Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/qSghObNWH5fMJUIbrqZ6n2PjmUw.roa
File: qSghObNWH5fMJUIbrqZ6n2PjmUw.roa (raw, json)
Hash identifier: ZSrOik1z3S3WKJdlvSl4ahRhKC9D1cqsI4Imj0nM+cQ=
Subject key identifier: A9:28:21:39:B3:56:1F:97:CC:25:42:1B:AE:A6:7A:9F:63:E3:99:4C
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 042F5FC4
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/qSghObNWH5fMJUIbrqZ6n2PjmUw.roa
Signing time: Thu 19 May 2022 10:03:29 +0000
ROA not before: Thu 19 May 2022 10:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 89.47.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70213572 (0x42f5fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: May 19 10:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9282139b3561f97cc25421baea67a9f63e3994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:ee:55:15:e5:ac:fe:4e:d5:de:57:5a:fb:
a2:a9:32:90:7d:7e:4f:ac:aa:ff:91:33:d6:d4:1a:
d4:b3:85:36:2b:71:3b:77:b6:79:ec:74:cb:78:3d:
ad:5c:af:49:84:a4:57:63:10:48:84:1c:d5:d3:3e:
8e:c8:23:89:dc:93:d9:b9:c5:97:6b:b4:75:7b:60:
55:2d:98:67:f9:7e:95:1e:d8:bf:3b:4a:7e:c8:87:
2c:38:13:27:15:1f:6d:34:a5:f0:94:98:46:8b:6a:
92:34:3d:12:11:28:64:cc:ac:c5:99:fb:18:d8:21:
11:24:bd:df:57:5c:cd:00:c6:f1:cc:b2:37:80:b6:
6b:e9:c4:c6:b0:eb:6a:99:8e:5f:9a:0f:d1:d6:63:
36:0f:fd:72:b3:1c:64:bb:db:09:ac:96:fa:e2:e9:
80:ae:b0:0f:27:8e:0d:ba:e1:8f:18:5a:de:d2:08:
f2:41:4a:0f:ea:7c:85:73:af:4a:5e:cb:e9:bf:79:
75:1a:47:29:50:a3:f4:88:f3:0b:f8:2b:bb:5a:2c:
3e:c9:23:b6:c3:d7:ce:ce:a9:a9:60:f7:cf:51:d9:
8d:2f:45:8e:95:e2:e6:e6:57:ec:12:d1:f4:eb:f5:
55:68:a5:8e:79:c5:63:a8:1d:04:b2:92:17:ce:30:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:28:21:39:B3:56:1F:97:CC:25:42:1B:AE:A6:7A:9F:63:E3:99:4C
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/qSghObNWH5fMJUIbrqZ6n2PjmUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.8.0/23
Signature Algorithm: sha256WithRSAEncryption
57:6f:b0:1f:d1:13:96:5f:d2:65:25:5d:d8:1f:16:88:d7:17:
9d:c0:c0:85:be:83:0c:17:96:a4:91:d4:fc:3f:10:86:f9:49:
e0:31:74:fe:67:6d:9c:71:24:98:00:ec:fd:b5:7f:0d:aa:d7:
20:13:16:dc:52:a3:ad:d0:c1:3f:46:3d:cc:71:7e:ba:84:4c:
47:dc:77:46:e4:d3:c5:12:1f:1b:15:3e:27:a1:d7:02:9a:f1:
22:c1:50:c7:32:88:d9:3c:c2:45:f3:47:32:50:76:6f:d2:d7:
52:80:e4:a8:bf:7e:37:c6:74:fd:cb:5d:fd:cc:06:14:07:e2:
7a:4d:38:1a:14:93:84:2b:e2:cd:35:0a:ae:f0:6d:5f:c2:e4:
05:7b:3d:8f:c5:a0:25:dc:ca:9a:ba:b5:37:29:9e:9f:10:1e:
4f:01:0b:5f:fb:61:98:b1:d2:b3:c2:83:6e:9e:63:a1:66:fc:
ca:47:7e:ba:b5:09:fa:23:5a:12:10:d8:fe:88:df:1f:38:3e:
ad:6c:25:dd:e5:df:d0:c3:35:cc:f4:43:8f:b1:f2:65:86:5f:
b9:f7:b3:f2:7d:c0:1b:58:bc:1d:81:72:12:99:19:ab:ec:d0:
9f:3b:62:08:a7:46:ad:4f:85:9e:68:d4:f7:23:90:23:aa:90:
95:3d:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:16 2025 by rpki-client