Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d50fbb-c844-4428-bf99-bc4ab5a733b8/1/qqZFiI82eM5HPygd9B-s2aZVrjU.roa
File: qqZFiI82eM5HPygd9B-s2aZVrjU.roa (raw, json)
Hash identifier: YuaFSmoAO6UaqiCZ5ALSnZrWF2LTd9163WqXrPzKuKo=
Subject key identifier: AA:A6:45:88:8F:36:78:CE:47:3F:28:1D:F4:1F:AC:D9:A6:55:AE:35
Certificate issuer: /CN=79fd51c4f0534f8a8f80d4e7c0a4af824aafe17c
Certificate serial: 0580D683
Authority key identifier: 79:FD:51:C4:F0:53:4F:8A:8F:80:D4:E7:C0:A4:AF:82:4A:AF:E1:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ef1RxPBTT4qPgNTnwKSvgkqv4Xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d50fbb-c844-4428-bf99-bc4ab5a733b8/1/qqZFiI82eM5HPygd9B-s2aZVrjU.roa
Signing time: Sat 01 Jan 2022 06:54:55 +0000
ROA not before: Sat 01 Jan 2022 06:54:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 193.254.28.0/24 maxlen: 24
193.254.27.0/24 maxlen: 24
194.0.136.0/24 maxlen: 24
194.0.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92329603 (0x580d683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79fd51c4f0534f8a8f80d4e7c0a4af824aafe17c
Validity
Not Before: Jan 1 06:54:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aaa645888f3678ce473f281df41facd9a655ae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:f4:7b:00:af:1d:62:a5:ca:1b:72:1f:b6:
17:f5:ba:fe:20:3d:0b:6a:02:e2:06:bc:a2:74:23:
e5:28:79:9d:d2:63:88:4c:78:26:28:77:0f:0c:ae:
fc:7b:d9:f9:b5:bd:6c:af:c9:62:5d:a9:27:ff:31:
98:11:03:fc:36:f5:dd:2a:5b:f4:25:e7:0b:8b:09:
ef:0e:20:94:92:6c:1e:e8:af:b0:9e:12:e3:01:66:
6b:ae:dc:e0:97:12:c4:a9:37:e9:fa:af:fc:50:27:
ca:3f:75:bc:f9:cd:1a:5d:2c:ce:88:a0:de:d4:dd:
b5:ce:f2:5a:04:5a:de:1b:9a:0f:11:0c:b8:1c:11:
f3:cb:04:99:5d:fb:7c:af:6a:3c:e6:96:fe:e1:9c:
32:87:af:a2:4f:b6:02:e2:e1:51:08:16:1c:ba:43:
05:cc:5d:90:fe:71:e1:39:6d:4e:77:d3:18:22:43:
38:f1:fa:4f:7b:d4:d4:1c:66:8a:e6:ef:b5:e8:90:
b8:70:a1:43:e1:0e:79:fa:20:a2:89:d0:3a:53:1c:
88:e4:df:d8:21:9e:ef:1b:a1:5b:c1:51:46:d6:4e:
cd:16:7c:27:03:cf:de:c4:4e:36:6f:c9:80:b3:5c:
4d:56:55:d3:b3:73:ca:67:96:47:8c:ef:2a:2f:89:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:45:88:8F:36:78:CE:47:3F:28:1D:F4:1F:AC:D9:A6:55:AE:35
X509v3 Authority Key Identifier:
keyid:79:FD:51:C4:F0:53:4F:8A:8F:80:D4:E7:C0:A4:AF:82:4A:AF:E1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef1RxPBTT4qPgNTnwKSvgkqv4Xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d50fbb-c844-4428-bf99-bc4ab5a733b8/1/qqZFiI82eM5HPygd9B-s2aZVrjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d50fbb-c844-4428-bf99-bc4ab5a733b8/1/ef1RxPBTT4qPgNTnwKSvgkqv4Xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.27.0-193.254.28.255
194.0.133.0/24
194.0.136.0/24
Signature Algorithm: sha256WithRSAEncryption
05:39:18:77:1b:20:c2:61:11:ce:c6:3a:72:4e:54:c0:89:86:
9d:bf:cc:52:67:b9:64:64:2c:1c:68:59:83:f0:78:96:67:e1:
6e:6c:84:3f:03:1d:03:fa:52:ac:94:8d:9e:70:49:bd:b2:11:
d5:c7:81:6e:62:72:8a:16:04:4d:f6:28:5f:78:fc:7c:c3:e8:
a9:18:26:a7:a8:33:84:4e:e2:d9:ce:76:4c:8b:cc:88:06:99:
f2:d2:2f:10:ed:d0:ec:3f:8d:09:39:45:ce:40:47:32:2c:35:
77:68:4d:43:11:d5:32:6e:11:5b:c5:01:d0:9e:45:92:34:67:
29:17:2c:af:32:50:b0:e7:01:19:1a:d5:89:71:80:2a:e2:44:
f4:ce:5b:4c:80:35:43:de:00:fa:88:de:af:2a:7b:69:85:7a:
c6:08:34:57:a2:c0:49:8b:8b:4a:ab:4a:87:94:57:be:2a:a1:
2f:2b:9a:cb:e3:09:81:23:e5:d7:ca:a4:d7:1c:4a:69:df:30:
44:20:73:e4:4e:2b:7e:2b:8a:04:38:77:3c:d4:c8:8b:be:3f:
a1:03:6a:ea:45:39:c9:23:88:ee:93:b6:83:ff:96:b0:d4:51:
27:7a:ce:e2:6a:d4:53:85:85:8d:bc:a4:4c:1b:3c:40:16:00:
61:f8:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:13:43 2025 by rpki-client