Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/rj-U3K0qxsLEUE4pMkm4yAlWeyo.roa
File: rj-U3K0qxsLEUE4pMkm4yAlWeyo.roa (raw, json)
Hash identifier: CB3YpKXqiFkBw/tgkUoufO8QkHszkOUsJ0PbQ2do4B8=
Subject key identifier: AE:3F:94:DC:AD:2A:C6:C2:C4:50:4E:29:32:49:B8:C8:09:56:7B:2A
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 4155A43E
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/rj-U3K0qxsLEUE4pMkm4yAlWeyo.roa
Signing time: Sat 01 Jan 2022 11:57:57 +0000
ROA not before: Sat 01 Jan 2022 11:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13237
IP address blocks: 31.204.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096131646 (0x4155a43e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Jan 1 11:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae3f94dcad2ac6c2c4504e293249b8c809567b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:38:f1:1e:ad:2f:48:46:7e:35:ff:4f:36:
30:48:c1:93:d1:1e:09:4f:5c:33:ba:78:a2:fb:11:
c8:0e:a7:da:93:7b:8c:38:b4:bb:76:1f:2a:d6:d7:
7f:67:f4:30:79:ca:2b:1a:77:e3:98:ca:03:fa:cc:
f2:41:50:55:8f:17:d2:c8:d4:bb:9a:20:ea:c3:f7:
42:f3:3e:12:dc:24:e7:07:86:89:ea:2e:df:15:dc:
1c:44:53:49:51:05:1c:f1:7e:5d:14:12:6f:5a:4b:
0a:1b:0c:dd:60:0b:7b:52:18:1b:14:7d:c1:be:d7:
e1:00:a0:7a:58:3f:84:58:f3:d9:fb:50:dc:fe:92:
52:be:82:31:da:bf:e2:e2:95:4e:bb:2e:9c:04:03:
62:41:63:4a:61:41:e5:c2:a1:71:b3:68:51:3f:43:
0a:fe:72:63:6f:2a:0c:e5:0b:e5:76:a6:93:6e:cd:
c2:19:da:af:ae:d9:dd:6a:7b:85:ac:1f:3c:28:54:
23:ef:83:cc:49:8c:a7:db:4a:a5:01:c6:79:92:15:
53:b2:d0:09:8d:03:7a:0a:24:78:45:8b:cf:e6:80:
9f:a6:69:60:2b:a4:40:99:2e:b6:b5:17:03:12:0c:
eb:33:3a:03:49:b2:25:b8:04:5a:f5:d1:f7:11:82:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:94:DC:AD:2A:C6:C2:C4:50:4E:29:32:49:B8:C8:09:56:7B:2A
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/rj-U3K0qxsLEUE4pMkm4yAlWeyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d6:f1:0c:5b:9d:c7:70:23:49:7e:95:1b:fe:37:f1:73:73:
6a:87:01:8a:4c:39:04:10:61:9c:9e:9c:23:89:83:02:88:ba:
9a:0e:28:b8:a6:9d:b1:2c:2c:b1:c2:b7:ba:fc:aa:be:0c:33:
3d:07:bb:14:e2:db:ee:96:f7:1e:1b:6b:cb:27:ee:ed:39:fa:
e7:fb:57:ec:6a:c6:3e:25:0f:bd:a2:4f:69:de:e8:51:83:8f:
21:93:a9:87:e0:54:65:32:1f:14:92:3a:ef:31:23:78:3c:ab:
14:64:a5:dc:f0:fb:d8:ca:b9:83:8b:7d:6c:71:c1:19:5b:f3:
ad:e8:cc:c5:c0:24:52:83:86:37:d0:b0:ec:d1:1d:a2:df:76:
e7:91:71:f0:e8:6f:aa:1a:8a:55:d9:cc:8b:5b:ff:59:1c:ef:
36:53:1f:27:e0:d7:39:b9:bb:8f:37:5e:83:00:14:65:37:75:
d2:e7:5a:65:19:ee:e5:f7:d4:e0:d0:f9:ee:3f:db:1c:bc:99:
ec:67:91:c9:d8:ec:f3:85:e9:13:26:aa:eb:02:11:af:96:8e:
64:f2:b1:0b:69:0d:64:4c:ac:88:49:26:df:e3:2b:a0:86:b3:
33:6f:dc:3a:6a:7f:dc:22:98:e8:a1:ff:f8:b1:4a:9a:ea:b2:
ab:d3:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:42:15 2025 by rpki-client