Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jvg-KWuYAZfkPpoyYCQz_A6AjS8.roa
File: jvg-KWuYAZfkPpoyYCQz_A6AjS8.roa (raw, json)
Hash identifier: 0uF2kwKLck/eSpjNV/ypD7FhRPQ0DwONbKtT4NJj8f4=
Subject key identifier: 8E:F8:3E:29:6B:98:01:97:E4:3E:9A:32:60:24:33:FC:0E:80:8D:2F
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D62A0B71B48D5396DE31E0C334B062C66
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jvg-KWuYAZfkPpoyYCQz_A6AjS8.roa
Signing time: Thu 01 Feb 2024 03:05:16 +0000
ROA not before: Thu 01 Feb 2024 03:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:62a0:b40a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:a0:b7:1b:48:d5:39:6d:e3:1e:0c:33:4b:06:2c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 1 03:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ef83e296b980197e43e9a32602433fc0e808d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:96:d3:db:fd:26:33:66:4c:75:14:f7:82:
46:10:71:63:de:0f:b1:23:7f:77:90:c1:24:21:c8:
57:27:04:a5:a5:f5:5c:85:86:ca:31:1d:cc:05:d9:
71:22:a4:ff:4c:d5:6b:b8:87:24:45:1a:bc:46:9b:
9b:3c:bf:6c:ad:ad:f2:ee:83:a0:48:fe:b0:91:9d:
dd:81:10:52:83:d1:2b:c4:3d:25:37:ce:77:ba:6f:
36:3d:98:e1:d7:65:bf:05:95:2e:42:60:e2:b9:98:
e9:c3:e5:f9:96:ce:da:c4:42:43:4a:05:ce:2a:b7:
32:9d:b4:71:cb:9d:94:5d:36:39:11:76:33:41:02:
15:59:04:39:08:4c:8b:ce:bc:3b:95:71:0c:d8:23:
e4:7e:6f:35:7c:23:58:13:08:ec:e2:c8:d1:bf:aa:
22:17:98:3f:03:4a:c3:a2:33:71:d4:fb:93:fc:9e:
4d:05:7d:4d:05:55:82:59:1a:7d:bd:c8:7b:8d:1b:
2a:69:e7:30:c8:20:bc:83:f4:58:f3:67:b4:a0:6c:
b0:bf:e6:f5:fb:ad:d3:1f:45:47:1e:7a:de:39:9c:
70:f8:01:0e:9e:8f:81:0c:6e:c3:67:82:f8:52:6c:
68:e2:b2:de:af:c7:ca:66:a4:f0:dd:15:04:86:0e:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F8:3E:29:6B:98:01:97:E4:3E:9A:32:60:24:33:FC:0E:80:8D:2F
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/jvg-KWuYAZfkPpoyYCQz_A6AjS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:ff:37:f5:9c:8d:b3:7c:52:3a:36:d0:42:6f:4a:21:34:75:
87:39:20:c8:19:2e:47:96:53:69:97:2a:83:53:2f:cb:ac:de:
09:ff:39:d4:7b:ee:b7:d8:a8:49:25:6d:67:82:1f:46:5f:40:
3c:d4:1d:a5:e0:d1:aa:4c:6b:89:9e:97:b3:1d:0a:4b:a3:52:
da:8b:8c:db:de:a9:15:34:47:0b:38:70:d9:cb:df:9b:3b:1e:
38:fc:91:97:7e:25:2d:c8:56:bf:ec:d8:e2:80:55:7d:d9:62:
8c:62:9b:f3:d2:42:cb:10:12:28:dc:f5:07:0d:98:42:1f:f4:
b9:44:c1:4a:63:28:84:6f:1d:4c:7b:d6:3f:2e:40:7d:0a:91:
5b:7c:b1:78:9e:31:50:59:45:c2:40:83:34:ca:03:7f:01:ee:
1a:f7:68:32:a5:78:84:6d:bf:5a:f8:3f:58:39:3c:09:b6:98:
35:90:c9:09:88:8a:1c:86:f7:6e:5e:1d:b1:75:cf:e5:49:40:
cf:fd:6f:f6:66:3f:e5:8b:6e:1b:8c:9c:b6:b4:da:2b:61:c3:
6e:cd:3c:48:87:26:52:e5:d6:72:7f:42:ff:74:37:3b:04:86:
70:6f:09:7f:37:ba:94:db:51:97:f9:f9:7e:30:de:2c:94:90:
ac:76:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:08 2025 by rpki-client