Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/qs5nhQDEmO9YYqFO2F_ObF9JLDE.roa
File: qs5nhQDEmO9YYqFO2F_ObF9JLDE.roa (raw, json)
Hash identifier: e+0j47jj6sBOJUCtS+aHojxGWeKhNEr8A1koGdYFbRI=
Subject key identifier: AA:CE:67:85:00:C4:98:EF:58:62:A1:4E:D8:5F:CE:6C:5F:49:2C:31
Certificate issuer: /CN=9c68d58b2d658ff20fdd0a44272c1db6f3cf7fc6
Certificate serial: 523352
Authority key identifier: 9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGjViy1lj_IP3QpEJywdtvPPf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/qs5nhQDEmO9YYqFO2F_ObF9JLDE.roa
Signing time: Wed 27 Apr 2022 06:20:58 +0000
ROA not before: Wed 27 Apr 2022 06:20:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5089
IP address blocks: 195.8.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5387090 (0x523352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c68d58b2d658ff20fdd0a44272c1db6f3cf7fc6
Validity
Not Before: Apr 27 06:20:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aace678500c498ef5862a14ed85fce6c5f492c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:04:ea:a7:ff:4b:34:51:e3:b0:79:eb:53:
0b:ac:0a:99:41:ca:07:3c:9a:ed:4f:33:05:c8:db:
66:e6:a2:6e:d6:ab:38:b3:e2:cb:df:40:55:48:73:
3d:1f:75:9e:9b:c9:dc:fa:a6:fc:72:08:80:df:6e:
3e:d1:86:92:cf:e9:78:a2:e7:60:1f:cd:8d:57:9c:
01:6f:41:b9:46:4d:8f:73:4c:29:b1:1c:6b:26:84:
34:8b:35:1a:24:6b:a3:0b:7c:da:34:a3:e1:81:f1:
2f:7b:c3:47:a0:d1:b1:c3:95:d6:c6:08:ea:38:de:
cf:8f:0b:b6:62:67:a3:9b:af:ed:7f:a7:cf:6b:ea:
5d:9b:54:e5:ef:62:ee:fd:54:5e:ba:0c:b6:03:42:
b5:15:8b:3c:7e:3f:6e:94:b9:99:71:17:1b:7f:b3:
89:d7:d0:54:28:ab:47:d9:bb:0a:08:08:78:9d:06:
ad:17:35:aa:99:41:a7:ef:09:a5:97:b8:d2:d6:67:
48:cf:04:5d:a3:37:d8:59:9d:62:06:5c:3e:0e:b1:
4e:45:4c:59:04:b0:06:5a:13:96:b1:ce:f5:76:15:
3e:66:48:86:99:fe:ff:4b:d4:a6:fd:78:a7:f6:c1:
9b:4a:54:38:bd:bf:eb:df:55:18:e1:bf:33:6e:ee:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CE:67:85:00:C4:98:EF:58:62:A1:4E:D8:5F:CE:6C:5F:49:2C:31
X509v3 Authority Key Identifier:
keyid:9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGjViy1lj_IP3QpEJywdtvPPf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/qs5nhQDEmO9YYqFO2F_ObF9JLDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/nGjViy1lj_IP3QpEJywdtvPPf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.47.0/24
Signature Algorithm: sha256WithRSAEncryption
67:de:a5:b0:98:20:26:38:c5:f8:ce:82:54:17:12:3b:8c:62:
13:a2:47:55:c3:7a:06:ed:20:77:e6:bc:d0:f7:43:66:07:1e:
10:f1:5d:67:dd:41:68:8c:8c:e4:d8:19:76:a2:2d:06:c9:1a:
ed:35:fe:83:a7:7b:df:46:da:8d:a1:43:2b:66:26:24:5c:26:
0e:f8:01:78:4e:14:29:94:1a:c7:15:40:eb:0d:68:a0:f6:84:
63:7a:70:16:75:a0:05:4a:98:2d:4d:1b:81:35:a2:1e:f5:6a:
00:6a:e8:40:8a:94:bb:96:d1:3e:a2:3a:5a:13:b4:e3:10:12:
82:0e:a0:01:ce:81:3e:ff:75:b1:5b:8e:5f:72:d5:e6:5b:8f:
89:d6:a3:c0:a6:7f:c9:0a:24:0f:71:95:78:08:24:86:70:67:
1d:7b:95:4a:9d:44:04:eb:c5:03:8f:bb:84:22:33:83:55:85:
c3:31:e6:ac:62:2a:a0:d2:88:b1:e8:4d:d0:d5:25:51:f3:58:
73:0a:8c:af:39:10:59:ba:bd:03:41:ac:1e:9b:9b:ef:a6:90:
38:25:89:1d:e3:a0:0f:df:d6:e6:d4:88:d2:b0:4d:8d:9e:4c:
4a:0d:de:2e:2a:f5:7a:73:6b:6f:23:03:ed:c1:96:c9:03:c9:
dc:7c:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:52 2025 by rpki-client