Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/ja-tqp_AGMoZY5A7t08K-NaVhmE.roa
File: ja-tqp_AGMoZY5A7t08K-NaVhmE.roa (raw, json)
Hash identifier: NKDTSPWJO6cOa8KOHpeZRUeaq8S7mR+rQwQNs7cFUrw=
Subject key identifier: 8D:AF:AD:AA:9F:C0:18:CA:19:63:90:3B:B7:4F:0A:F8:D6:95:86:61
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 01857270F6EACFC45A1984A0E0B10D5071C0
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/ja-tqp_AGMoZY5A7t08K-NaVhmE.roa
Signing time: Mon 02 Jan 2023 12:24:43 +0000
ROA not before: Mon 02 Jan 2023 12:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204428
IP address blocks: 80.94.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f6:ea:cf:c4:5a:19:84:a0:e0:b1:0d:50:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 2 12:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dafadaa9fc018ca1963903bb74f0af8d6958661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:23:3c:69:f4:5d:c2:de:0f:10:33:3e:f0:
8b:5f:2b:ef:e0:bc:aa:3b:fb:e2:ff:2f:5c:19:2e:
ea:dd:b8:3e:da:d8:d3:5b:45:a5:f3:d0:1f:e2:87:
e2:aa:fe:4b:a5:cb:02:a0:2d:79:5c:3f:2c:fe:bd:
db:cb:91:ca:e3:e5:90:f1:13:81:94:31:1b:b6:9a:
7c:87:4c:24:06:d1:ca:27:21:5b:14:0d:2b:a5:4a:
00:ef:1f:e3:21:43:8a:0f:ad:e9:04:25:02:64:0f:
2e:63:91:61:4c:09:47:b0:db:a9:0b:43:04:77:7c:
fc:ba:23:fa:da:b9:36:df:3c:33:66:0f:53:dd:b4:
46:7d:a5:01:89:80:34:cf:e0:ea:f6:43:34:55:92:
ce:1c:9d:0f:de:68:d8:40:31:f1:78:8c:4e:87:af:
58:a4:8a:67:f4:90:c8:a4:91:55:f2:0a:70:6f:40:
3e:c0:60:61:7a:5e:7b:84:bc:c7:13:9f:c9:e9:91:
ac:f8:bc:02:58:82:43:af:d3:d8:17:b6:23:36:64:
8b:64:2e:53:e3:ec:9d:46:d7:c1:7e:00:00:41:d4:
32:c5:e2:62:ae:9b:c3:f8:d1:41:47:c5:44:45:36:
3c:26:bc:40:64:4b:ca:17:f9:88:a3:6d:99:62:71:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:AD:AA:9F:C0:18:CA:19:63:90:3B:B7:4F:0A:F8:D6:95:86:61
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/ja-tqp_AGMoZY5A7t08K-NaVhmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6b:e8:89:2a:e1:b8:8d:d5:78:f3:dd:a4:e2:0a:ea:d8:14:
28:dd:fc:4d:7a:14:24:2d:b6:77:e9:91:10:48:d4:9d:71:4c:
f9:f7:c1:14:34:38:d7:c9:00:a9:da:9e:34:9f:23:d1:f9:fc:
ab:e2:a3:71:6a:85:a0:ff:ff:69:a5:46:fa:d0:be:38:08:33:
37:48:32:e9:02:ff:72:11:5f:0d:91:4f:6d:09:03:2f:11:c0:
d2:ee:91:b7:d9:85:96:36:3e:f4:e2:c8:32:38:5f:9d:d3:eb:
f9:81:07:bc:dc:b2:99:b6:43:69:5a:df:04:78:78:58:f4:ce:
41:6d:65:02:35:00:a1:ea:8b:0c:3b:40:a3:61:24:87:15:5d:
aa:99:c1:40:c0:a7:d4:d2:ae:54:b0:f5:33:58:5b:21:07:28:
bd:e8:78:ca:ef:b5:03:9c:a9:a0:a0:69:fa:56:6c:4c:20:82:
dc:fa:03:5c:3e:1c:8c:c8:c7:42:f9:4f:bb:4f:da:d0:68:17:
97:a7:2c:1e:33:d9:eb:7f:69:51:05:4c:f8:c4:6f:7b:9e:67:
70:00:e9:de:3a:a1:71:e3:8d:90:be:b3:b5:f9:23:22:2f:2a:
aa:cb:52:6c:57:ad:fc:8a:a6:be:02:43:c1:bc:28:01:0d:ae:
62:77:14:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVycPbqz8RaGYSg4LENUHHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk
NTJiYmYwHhcNMjMwMTAyMTIyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGFmYWRhYTlmYzAxOGNhMTk2MzkwM2JiNzRmMGFmOGQ2OTU4NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZkjPGn0XcLeDxAzPvCLXyvv4Lyq
O/vi/y9cGS7q3bg+2tjTW0Wl89Af4ofiqv5LpcsCoC15XD8s/r3by5HK4+WQ8ROB
lDEbtpp8h0wkBtHKJyFbFA0rpUoA7x/jIUOKD63pBCUCZA8uY5FhTAlHsNupC0ME
d3z8uiP62rk23zwzZg9T3bRGfaUBiYA0z+Dq9kM0VZLOHJ0P3mjYQDHxeIxOh69Y
pIpn9JDIpJFV8gpwb0A+wGBhel57hLzHE5/J6ZGs+LwCWIJDr9PYF7YjNmSLZC5T
4+ydRtfBfgAAQdQyxeJirpvD+NFBR8VERTY8JrxAZEvKF/mIo22ZYnHJCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI2vraqfwBjKGWOQO7dPCvjWlYZhMB8GA1UdIwQY
MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt
NDZlZTU3OGEwYmZlLzEvamEtdHFwX0FHTW9aWTVBN3QwOEstTmFWaG1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl
LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF5fMA0G
CSqGSIb3DQEBCwUAA4IBAQAba+iJKuG4jdV4892k4grq2BQo3fxNehQkLbZ36ZEQ
SNSdcUz598EUNDjXyQCp2p40nyPR+fyr4qNxaoWg//9ppUb60L44CDM3SDLpAv9y
EV8NkU9tCQMvEcDS7pG32YWWNj704sgyOF+d0+v5gQe83LKZtkNpWt8EeHhY9M5B
bWUCNQCh6osMO0CjYSSHFV2qmcFAwKfU0q5UsPUzWFshByi96HjK77UDnKmgoGn6
VmxMIILc+gNcPhyMyMdC+U+7T9rQaBeXpyweM9nrf2lRBUz4xG97nmdwAOneOqFx
442QvrO1+SMiLyqqy1JsV638iqa+AkPBvCgBDa5idxQN
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:35 2025 by rpki-client