Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/jsh_CKGwPXA47806nTfBjRejzno.roa
File: jsh_CKGwPXA47806nTfBjRejzno.roa (raw, json)
Hash identifier: zDPSIGDOR6ZzE2rb8lFIy+Vc6kXvuIUgjEkjvOGbMQA=
Subject key identifier: 8E:C8:7F:08:A1:B0:3D:70:38:EF:CD:3A:9D:37:C1:8D:17:A3:CE:7A
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C2AF2E4EB97402D070F4515ACD18C
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/jsh_CKGwPXA47806nTfBjRejzno.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216157
IP address blocks: 62.204.37.0/24 maxlen: 24
2a13:9300::/29 maxlen: 29
2a13:a700::/29 maxlen: 29
2a13:fe00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2a:f2:e4:eb:97:40:2d:07:0f:45:15:ac:d1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ec87f08a1b03d7038efcd3a9d37c18d17a3ce7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:d4:2a:35:7b:b3:03:f9:c0:e9:58:e0:10:
a0:af:e0:ec:c7:0c:a7:33:33:d7:e1:fe:9c:7f:8e:
8d:f3:ae:5f:e5:5d:40:ce:1b:05:37:76:1a:4c:31:
5d:72:33:34:68:d3:d9:d3:7b:89:0e:1a:92:af:b6:
41:7c:6a:db:a0:d4:8b:bb:9d:7e:ef:ea:59:ef:6c:
e7:41:5d:43:27:65:18:ed:b6:b4:a6:c2:94:a3:b5:
3e:7d:36:87:72:9c:65:dc:47:d9:97:54:0a:55:ac:
a9:fc:b3:40:cd:51:e9:33:98:10:d9:f5:1f:68:29:
07:b2:ae:30:b4:b4:fd:48:c2:1f:a5:f4:69:14:fc:
54:43:5f:51:68:d1:af:b6:a8:07:e0:b0:25:bc:4b:
e3:80:e2:c8:10:06:9d:31:ec:aa:d0:98:6c:bb:2d:
65:19:47:0d:68:80:96:6a:d3:48:16:28:97:c4:db:
47:39:a3:ea:46:f7:1f:13:09:e2:92:9e:5f:07:76:
2c:c9:95:a0:fa:08:c6:05:93:6f:94:6e:09:db:bc:
35:bb:ae:43:24:c2:86:44:95:c2:63:8a:f8:ef:b8:
4e:e8:52:5e:9e:6e:eb:be:84:41:bc:71:0f:4d:f9:
b3:5f:f4:ef:fc:06:da:84:79:f7:e4:da:3f:1c:96:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:7F:08:A1:B0:3D:70:38:EF:CD:3A:9D:37:C1:8D:17:A3:CE:7A
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/jsh_CKGwPXA47806nTfBjRejzno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
IPv6:
2a13:9300::/29
2a13:a700::/29
2a13:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
bd:e8:72:92:0e:22:3d:78:d6:9a:56:3a:df:e0:f7:46:95:bf:
ce:bd:c3:26:fa:12:6f:08:4c:1c:10:ed:cc:93:f3:bf:0f:68:
ab:c0:b4:df:71:df:65:e1:ca:0a:03:fa:6f:7c:f9:38:5a:bf:
50:ad:ba:23:4b:cb:4f:a3:41:a3:a2:49:30:ce:3a:73:01:25:
b4:48:c6:be:a8:e2:1c:3f:3b:35:2b:ea:ae:de:c9:c5:92:33:
76:3a:1b:a7:84:cc:cf:04:cd:9d:b0:00:55:a2:b6:b9:97:14:
10:74:7d:0a:01:5a:cb:6b:1c:bf:01:55:6d:04:a1:9b:19:da:
6e:1b:15:f7:76:68:f6:c7:fa:16:a7:99:c2:b8:a2:f7:f4:6d:
90:fa:78:3c:dd:e4:e4:b8:59:59:38:c2:a6:08:89:d9:8b:b1:
66:27:ca:7c:b3:cc:f0:08:05:cd:ad:5f:ec:d2:5a:49:4e:7c:
ca:ce:e4:d7:ba:16:83:7e:3a:d1:04:27:2e:49:ca:5f:77:19:
eb:c2:34:5a:b1:c0:ed:b1:f1:71:2b:dd:db:f4:97:f6:21:f1:
4b:f3:d3:ba:a0:93:bd:9b:fc:dd:f7:6d:e9:a2:45:10:c6:58:
51:a2:ba:ec:47:0f:ed:f6:80:b5:95:9b:ed:0c:bc:36:07:45:
93:d1:c3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:40:08 2025 by rpki-client