Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/jQfkwpicMZAkjEBxtHVYGF73uAM.roa
File: jQfkwpicMZAkjEBxtHVYGF73uAM.roa (raw, json)
Hash identifier: cey0h1Jh4FyEv1fSx/zJ3Rb5uHCUXR3f2EljPZAsFSI=
Subject key identifier: 8D:07:E4:C2:98:9C:31:90:24:8C:40:71:B4:75:58:18:5E:F7:B8:03
Certificate issuer: /CN=f5541f8a3dddc58d5cff42b60f8e7d29cd761ba5
Certificate serial: 0185D5733B6FF96B0DFE5032CC49E83F3C9B
Authority key identifier: F5:54:1F:8A:3D:DD:C5:8D:5C:FF:42:B6:0F:8E:7D:29:CD:76:1B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VQfij3dxY1c_0K2D459Kc12G6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/jQfkwpicMZAkjEBxtHVYGF73uAM.roa
Signing time: Sat 21 Jan 2023 17:49:36 +0000
ROA not before: Sat 21 Jan 2023 17:49:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8775
IP address blocks: 195.69.157.0/24 maxlen: 24
195.69.156.0/22 maxlen: 22
195.69.156.0/24 maxlen: 24
195.69.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d5:73:3b:6f:f9:6b:0d:fe:50:32:cc:49:e8:3f:3c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5541f8a3dddc58d5cff42b60f8e7d29cd761ba5
Validity
Not Before: Jan 21 17:49:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d07e4c2989c3190248c4071b47558185ef7b803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:dc:99:b1:0a:af:94:35:bc:f3:a4:f6:5f:
d9:a3:99:4c:bf:e3:89:ed:b3:cd:e5:2b:72:60:91:
ca:4c:40:ba:0e:0a:57:5f:58:1f:41:2e:51:24:49:
db:20:45:3a:bb:72:20:e7:9b:17:c6:34:62:16:cd:
1e:fc:af:6e:6d:11:62:c0:d0:58:9a:44:ec:bb:a4:
8e:4f:a7:20:97:b8:15:e0:a8:d7:56:08:7d:65:22:
70:02:32:df:16:c1:59:a3:05:fc:b8:d1:7d:93:83:
b3:8a:03:a5:fa:3e:07:6e:39:de:3b:a1:1b:bc:af:
02:09:5e:c8:fd:ad:50:07:5b:fb:cd:64:6b:74:d1:
30:f4:77:97:cf:72:aa:68:2f:78:09:0c:78:0e:2f:
4a:c6:1f:2e:ac:69:2d:c1:c2:f9:f5:bd:53:30:f0:
58:cb:b2:fd:e5:7d:39:33:f8:b3:0b:07:0e:ee:12:
8c:ed:44:cd:d7:a0:db:7c:e0:3e:10:90:82:88:05:
0b:1c:28:7c:22:48:90:27:07:9f:70:56:6d:a0:24:
85:ee:cb:1e:28:0c:17:e2:99:b5:3c:21:0c:0e:4a:
e2:16:42:bf:17:6a:af:01:72:03:56:82:1f:e7:66:
4a:5a:37:c7:80:10:ef:a6:f9:c3:5b:72:94:33:5e:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:07:E4:C2:98:9C:31:90:24:8C:40:71:B4:75:58:18:5E:F7:B8:03
X509v3 Authority Key Identifier:
keyid:F5:54:1F:8A:3D:DD:C5:8D:5C:FF:42:B6:0F:8E:7D:29:CD:76:1B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VQfij3dxY1c_0K2D459Kc12G6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/jQfkwpicMZAkjEBxtHVYGF73uAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fb618e-a4cc-4e83-b188-5afe5d237f1e/1/9VQfij3dxY1c_0K2D459Kc12G6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.156.0/22
Signature Algorithm: sha256WithRSAEncryption
62:7f:ab:61:62:79:cb:94:fc:e3:57:fc:f2:e5:85:4c:48:6c:
5d:46:16:6f:b1:f8:27:cd:66:5c:48:f7:45:ca:cb:07:17:e5:
c8:23:cd:0a:a4:07:7a:cb:ed:41:c2:30:07:67:ce:b0:41:3b:
81:c4:74:b4:f4:ef:6e:8c:0c:95:8d:7c:28:be:db:12:58:54:
0f:29:a6:ba:2f:cd:e0:04:5c:61:a9:b2:4f:3e:3e:9b:b3:75:
1d:51:63:08:9d:81:a4:35:a9:3c:da:53:00:13:99:e9:a3:2a:
e7:41:c4:59:10:a5:9b:c7:25:04:6d:2d:b2:f8:09:7f:d0:7f:
39:8a:25:ed:7f:50:41:c2:e9:1a:b9:eb:7a:5b:c3:cb:52:88:
c9:42:e6:1a:14:0f:6c:38:8e:5e:68:36:3a:82:f8:b6:2c:f2:
47:9d:f9:c9:cb:d9:ca:fb:7e:12:b9:af:12:0a:89:31:f7:70:
5d:3a:a0:81:94:bf:2e:01:63:8a:52:f5:a1:e2:2b:6a:ba:aa:
7a:48:9e:2f:11:26:29:dd:de:9e:d4:72:3d:27:77:b9:27:bc:
70:d6:e2:d4:b9:f0:65:72:77:cc:4d:7e:8a:27:41:18:14:81:
d3:76:a7:df:f4:a3:57:17:aa:64:d0:9e:b9:6e:bb:36:f7:f3:
56:73:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:30:21 2025 by rpki-client