Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0d2b6c-abd7-43bb-97b7-4596d65b54f8/1/JqVquZjTipsunadxjcla98kpq2g.roa
File: JqVquZjTipsunadxjcla98kpq2g.roa (raw, json)
Hash identifier: gM3aJeps3c1I2igVNDMvNh3cDnlqkQawG8XRFBKqfpU=
Subject key identifier: 26:A5:6A:B9:98:D3:8A:9B:2E:9D:A7:71:8D:C9:5A:F7:C9:29:AB:68
Certificate issuer: /CN=9e962a44217b8ed45d0e567108313f04bbf050e5
Certificate serial: 01825D95A1570DD5F48155487294F06BE479
Authority key identifier: 9E:96:2A:44:21:7B:8E:D4:5D:0E:56:71:08:31:3F:04:BB:F0:50:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npYqRCF7jtRdDlZxCDE_BLvwUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0d2b6c-abd7-43bb-97b7-4596d65b54f8/1/JqVquZjTipsunadxjcla98kpq2g.roa
Signing time: Tue 02 Aug 2022 08:04:23 +0000
ROA not before: Tue 02 Aug 2022 08:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28863
IP address blocks: 109.234.168.0/24 maxlen: 24
109.234.168.0/21 maxlen: 21
109.234.170.0/24 maxlen: 24
109.234.169.0/24 maxlen: 24
109.234.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:95:a1:57:0d:d5:f4:81:55:48:72:94:f0:6b:e4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e962a44217b8ed45d0e567108313f04bbf050e5
Validity
Not Before: Aug 2 08:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26a56ab998d38a9b2e9da7718dc95af7c929ab68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:b3:e8:a9:ca:aa:4c:30:b1:e2:d3:ac:b5:
38:fa:16:20:1a:8d:b3:56:c7:3b:af:d8:2f:a9:1c:
f0:3a:a2:c3:a6:1c:f8:ea:ae:51:8c:6b:b7:de:79:
c0:ac:82:aa:48:a5:0a:72:17:57:c6:10:02:02:9a:
ea:fc:fb:57:64:0a:f7:20:ec:e7:a1:57:66:a8:eb:
32:77:d4:6e:c6:db:24:da:de:04:66:12:4c:5b:1d:
d9:7e:bf:6b:b9:c8:94:4b:fa:11:fa:a3:57:2f:b0:
19:ec:fb:bb:a0:13:fd:da:a8:52:01:d0:76:b1:74:
33:47:26:80:cd:67:3d:c0:a1:cf:0a:ba:c3:7c:08:
d0:21:07:b1:12:f9:04:38:1f:17:80:07:c3:15:81:
9b:1b:1d:81:05:90:51:ec:86:4d:00:ab:3b:c7:79:
2b:fd:b7:06:a5:20:03:21:51:90:ea:b4:d6:dc:14:
ec:a5:d9:bc:c8:50:da:20:d1:5b:26:24:cb:38:42:
47:63:64:87:e6:c8:35:8a:39:79:ca:3b:ff:1c:58:
46:79:5b:78:94:be:94:f4:f2:57:7d:ff:dc:c6:f1:
fe:e1:44:d6:b2:b3:01:e4:99:92:5a:a2:5b:29:b0:
57:74:e6:98:b6:7f:fe:1b:5e:db:44:35:1d:56:a1:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:6A:B9:98:D3:8A:9B:2E:9D:A7:71:8D:C9:5A:F7:C9:29:AB:68
X509v3 Authority Key Identifier:
keyid:9E:96:2A:44:21:7B:8E:D4:5D:0E:56:71:08:31:3F:04:BB:F0:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npYqRCF7jtRdDlZxCDE_BLvwUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0d2b6c-abd7-43bb-97b7-4596d65b54f8/1/JqVquZjTipsunadxjcla98kpq2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0d2b6c-abd7-43bb-97b7-4596d65b54f8/1/npYqRCF7jtRdDlZxCDE_BLvwUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.168.0/21
Signature Algorithm: sha256WithRSAEncryption
00:85:3d:a5:e6:7a:e5:ae:39:e8:cf:b0:bd:e7:fb:e8:a5:5c:
8a:87:f7:ce:25:07:bc:82:cc:44:b5:cd:67:c3:d8:c5:4f:22:
1e:ce:18:6e:b3:4f:28:ec:6b:4f:bb:ba:68:70:bf:86:a0:7b:
74:68:06:97:be:fb:cc:93:71:9a:6d:d3:3c:15:4e:fa:56:16:
55:79:ea:95:d4:52:92:61:c2:82:c3:b3:93:4d:5c:e8:0c:ab:
47:70:09:b6:8d:37:88:39:8b:ea:50:83:36:a6:97:67:53:3c:
bf:11:98:9c:8b:e1:3d:d2:5e:99:63:77:69:79:e8:71:19:ec:
c5:01:ae:0f:21:7e:2e:db:64:6b:c0:ce:f5:c8:a6:dd:28:54:
3f:41:85:ff:e5:43:81:12:32:b5:2e:6d:1a:0e:48:e3:32:41:
df:ad:4e:62:73:18:ba:e0:b5:0d:1e:1d:71:2d:82:b2:67:14:
bb:d4:9a:33:d6:88:b0:94:e9:4b:0f:44:b0:b8:a7:36:3a:30:
c0:9e:59:b9:e7:fe:d8:20:14:94:6e:8c:2a:f5:2b:2c:72:22:
21:ab:a7:0b:a8:ef:14:9a:80:fe:68:b3:87:b3:7f:3e:ef:93:
85:f8:fd:7a:80:b5:b2:e4:7f:46:4c:2e:e4:91:d3:61:7e:0c:
89:43:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:04 2025 by rpki-client