Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/JZQSwG4wbJPMZQTbI1xSGViuvto.roa
File: JZQSwG4wbJPMZQTbI1xSGViuvto.roa (raw, json)
Hash identifier: 7nxSYve4K7+DiIBeaX8vSWVp7u4kFJYyJFHRolTK/UI=
Subject key identifier: 25:94:12:C0:6E:30:6C:93:CC:65:04:DB:23:5C:52:19:58:AE:BE:DA
Certificate issuer: /CN=8819956ddceae022cfe123da373c6b111640368d
Certificate serial: 0194228E17A3D7AFB53679A85F5F20D72839
Authority key identifier: 88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/JZQSwG4wbJPMZQTbI1xSGViuvto.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2600
IP address blocks: 212.109.224.0/24 maxlen: 24
212.109.225.0/24 maxlen: 24
212.109.226.0/24 maxlen: 24
212.109.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:17:a3:d7:af:b5:36:79:a8:5f:5f:20:d7:28:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8819956ddceae022cfe123da373c6b111640368d
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=259412c06e306c93cc6504db235c521958aebeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:dd:01:5c:46:af:30:1b:b8:0e:ae:9d:f0:
91:d7:1e:df:f9:ed:3a:88:14:89:23:f2:18:86:90:
28:84:c8:ca:35:34:6e:19:f5:2d:f7:23:07:b7:e2:
5e:27:a0:05:9f:06:62:0c:cc:11:22:86:ce:11:5a:
87:4f:05:fb:15:e3:c8:8a:61:fa:dc:c5:fd:3b:37:
b9:fa:8b:e1:9a:81:20:4d:05:74:11:70:f9:63:6b:
56:3e:fa:dc:59:59:17:5f:b4:51:9f:d9:0f:2f:28:
5a:df:6b:34:bf:0f:b1:83:b7:bf:9c:3b:c5:18:60:
10:6f:54:92:0d:bf:65:30:d9:92:34:51:5c:ac:23:
ab:e9:54:93:10:51:24:dd:32:6d:21:03:a6:c6:5d:
1d:41:7e:e0:5d:31:14:c9:f2:d9:90:0d:40:f8:c3:
12:05:2f:86:4b:1c:9e:ce:0a:f7:c3:d6:ab:3a:51:
a7:dd:a5:61:b2:bb:06:1d:2f:f8:cd:07:40:98:a6:
eb:cd:86:ed:b1:f8:38:8c:b7:2b:c5:65:10:5e:ad:
40:50:ff:78:b6:9d:36:9b:be:dd:89:cb:0c:e5:cd:
06:83:dd:c7:b9:86:fa:0a:e1:de:7a:29:f1:7c:42:
a8:53:95:7c:a9:64:f0:84:81:38:b7:2a:b4:ec:22:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:94:12:C0:6E:30:6C:93:CC:65:04:DB:23:5C:52:19:58:AE:BE:DA
X509v3 Authority Key Identifier:
keyid:88:19:95:6D:DC:EA:E0:22:CF:E1:23:DA:37:3C:6B:11:16:40:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBmVbdzq4CLP4SPaNzxrERZANo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/JZQSwG4wbJPMZQTbI1xSGViuvto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/988768-f17b-4f59-be09-2deb14c290ed/1/iBmVbdzq4CLP4SPaNzxrERZANo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.109.224.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:52:28:1d:db:af:62:e2:ee:8f:f6:75:01:b6:7a:4b:84:37:
bd:51:38:07:a3:54:7a:6c:e3:14:aa:06:3a:63:b2:b1:37:03:
bf:52:86:c4:19:3c:3a:34:53:a6:3e:d8:5e:1c:74:29:bb:1f:
d7:24:c8:da:54:bf:2f:91:b0:24:f2:45:65:4a:72:16:ba:77:
89:d4:37:61:13:43:cd:a2:c6:8e:a3:69:31:f7:a1:9b:e9:8b:
23:5d:a1:d7:d8:a1:7e:18:fd:3b:87:6a:ef:fd:39:50:b2:0f:
ff:e0:d3:e7:cb:f3:98:53:f4:a9:ac:2b:df:64:95:9b:40:bf:
69:ce:dd:5a:c6:ac:08:4c:ed:01:2c:5e:26:73:8e:23:23:d4:
c9:69:d5:b7:e1:58:cd:ed:05:3f:e7:7e:ab:86:14:bf:1b:13:
11:c7:80:c9:4e:03:28:63:4a:5c:4f:c0:f9:4a:e0:17:01:02:
1b:bb:d2:5c:f1:f7:1d:c7:df:74:d0:ec:f2:6e:38:71:9b:61:
4f:7f:3b:51:3c:42:e6:1f:79:1d:49:bc:84:0b:10:8d:d1:1e:
12:44:6c:20:f9:f7:3e:94:07:31:cb:34:f9:ba:d2:68:1a:fa:
25:0f:ca:7a:88:43:01:df:35:ed:95:8e:d3:d9:df:6c:e2:d4:
12:6f:9d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:18 2025 by rpki-client