Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa
File: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (raw, json)
Hash identifier: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=
Subject key identifier: 8E:A7:DB:A8:E7:B7:0E:78:F6:7D:73:A1:67:D2:CE:1F:2A:42:14:02
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 019420D59A6528BC2A7356802F23D6390D5E
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208284
IP address blocks: 212.70.172.0/24 maxlen: 24
212.70.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9a:65:28:bc:2a:73:56:80:2f:23:d6:39:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ea7dba8e7b70e78f67d73a167d2ce1f2a421402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:ab:14:2d:8c:97:76:9e:70:32:21:a3:1a:
09:90:f8:b1:d1:1a:4c:58:a3:04:9a:54:6b:2f:43:
ec:0d:08:80:fd:10:81:89:03:42:05:0c:4c:f1:8e:
93:c1:02:4d:80:a5:69:62:49:4b:f2:c3:25:57:49:
7e:c4:bc:5e:f2:d0:f9:70:99:2a:36:42:80:5d:72:
61:03:ca:a1:ae:a3:c7:55:4e:3e:03:62:9b:31:56:
54:51:e2:25:ec:a3:a0:e0:a4:9b:73:81:90:44:05:
66:60:70:62:ce:ba:40:11:00:16:45:74:de:f0:b3:
10:04:9d:35:8a:0c:61:1b:ae:f6:69:13:7a:9d:7c:
8f:07:78:96:8a:75:af:a3:11:68:76:7d:b5:69:ba:
09:4e:28:41:2e:fb:80:5a:84:f5:84:7f:cf:9d:82:
cf:56:aa:86:11:ba:a3:4a:02:bc:94:e7:f8:12:3e:
e9:93:4a:7f:97:5b:0e:d3:ec:98:de:98:38:a0:dc:
b2:c7:b0:cc:a4:7b:72:03:84:95:55:66:2c:b4:c5:
69:1a:bb:df:73:8a:61:3e:6d:7b:fe:86:83:1d:98:
57:56:ef:fb:77:f1:43:9e:8e:b8:33:71:81:fd:a4:
ec:27:02:98:f3:b9:77:36:fa:53:e6:01:cf:c8:31:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:DB:A8:E7:B7:0E:78:F6:7D:73:A1:67:D2:CE:1F:2A:42:14:02
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.172.0/24
212.70.174.0/24
Signature Algorithm: sha256WithRSAEncryption
61:16:64:bb:99:fd:46:2b:4f:e1:ee:af:91:a4:08:16:85:f9:
c5:f9:ec:c3:36:f7:af:07:46:cb:d3:b8:a9:f5:f6:a3:17:59:
84:3e:15:38:33:d2:39:13:04:18:e2:fa:04:43:2d:37:98:98:
dd:d3:71:d3:8c:25:2e:ff:56:bc:b5:c8:72:d8:cd:24:66:f9:
1b:26:46:b0:c9:1f:41:47:2f:e9:4c:9d:e8:19:a5:cc:e5:2d:
72:b9:42:b0:21:f3:5e:d0:8c:51:36:30:e3:a2:7b:7f:5d:ac:
eb:da:a7:a6:f0:73:38:f4:4e:d4:d2:3d:fd:4b:35:03:8f:d6:
e5:18:db:aa:2f:57:30:7f:29:41:e2:a4:23:2e:63:3a:37:36:
f5:51:e7:f3:74:15:c4:d3:05:3d:88:19:2b:b7:15:18:a6:25:
08:95:9c:2a:c6:95:8b:c6:70:9b:a6:72:02:93:7f:63:eb:ba:
a7:46:da:0f:6c:d5:46:0d:11:72:67:34:ce:f1:2a:c0:05:88:
cf:12:b0:4b:57:f8:e9:78:84:6c:d1:d1:1b:80:ca:51:12:fa:
9f:54:ff:9b:11:a3:e8:51:24:3e:b8:a2:35:15:fd:45:e2:cb:
3f:86:74:57:d3:ce:14:3a:6a:34:46:c6:e1:81:99:6d:40:07:
fe:1c:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net