Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c9c0a6-0def-4da6-b52d-53d30d8aefb9/1/qmeaP5flUdTOLtkLTRQRHyzONWo.roa
File: qmeaP5flUdTOLtkLTRQRHyzONWo.roa (raw, json)
Hash identifier: deeOT9/uij3tveBxq0Fm47jifBSsGC7bFrnFGwqn8b8=
Subject key identifier: AA:67:9A:3F:97:E5:51:D4:CE:2E:D9:0B:4D:14:11:1F:2C:CE:35:6A
Certificate issuer: /CN=6c5060f0692c62a9e908093f92a63a24a94fd5ff
Certificate serial: 01849F916559E6D3F1BE92BA90ECCF4BFBEE
Authority key identifier: 6C:50:60:F0:69:2C:62:A9:E9:08:09:3F:92:A6:3A:24:A9:4F:D5:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFBg8GksYqnpCAk_kqY6JKlP1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c9c0a6-0def-4da6-b52d-53d30d8aefb9/1/qmeaP5flUdTOLtkLTRQRHyzONWo.roa
Signing time: Tue 22 Nov 2022 13:40:16 +0000
ROA not before: Tue 22 Nov 2022 13:40:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60486
IP address blocks: 83.143.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:91:65:59:e6:d3:f1:be:92:ba:90:ec:cf:4b:fb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5060f0692c62a9e908093f92a63a24a94fd5ff
Validity
Not Before: Nov 22 13:40:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa679a3f97e551d4ce2ed90b4d14111f2cce356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:1d:1c:d2:ab:37:bf:b0:f8:6b:36:e2:0f:
b3:58:00:68:68:3b:eb:8a:9f:cd:60:78:21:a6:28:
fb:7a:e6:89:af:af:02:e7:4c:b1:02:7f:e7:13:94:
7b:0f:ce:23:79:45:89:95:bb:a0:a0:26:36:be:82:
a0:5d:2c:42:c4:39:20:4f:ea:14:08:5c:80:39:d7:
38:9a:51:ca:ad:48:da:eb:ba:be:a8:40:a0:61:f2:
12:16:81:db:c8:ff:57:0d:bc:b6:6b:77:34:50:69:
4e:6e:40:19:27:40:a1:17:4d:da:5f:9c:1a:95:1f:
d0:06:58:fc:cd:4c:07:55:14:8a:ed:9c:93:f6:95:
4f:ae:72:79:7e:2d:c8:bf:38:61:24:59:2d:5d:43:
c7:02:78:65:38:ce:a8:e3:01:65:47:7a:72:ba:64:
1b:37:7a:d0:05:f4:09:22:1d:92:66:ed:b8:68:9e:
ef:d1:e4:ae:65:59:fd:07:34:23:e3:eb:77:6e:45:
0d:40:19:f6:6b:5a:86:0b:65:c3:c5:87:e9:06:40:
1b:13:fb:d6:17:7b:6f:8f:9a:10:1f:cd:aa:2e:95:
c8:38:ac:91:a5:42:eb:24:5e:86:d8:9a:93:a4:21:
5d:0d:42:be:b6:4b:b1:4c:1e:e7:22:5a:93:61:c6:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:67:9A:3F:97:E5:51:D4:CE:2E:D9:0B:4D:14:11:1F:2C:CE:35:6A
X509v3 Authority Key Identifier:
keyid:6C:50:60:F0:69:2C:62:A9:E9:08:09:3F:92:A6:3A:24:A9:4F:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFBg8GksYqnpCAk_kqY6JKlP1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c9c0a6-0def-4da6-b52d-53d30d8aefb9/1/qmeaP5flUdTOLtkLTRQRHyzONWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c9c0a6-0def-4da6-b52d-53d30d8aefb9/1/bFBg8GksYqnpCAk_kqY6JKlP1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:95:d7:93:37:8b:d3:62:c8:58:34:29:2f:c0:ab:85:16:d3:
80:26:33:54:e6:10:e6:59:88:fd:c1:a4:14:4d:05:93:9e:09:
b2:bc:3a:ed:18:e4:02:58:08:53:96:b8:f7:62:5b:6b:e8:c8:
1a:3d:09:69:01:fe:be:16:f3:82:95:fc:d6:42:0e:d7:d2:26:
1a:c9:1b:be:1b:f9:fe:68:4b:81:4e:3f:f2:87:1b:a1:77:c0:
72:c2:18:93:d4:65:19:6b:31:89:c0:db:2d:b8:82:b6:f9:3a:
ee:f2:fb:e8:30:f3:ff:47:6c:ed:55:41:a0:95:89:1c:e6:93:
20:08:ca:08:12:51:58:6d:e7:b4:c9:52:b2:f3:86:21:4f:93:
20:88:35:57:6b:d9:56:28:d1:69:00:96:d3:de:33:96:e6:0a:
73:07:47:ae:af:c7:09:28:df:47:91:34:56:e1:df:3a:56:cb:
af:04:b5:44:6a:d0:1a:f6:72:54:a1:8d:58:0b:d1:49:97:99:
08:c5:8a:08:f9:b4:5a:0d:6e:1b:f5:ed:64:7c:3f:fc:f0:29:
79:91:d6:e8:c5:a6:a5:2b:da:b8:34:8e:8e:ea:c4:9d:57:ae:
35:75:51:61:85:7d:97:28:63:5d:b1:01:ba:12:ed:3e:43:f5:
6e:1a:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:44:17 2025 by rpki-client