c68d58b2d658ff20fdd0a44272c1db6f3cf7fc6
Certificate serial: 017F25
Authority key identifier: 9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGjViy1lj_IP3QpEJywdtvPPf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/C50qQEZFrBCUqEL2cBKQfepwmrk.roa
Signing time: Fri 25 Mar 2022 07:39:41 +0000
ROA not before: Fri 25 Mar 2022 07:39:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 195.8.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98085 (0x17f25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c68d58b2d658ff20fdd0a44272c1db6f3cf7fc6
Validity
Not Before: Mar 25 07:39:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b9d2a404645ac1094a842f67012907dea709ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:78:d0:a5:18:fa:90:d3:e4:57:9c:fc:62:
09:81:66:80:ac:54:4a:93:f5:e9:61:5b:75:88:5f:
31:b1:3e:0f:1f:6e:0b:d6:c9:b4:eb:ea:95:96:68:
09:ed:10:9c:fd:ce:ae:fe:d3:02:e1:58:3c:81:14:
9f:2c:0d:94:73:67:fe:5d:58:93:50:6d:fb:29:29:
06:a5:7f:2d:98:9f:d8:fc:f7:c7:92:fc:82:10:90:
06:e7:f1:a4:13:e2:1e:30:ae:d7:25:97:fb:b2:f3:
1a:f6:6f:0a:af:5e:f5:9c:61:41:8c:b1:b6:23:13:
21:c5:38:14:80:6a:34:9f:82:70:50:49:f3:cb:15:
42:36:f5:8c:54:f6:3c:c3:ee:e3:71:b6:22:6b:93:
bb:6d:00:94:f9:7f:be:33:42:d7:f3:1d:f6:dc:fb:
09:b8:ea:65:db:35:db:35:6f:08:ba:5c:85:07:bc:
ca:5e:68:d5:2c:cb:31:c3:72:de:ff:36:39:5f:94:
0b:5a:00:88:07:21:76:5d:9e:6a:fc:1a:09:31:ad:
00:75:c0:17:5d:1b:d8:bc:d4:45:4c:3c:71:bd:bb:
82:36:10:c4:d4:38:02:63:bc:e9:8e:c0:51:74:7f:
48:ca:bb:45:5b:1c:cc:6f:b9:d7:f5:2f:0b:24:be:
88:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9D:2A:40:46:45:AC:10:94:A8:42:F6:70:12:90:7D:EA:70:9A:B9
X509v3 Authority Key Identifier:
keyid:9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGjViy1lj_IP3QpEJywdtvPPf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/C50qQEZFrBCUqEL2cBKQfepwmrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/nGjViy1lj_IP3QpEJywdtvPPf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.47.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6f:72:9f:49:41:4b:c4:97:c0:4c:87:cd:cd:88:fd:a6:0a:
97:1f:1f:c9:36:89:fa:3c:c0:d0:1a:40:6b:42:42:03:83:73:
3c:b8:ca:3e:5e:16:8d:14:5e:8c:95:4a:13:7e:e3:20:ed:bf:
a1:eb:ea:c2:83:f3:09:b0:7f:f5:3a:cd:b5:19:76:d7:7b:ec:
8f:53:62:5f:ea:87:ea:92:2b:6c:d6:42:fe:59:9b:ce:a3:64:
c2:5b:b2:21:7b:41:02:16:2d:be:93:9a:5d:11:f8:35:a4:78:
de:0a:a9:69:3c:b6:f9:1f:01:06:70:14:bf:04:b9:75:31:77:
c9:53:0a:1b:9d:0d:c8:05:23:07:38:29:0d:82:07:e7:19:13:
9e:17:1b:18:28:00:72:1b:ea:4c:58:1b:c1:8c:f7:c9:f7:b1:
7c:5a:42:e5:fb:93:35:ea:66:f3:07:eb:4b:da:25:1c:8f:41:
4d:ec:08:fa:5e:f2:cb:cf:a9:a5:6d:9a:7c:db:05:cb:93:28:
ad:8e:8a:40:aa:d7:bd:07:ff:80:95:87:a5:4b:ea:9d:53:a8:
96:0b:f7:49:7b:59:7b:e0:bb:7b:e2:83:73:a7:39:fa:63:35:
3f:3f:cd:8e:b0:c8:8f:8a:8f:49:c8:e8:39:7b:6b:52:14:dd:
02:e5:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:22 2025 by rpki-client