Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/J4FmCv5fUufzgqGOX7WkWlHS_S8.roa
File: J4FmCv5fUufzgqGOX7WkWlHS_S8.roa (raw, json)
Hash identifier: xj3obSKXyF9oZLyTw9tXQMfssRjZBaZ8W30YyT+K8Vw=
Subject key identifier: 27:81:66:0A:FE:5F:52:E7:F3:82:A1:8E:5F:B5:A4:5A:51:D2:FD:2F
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 018849E32CB0961C39F120408EA88B39E951
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/J4FmCv5fUufzgqGOX7WkWlHS_S8.roa
Signing time: Tue 23 May 2023 18:33:24 +0000
ROA not before: Tue 23 May 2023 18:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398826
IP address blocks: 104.160.21.0/24 maxlen: 24
104.160.19.0/24 maxlen: 24
104.160.20.0/24 maxlen: 24
104.160.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:e3:2c:b0:96:1c:39:f1:20:40:8e:a8:8b:39:e9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: May 23 18:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2781660afe5f52e7f382a18e5fb5a45a51d2fd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:a2:d4:ed:55:0d:5f:69:49:22:76:e5:79:
1a:63:40:b6:a5:b8:0c:41:e8:b6:b2:eb:7c:f2:d8:
ce:01:11:e5:05:a4:27:01:82:74:b2:5c:96:d3:a4:
66:f7:0c:3d:9f:c2:27:40:7e:28:7c:f6:a4:6e:24:
41:e5:a4:a4:80:7b:b1:5d:d5:9d:8d:20:30:a0:1e:
74:a3:aa:b6:38:aa:a8:85:16:bd:44:dc:4d:fe:72:
fd:ed:e7:96:fb:a8:26:c3:8c:5d:09:06:df:c2:1c:
df:f8:ec:4f:8e:49:d5:bc:cb:c9:a9:92:72:13:1a:
7d:c1:45:3c:5a:51:ed:01:ba:48:c8:dc:54:32:58:
5f:43:71:21:f2:5c:94:10:5f:ac:e9:b8:50:91:14:
03:aa:cb:12:33:ce:bf:7d:a3:11:90:8c:1c:9b:31:
c0:94:a0:75:f4:ea:13:80:fd:e4:a1:ea:73:f7:34:
03:0c:5a:d7:0f:4a:ba:ec:5c:e6:61:72:12:4d:7a:
14:34:f0:91:cd:65:0e:2d:7e:dd:7d:dd:dc:10:19:
fb:94:31:f5:6c:87:8c:ae:5c:97:8c:f6:41:f2:d4:
40:59:b6:6b:07:42:e6:5b:8a:b7:00:ba:4f:62:ad:
01:27:40:b5:62:3d:d2:88:d1:30:e3:11:96:be:66:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:81:66:0A:FE:5F:52:E7:F3:82:A1:8E:5F:B5:A4:5A:51:D2:FD:2F
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/J4FmCv5fUufzgqGOX7WkWlHS_S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.160.18.0-104.160.21.255
Signature Algorithm: sha256WithRSAEncryption
03:c0:cd:d6:57:a1:9c:ee:1e:76:1b:3f:14:fe:ac:95:b7:82:
d7:2e:9f:0d:92:c6:48:39:5d:0d:8f:62:e3:7a:37:1f:9f:b2:
ea:9a:d5:f8:7f:85:72:3c:84:11:82:fa:49:a5:e7:0c:fb:04:
8a:49:34:a2:d6:39:bb:24:1a:83:87:41:5b:75:00:6c:6c:11:
9c:79:12:f6:44:d8:f4:1f:5d:32:dd:66:eb:54:7c:7d:65:31:
51:f1:d2:ba:83:1f:05:99:ef:23:27:65:08:b6:11:e1:20:e6:
0c:fe:62:67:93:77:19:86:40:12:93:26:af:8c:35:16:8c:3d:
6b:56:9b:25:22:51:74:93:71:35:fe:d0:36:34:f0:5b:f8:7f:
b5:ad:86:17:e8:18:1a:cb:04:0a:1e:21:c1:07:07:1a:8f:36:
d5:e3:84:94:d6:7e:b0:3b:7c:19:76:94:4a:14:40:c9:17:f5:
da:a4:ac:f0:b5:aa:de:55:da:30:5a:25:93:7b:de:e7:9e:e4:
59:89:14:45:dc:35:78:22:8d:02:32:c0:64:5c:a1:e8:8c:95:
76:64:d6:57:80:0e:c5:32:2e:5c:16:75:5b:0c:aa:1c:ac:59:
91:16:41:35:a5:b3:dd:c1:f3:f7:71:5a:ee:aa:84:91:81:8e:
a8:29:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:59:32 2025 by rpki-client