Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/Qh-QdxsozbgHSWm9Ee8wchGWA9c.roa
File: Qh-QdxsozbgHSWm9Ee8wchGWA9c.roa (raw, json)
Hash identifier: LgweXxWSq12GZaQJOFebU4xeQAWJQZnS33ZxykeFJnA=
Subject key identifier: 42:1F:90:77:1B:28:CD:B8:07:49:69:BD:11:EF:30:72:11:96:03:D7
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 04E16F75
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/Qh-QdxsozbgHSWm9Ee8wchGWA9c.roa
Signing time: Sat 01 Jan 2022 04:02:21 +0000
ROA not before: Sat 01 Jan 2022 04:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394201
IP address blocks: 109.235.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81882997 (0x4e16f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Jan 1 04:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=421f90771b28cdb8074969bd11ef3072119603d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:4e:3c:60:c2:c0:eb:ea:dc:7e:0f:8a:f1:
a7:f7:08:e9:e4:b4:69:de:09:dc:39:64:de:48:c7:
1a:c4:bc:13:38:f8:4a:e3:12:5d:63:92:6a:23:90:
9e:f8:16:27:49:62:2f:37:d9:3a:33:ea:64:25:2f:
7c:57:02:1f:63:89:60:55:ea:76:11:f1:7b:8e:6c:
1b:f2:24:3b:18:a3:02:f9:00:6f:51:d7:8a:5c:8e:
a4:02:02:67:a9:7b:05:87:71:eb:c2:a5:fd:43:d6:
e5:cc:8a:5c:a7:18:32:93:ab:a8:40:99:27:06:34:
15:25:79:b6:59:e4:6e:4f:ef:67:bc:07:b6:0f:57:
94:82:11:e8:ca:15:bf:a3:b3:a9:fc:b7:01:c9:5e:
d1:d0:6c:e8:9a:44:ba:58:bd:f6:34:51:df:ad:64:
7a:c0:d1:d1:4c:f8:ad:5f:ef:14:44:85:2d:07:9a:
70:2f:d2:8a:25:18:58:84:c6:db:5c:53:da:30:62:
85:a4:52:2b:4c:73:44:5d:03:b2:c2:ec:30:ae:37:
a0:2a:51:eb:84:ff:5c:56:02:da:82:f3:a0:89:82:
44:24:9f:41:6c:72:aa:91:b4:07:04:c7:f7:bb:b4:
1c:c0:2e:06:9b:25:95:e6:e5:6d:86:e1:2c:69:8d:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:90:77:1B:28:CD:B8:07:49:69:BD:11:EF:30:72:11:96:03:D7
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/Qh-QdxsozbgHSWm9Ee8wchGWA9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:80:6f:85:4f:2a:89:b4:da:07:42:6f:4b:37:d5:bb:b4:87:
7f:19:76:4a:fe:ee:23:c9:7f:bb:a8:41:d5:91:d0:a7:82:c6:
17:0e:a9:b7:1f:88:81:f6:1b:11:dc:ac:90:84:70:a2:da:1d:
8c:fd:8d:18:40:ab:fe:38:b3:a2:27:db:88:dc:bf:9d:fd:59:
33:88:1a:6f:f0:5e:7e:c4:2c:5d:63:28:66:01:a1:c3:81:e1:
10:e6:e7:de:ba:45:e9:52:62:c7:3a:3b:35:36:27:0f:5d:94:
a1:59:a5:84:d5:8f:c4:5d:00:0c:ea:1a:4d:23:a3:ac:70:67:
54:ca:03:f3:71:b9:eb:05:7c:27:2f:55:c0:70:66:81:48:42:
16:a4:f7:a3:98:56:84:5d:f2:b9:9f:d7:39:4f:d8:4e:26:d8:
c7:de:ac:3b:0e:bb:fc:02:79:a3:b8:01:c9:75:d3:a7:9e:a1:
0e:7d:8a:1e:b3:5c:e6:00:5b:45:1d:d9:45:9f:61:80:c5:9c:
c4:b9:42:5e:6f:f3:13:fc:c0:1a:e1:d4:e6:41:4a:10:ec:34:
d1:65:28:66:63:5d:a3:4f:54:79:cf:8e:4c:38:94:94:1e:a3:
8b:95:0e:82:10:de:d7:ca:1e:cd:03:f8:85:b9:cc:0d:e7:38:
48:24:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:31 2025 by rpki-client