Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa
File: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (raw, json)
Hash identifier: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=
Subject key identifier: 8E:A7:3E:09:24:30:5B:EA:90:ED:30:04:5C:E5:7E:D0:39:61:C8:7A
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 01941FFA70E89882158815EFDE7490A54487
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9158
IP address blocks: 212.6.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:70:e8:98:82:15:88:15:ef:de:74:90:a5:44:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ea73e0924305bea90ed30045ce57ed03961c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:92:36:9f:3f:53:d8:c5:8b:a2:41:8c:1b:
dd:64:1b:51:0c:6d:f1:ee:0c:40:62:ce:96:2d:54:
89:db:59:61:5c:2d:7d:68:87:80:91:d5:ff:62:a4:
d0:fb:8d:ec:67:f9:d9:14:fd:ec:26:c5:98:52:a4:
11:b8:c3:c1:58:b2:cb:ee:da:98:1f:b3:6d:5a:d9:
ea:80:e2:56:c1:f6:63:74:88:c4:6d:91:41:72:20:
62:e5:31:ff:51:45:50:2c:90:9a:0c:75:e5:14:d3:
73:07:9a:ae:28:87:64:50:fc:01:8d:4e:81:22:62:
c9:c8:aa:2d:ac:72:47:29:7d:fa:60:e6:e8:03:ed:
ae:6b:0b:71:54:0b:c0:9e:f1:70:d8:28:05:35:74:
fa:49:8e:b6:c1:d7:92:9e:35:57:fd:70:83:be:96:
4c:41:b0:08:5d:c8:ec:f0:0a:e0:76:d7:f6:81:25:
6f:43:64:9f:59:c2:45:77:89:f7:0c:30:c2:07:34:
99:c8:6c:83:54:fc:3d:b3:d7:64:6f:d6:42:85:f0:
6f:f2:52:05:10:99:c4:23:a3:31:ae:21:c0:6f:2d:
87:31:77:4d:6d:1e:8b:2b:82:ba:15:48:26:36:34:
05:4c:0c:e2:02:39:cc:c6:96:15:7e:7c:41:89:00:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A7:3E:09:24:30:5B:EA:90:ED:30:04:5C:E5:7E:D0:39:61:C8:7A
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.35.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6b:ab:64:e5:f7:29:31:00:99:e4:11:7f:3a:b5:00:78:4c:
16:76:d1:1f:70:78:72:d0:fe:0e:d3:87:44:ba:94:38:51:ec:
c3:53:e1:46:e2:5c:f8:e2:45:05:28:69:dc:4f:4e:92:1c:11:
ac:d9:e6:82:27:8c:50:ff:2a:e0:6e:3a:ba:db:3d:43:bc:cd:
ff:25:91:ab:03:6f:1c:e7:82:06:f4:61:31:69:04:85:9d:fb:
78:be:4f:bf:4a:6d:50:29:b8:c6:97:bb:91:30:90:50:10:35:
7f:7f:17:a9:c5:88:d2:a5:be:a7:48:25:3e:30:a5:c4:21:f7:
fc:23:c3:fc:19:b7:cf:b7:4c:74:18:2e:ed:bc:0d:89:7e:44:
93:d7:5f:b3:c0:82:4a:6b:e6:fd:a8:ae:2f:10:7f:65:34:26:
4c:dc:cb:71:96:ba:ad:68:24:65:2e:2c:21:66:a9:a6:5b:48:
74:e4:d3:7c:de:06:96:e3:4b:09:a4:ea:82:fd:82:cd:d0:4d:
2b:17:ef:da:10:97:d6:ad:05:72:8e:5c:0c:cd:cc:96:49:47:
74:6a:a2:66:71:67:89:56:25:1f:6a:79:0d:bb:bc:1a:14:e5:
24:b1:df:17:90:d4:76:eb:01:46:41:2f:1f:e5:b9:a7:41:98:
37:cb:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net