Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ja-cibe9_UbAvkUQdxbaO1zzoCc.roa
File: ja-cibe9_UbAvkUQdxbaO1zzoCc.roa (raw, json)
Hash identifier: Xwssp3KnHrAVT13QUShJ//HKEbGzIZeZz4kK33xDpco=
Subject key identifier: 8D:AF:9C:89:B7:BD:FD:46:C0:BE:45:10:77:16:DA:3B:5C:F3:A0:27
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D41CC1C08B513EC2CB26F45F387C26DF5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ja-cibe9_UbAvkUQdxbaO1zzoCc.roa
Signing time: Thu 25 Jan 2024 18:05:11 +0000
ROA not before: Thu 25 Jan 2024 18:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:41cb:3ba3/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:cc:1c:08:b5:13:ec:2c:b2:6f:45:f3:87:c2:6d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 18:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8daf9c89b7bdfd46c0be45107716da3b5cf3a027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:32:26:f1:b1:06:4f:9f:4b:be:27:89:9d:
50:f4:b3:39:37:ec:17:57:0a:b8:7e:62:35:fa:ef:
31:4f:c7:be:ef:57:76:cf:0e:cf:31:74:1c:11:f1:
64:7b:5c:b6:75:7d:24:44:3f:77:90:12:f3:2f:5b:
31:65:75:14:54:ff:2c:90:51:ce:77:1d:c0:89:52:
6e:66:9d:37:d7:09:52:dd:15:ad:e5:3a:56:d7:59:
dc:f1:35:66:54:a6:66:7e:b3:7a:2c:38:02:19:e0:
5b:68:87:a8:23:83:71:aa:e2:2f:63:a5:93:31:9c:
48:65:34:37:35:9a:53:b1:59:68:a4:c5:4e:bd:ad:
1c:7a:d2:68:97:ee:10:08:a1:cd:a1:ba:6b:44:8f:
84:db:00:1d:3f:be:49:51:95:f1:05:49:d0:e6:f5:
95:ca:09:0c:93:49:0d:bf:5f:43:02:83:85:89:05:
cd:87:ae:28:0d:5c:97:bb:0c:f5:38:be:f6:52:9d:
34:71:8f:8d:11:0b:36:e2:9d:8b:96:a7:2c:b6:29:
30:d3:7d:6c:05:59:bf:8f:70:77:cf:df:de:2c:30:
c3:1b:69:02:a4:14:6d:5c:7e:3f:50:88:08:81:22:
df:39:bf:de:dc:c7:06:33:f6:fd:01:5a:01:26:4b:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:9C:89:B7:BD:FD:46:C0:BE:45:10:77:16:DA:3B:5C:F3:A0:27
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ja-cibe9_UbAvkUQdxbaO1zzoCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:c3:e7:2e:30:c9:59:3a:50:48:f4:f1:5f:92:eb:f7:c0:42:
58:1b:03:28:d7:e9:87:c5:1a:2a:ab:31:2f:21:d2:4b:15:f4:
69:9d:44:94:ff:11:21:29:2c:b3:8a:cc:c7:5a:75:77:8c:89:
26:76:84:e5:95:89:09:bc:26:e1:b3:88:ea:44:04:a5:71:71:
35:67:76:71:e0:ec:7c:34:d9:3f:56:46:de:50:7b:c5:0b:c4:
de:5b:45:7a:c9:97:b2:9b:d4:46:ab:09:d0:9f:9e:6f:c7:02:
2c:f8:78:5a:60:b1:a2:3d:d2:8d:a6:a6:f0:13:c8:cf:65:c0:
c0:45:4a:f1:f0:09:e9:c7:47:dc:c6:07:1f:e5:9f:1f:08:4d:
64:46:10:39:5e:4a:0c:77:31:cd:8f:93:41:e7:19:7f:6e:cf:
1c:f2:e7:4c:12:34:c7:3d:07:65:7a:b9:16:a3:d2:2f:d4:4d:
22:e7:0f:4e:66:93:d5:02:38:05:52:d2:d2:a2:64:84:74:64:
20:96:2b:5a:11:f1:29:8b:66:6e:47:11:38:c4:ba:b5:17:4f:
63:f4:41:ac:db:8f:9d:2a:ea:92:ef:e7:85:5a:ad:de:48:35:
aa:1f:af:be:96:60:51:95:51:91:e7:67:c5:98:73:c9:e0:03:
61:37:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:55 2025 by rpki-client