Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/qjsm-xQ-0VmxR84Og9htyCvu-9A.roa
File: qjsm-xQ-0VmxR84Og9htyCvu-9A.roa (raw, json)
Hash identifier: uf+7oehit7/q8DmhvJ1hVSS87H97JmEts7kgA8p0lto=
Subject key identifier: AA:3B:26:FB:14:3E:D1:59:B1:47:CE:0E:83:D8:6D:C8:2B:EE:FB:D0
Certificate issuer: /CN=cc4261880f82f38471a5717b8009c4fbda2df242
Certificate serial: 098EC205
Authority key identifier: CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/qjsm-xQ-0VmxR84Og9htyCvu-9A.roa
Signing time: Sat 01 Jan 2022 14:56:46 +0000
ROA not before: Sat 01 Jan 2022 14:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 83.150.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160350725 (0x98ec205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4261880f82f38471a5717b8009c4fbda2df242
Validity
Not Before: Jan 1 14:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa3b26fb143ed159b147ce0e83d86dc82beefbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:02:3d:d7:21:df:84:77:45:91:f8:6e:28:
91:01:2a:78:3d:a0:23:cb:40:c0:00:29:0d:57:f5:
d9:37:60:81:49:76:be:d8:53:69:a5:9e:f9:d1:27:
39:48:41:98:7e:75:22:3f:09:b6:af:ca:1f:4d:1d:
f7:4c:7c:ca:8d:1b:77:c9:07:09:bc:5b:2b:c0:bd:
61:a2:21:ee:1c:0f:c2:a7:5f:57:26:6d:e6:74:33:
03:fe:b0:5c:f2:8f:1a:b9:f0:10:f7:33:3f:34:e5:
7c:e0:58:77:ce:1e:7b:a9:61:5b:e3:c6:18:77:31:
ab:48:05:e8:3c:5e:e0:b4:76:e6:e2:ce:61:b5:97:
16:45:93:00:64:91:47:2f:2e:e8:71:ef:98:5b:37:
00:68:f0:d7:52:78:00:50:d4:98:70:0e:24:74:c9:
7a:34:2a:81:37:2c:d4:e2:43:68:79:4a:1d:1c:d6:
00:43:f4:11:9a:a7:8d:df:3c:28:a6:df:1c:f3:36:
5b:f1:f6:de:38:46:7f:99:cd:ee:ab:12:a9:b7:1e:
17:7a:17:87:95:6a:2a:4b:cd:6b:01:62:d2:6b:11:
55:87:d9:03:e2:c7:c1:9b:71:c8:96:09:03:ec:d2:
84:7f:75:fd:60:0a:03:9d:1c:68:2c:cd:27:7c:ee:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:26:FB:14:3E:D1:59:B1:47:CE:0E:83:D8:6D:C8:2B:EE:FB:D0
X509v3 Authority Key Identifier:
keyid:CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/qjsm-xQ-0VmxR84Og9htyCvu-9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.218.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fb:2a:1f:4b:bd:46:a5:fc:49:13:c7:5a:4f:75:18:1f:a2:
95:71:89:9f:a8:2a:26:b6:c5:ed:35:2d:8a:77:59:48:73:cd:
eb:dd:7a:46:ea:74:15:40:d5:98:07:8b:25:30:44:ae:fd:4f:
b4:1d:de:03:20:43:fb:96:76:9b:df:dc:df:79:62:88:f5:81:
ea:78:32:70:7a:19:6e:5d:d0:b0:69:28:dd:ab:10:50:d9:f4:
5a:9b:ff:fe:66:b9:a5:40:fd:21:1b:b1:42:01:7e:43:0e:9f:
24:c6:ce:ca:a0:5e:8b:46:d6:2b:f1:b7:9f:04:ae:b6:5f:ef:
4f:19:99:81:ec:58:73:69:00:7e:22:a3:6b:e3:0b:7d:f8:20:
a2:09:7a:e0:8f:8c:73:29:ad:a1:f7:c9:11:12:d9:ec:9a:59:
1b:88:5a:61:b2:34:6a:dd:01:9b:78:00:76:60:db:fd:4a:f7:
0c:1b:9b:73:56:13:f8:79:f0:19:39:01:f6:ad:8c:77:21:56:
0e:f1:e3:2f:98:eb:42:36:f5:66:b4:d8:9d:49:4a:4c:b1:81:
4a:de:73:b8:8d:5b:4f:46:b2:2e:fc:e7:9c:48:ca:d9:59:e6:
e6:5e:8e:cf:76:a2:a0:38:bd:cf:16:bf:98:2f:83:2e:cf:9e:
01:bb:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:42:29 2025 by rpki-client