Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/jJL_UCt1xKDnehMaxOeWEPnn1w4.roa
File: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (raw, json)
Hash identifier: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=
Subject key identifier: 8C:92:FF:50:2B:75:C4:A0:E7:7A:13:1A:C4:E7:96:10:F9:E7:D7:0E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 0194258F640225EB0DD4D22A041DF95DE947
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/jJL_UCt1xKDnehMaxOeWEPnn1w4.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210483
IP address blocks: 109.107.130.0/24 maxlen: 24
2a11:cd40::/48 maxlen: 48
2a11:cd40:1000::/48 maxlen: 48
2a11:cd40:2000::/48 maxlen: 48
2a11:cd40:f00d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:64:02:25:eb:0d:d4:d2:2a:04:1d:f9:5d:e9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c92ff502b75c4a0e77a131ac4e79610f9e7d70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:75:3f:ef:f2:d3:7d:03:bd:b9:2e:29:4b:
2a:f9:0c:26:37:af:23:d9:23:40:31:27:b5:82:40:
01:16:88:48:c6:2c:0b:1b:16:0d:15:c1:cd:4a:69:
9d:ac:0c:e4:b2:25:7a:4d:4e:d1:32:1a:bc:15:9a:
c6:3b:58:f6:82:81:03:c3:d1:31:3f:e3:a9:09:82:
d3:47:d8:97:43:71:f9:85:a7:61:b1:05:97:1c:00:
27:22:31:fb:93:fb:71:19:37:7c:11:c6:4a:7f:f6:
03:9a:a6:a3:8e:4f:b6:03:f0:80:01:ca:26:4e:60:
59:fd:74:68:48:50:6e:53:19:4e:49:d2:c5:46:31:
79:ce:ba:bc:27:f8:d6:46:9d:a0:7e:59:ac:cf:7e:
07:76:0f:8f:dc:99:f3:af:de:75:c7:2b:f0:48:89:
a9:48:1a:00:7a:91:63:b3:1a:38:48:ad:b9:08:b2:
c3:48:42:e2:c2:de:0d:9e:42:8b:20:0f:5d:4b:87:
38:58:78:31:0a:c8:68:d1:2b:28:59:5a:bb:39:29:
79:f1:ec:8f:96:da:ac:1b:13:89:29:ba:f5:46:59:
56:50:53:f5:15:4e:69:88:42:6e:f2:dd:bf:df:f3:
93:e5:b5:14:5c:0a:67:58:26:48:92:45:a3:1a:e2:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:92:FF:50:2B:75:C4:A0:E7:7A:13:1A:C4:E7:96:10:F9:E7:D7:0E
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/jJL_UCt1xKDnehMaxOeWEPnn1w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.130.0/24
IPv6:
2a11:cd40::/48
2a11:cd40:1000::/48
2a11:cd40:2000::/48
2a11:cd40:f00d::/48
Signature Algorithm: sha256WithRSAEncryption
33:25:3c:ed:9f:d4:3c:b7:35:1d:2f:62:76:ec:ef:d2:d6:bb:
4c:f1:23:cf:fe:1d:19:e1:9a:9a:f7:66:0e:d6:22:99:36:d7:
41:b4:d3:9b:33:f8:86:ca:19:73:1c:23:54:df:15:fb:ee:60:
bd:22:f1:a6:bb:7d:33:f2:4c:6c:00:aa:82:25:74:7c:76:7b:
4c:a6:f0:21:86:cb:31:f3:39:24:c9:0c:7f:e4:c9:82:9a:69:
e4:41:e8:23:b6:bb:3f:b3:1d:5a:8a:b2:50:5d:9b:54:f8:6a:
56:1d:32:07:1d:13:34:4f:c8:6e:6e:d0:e5:d8:1c:8a:a3:9c:
f8:f0:6b:03:ba:4b:16:49:4f:25:94:66:0b:68:17:d0:9e:3d:
a0:04:7d:0c:30:d3:40:c0:82:bc:6c:45:05:7d:ba:64:f8:ce:
6c:8a:53:7d:f3:3e:bb:fb:c4:25:61:ff:50:c0:0e:7a:a9:14:
81:f5:8d:e5:9e:db:a2:0d:38:7d:71:dc:2a:bf:23:b0:b3:82:
ad:49:5b:24:15:6d:7b:5a:fd:1c:26:37:72:4f:21:c2:42:32:
45:f9:fc:8f:13:4d:be:8f:5b:81:61:2e:94:47:a7:59:80:78:
64:6c:9d:d3:e0:45:18:26:16:f2:62:95:72:5e:fe:c0:fd:9a:
e5:da:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:24 2025 by rpki-client