Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/japn8Fzr_PQ3MY3LIrCrC5TMji8.roa
File: japn8Fzr_PQ3MY3LIrCrC5TMji8.roa (raw, json)
Hash identifier: juHp9aV5ugWJ34zp5/cnMlFrnhxwWQNFv+1kxbqSnbE=
Subject key identifier: 8D:AA:67:F0:5C:EB:FC:F4:37:31:8D:CB:22:B0:AB:0B:94:CC:8E:2F
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01834BEA45662A83B9C37ADCD6DD4AE12D39
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/japn8Fzr_PQ3MY3LIrCrC5TMji8.roa
Signing time: Sat 17 Sep 2022 14:46:27 +0000
ROA not before: Sat 17 Sep 2022 14:46:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400039
IP address blocks: 85.209.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4b:ea:45:66:2a:83:b9:c3:7a:dc:d6:dd:4a:e1:2d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Sep 17 14:46:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8daa67f05cebfcf437318dcb22b0ab0b94cc8e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:8c:9a:40:52:84:64:a5:f5:d9:1f:77:6c:
21:81:23:a5:06:58:79:5d:b2:63:db:2a:3f:44:52:
34:76:2f:56:0f:3a:44:a6:90:15:59:7e:5d:13:5a:
af:59:e9:e8:71:00:cd:d7:51:21:7f:48:60:bd:78:
6a:8f:1c:5f:26:37:aa:a7:19:e2:3d:33:ea:68:11:
fa:43:8c:31:9a:17:f1:c9:3c:ce:0a:66:89:fd:de:
c0:83:8d:6a:7c:d5:e8:89:83:d7:b0:8f:16:9f:c1:
46:88:07:fe:05:36:ab:4d:23:e3:45:6e:12:3e:b1:
20:df:1f:9b:57:ad:5e:81:9f:94:94:13:fe:94:7d:
98:d8:c1:01:0f:0e:4f:b6:65:8d:f7:78:05:11:0b:
4b:06:0f:6a:b3:64:09:df:e2:d5:f4:cb:f7:54:09:
81:fb:27:84:b1:f6:60:d7:c3:62:3e:86:7c:47:7a:
3a:a5:b5:43:60:c4:c5:2a:d3:1d:62:e4:c4:0d:d8:
48:fd:71:b9:91:05:ff:53:19:81:fe:67:75:98:62:
67:d8:e2:5f:4d:73:4e:48:5f:d1:dc:d2:b6:b2:f2:
d0:64:0c:55:1f:4b:20:ca:ca:16:46:57:4a:43:2a:
bb:82:91:2c:a4:cd:7c:70:1a:30:93:f4:fe:09:e4:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:67:F0:5C:EB:FC:F4:37:31:8D:CB:22:B0:AB:0B:94:CC:8E:2F
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/japn8Fzr_PQ3MY3LIrCrC5TMji8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:78:cf:c3:df:c6:b5:d4:6e:a5:22:61:8f:8f:51:a2:35:71:
9d:4f:08:70:5d:33:66:60:0c:bd:47:85:65:3f:83:26:f5:1c:
e1:98:7b:a5:60:b5:6d:ab:15:c7:ae:2d:12:32:65:16:80:6d:
e3:82:97:ea:a7:78:8a:c9:e7:23:52:10:86:b7:82:ca:77:f9:
0e:0e:77:4e:77:f9:1f:c0:44:96:4e:ac:e0:43:49:a8:97:f1:
dc:d9:4e:b2:f9:86:87:75:ad:0a:2b:1b:0a:48:bc:ee:86:af:
9a:42:56:35:c5:83:79:1c:a8:41:9e:4a:7c:3b:35:99:f1:ac:
5b:73:37:ed:3f:41:a6:2f:43:51:d8:d8:2d:fd:65:7a:5b:7b:
45:6c:28:07:bd:1d:a1:cc:0b:86:57:a4:c9:a4:47:9e:cf:92:
eb:2f:e6:18:69:11:f8:a5:7f:f5:c5:7b:95:ff:3e:80:16:c0:
71:c6:da:5f:f0:18:d9:f8:04:18:52:72:30:21:13:98:c5:26:
46:57:ae:dc:91:3c:17:81:c8:5c:c4:61:d3:7d:a8:f5:d0:99:
eb:00:2d:b6:39:5f:41:d5:20:b1:00:f6:cd:ba:ce:ad:ad:3a:
cc:a7:91:a4:c9:1f:f8:54:eb:82:9e:d8:cf:21:75:af:2d:05:
1b:42:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:28 2025 by rpki-client