Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/SOBAES4j7h-D6nKfccoc2NpSr8A.roa
File: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (raw, json)
Hash identifier: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=
Subject key identifier: 48:E0:40:11:2E:23:EE:1F:83:EA:72:9F:71:CA:1C:D8:DA:52:AF:C0
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD5C47D031139E27BAA4D681E35D41
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/SOBAES4j7h-D6nKfccoc2NpSr8A.roa
Signing time: Thu 02 Jan 2025 07:49:08 +0000
ROA not before: Thu 02 Jan 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 109.107.145.0/24 maxlen: 24
2a0a:d6c0:145::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5c:47:d0:31:13:9e:27:ba:a4:d6:81:e3:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48e040112e23ee1f83ea729f71ca1cd8da52afc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:00:7e:b1:7a:59:f7:c5:8f:8b:d9:a2:de:
59:d7:67:27:a2:3d:55:02:f4:8b:7f:3b:33:a3:e6:
4f:83:aa:fc:1e:16:02:43:26:89:4d:91:89:ab:c6:
f1:97:9c:0b:e3:52:04:eb:0f:da:17:55:42:27:40:
b1:96:b4:32:9e:35:57:3e:f7:53:e9:7b:f3:1c:3e:
d5:0a:c4:b1:4d:d8:14:53:ec:df:a1:c2:ee:a0:75:
8e:01:78:32:16:c6:54:0e:b9:30:31:99:d7:a6:47:
b1:67:61:52:3f:84:ab:52:29:1c:6c:24:28:1b:24:
bb:49:bd:bb:c2:58:9c:97:7e:8e:d8:01:ed:2d:9f:
27:ae:38:4a:19:8f:db:57:fb:25:25:0c:f1:f0:93:
74:f2:e0:d8:fd:f0:8b:2a:b1:9d:82:fe:96:1a:6f:
a9:a7:dc:52:6d:f3:35:c8:f8:b4:c9:29:fe:df:13:
b9:ba:23:3a:15:3c:3b:1f:14:3a:43:73:11:00:6b:
ce:63:19:98:4a:cb:34:ff:85:cb:33:5b:df:c8:29:
94:55:56:cd:45:ef:f3:5f:aa:47:4a:37:cc:cc:51:
e3:31:7f:6a:07:a9:7b:37:f9:f1:6a:82:01:73:76:
87:34:8c:8a:2b:36:ac:8c:3f:fc:8b:ef:44:f7:1c:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E0:40:11:2E:23:EE:1F:83:EA:72:9F:71:CA:1C:D8:DA:52:AF:C0
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/SOBAES4j7h-D6nKfccoc2NpSr8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.145.0/24
IPv6:
2a0a:d6c0:145::/48
Signature Algorithm: sha256WithRSAEncryption
7a:ad:ce:4c:a9:30:d7:9c:39:25:e5:a1:a2:a3:2c:4e:e7:a2:
ce:22:05:b6:2e:03:68:af:28:0e:47:b5:0b:bb:32:70:db:3d:
ea:7a:0a:24:1b:57:9c:80:a7:bc:9f:ba:5a:0b:d0:96:75:0e:
82:ce:17:51:da:8e:6c:91:bd:70:ae:d9:ee:35:c9:51:1c:c3:
54:44:6e:60:20:e5:12:cf:76:a1:cb:d5:7c:ca:03:c6:f0:95:
60:33:eb:fe:ee:c2:71:27:77:da:ff:36:fe:00:e7:14:6b:e8:
ee:f2:f7:6e:bd:3f:fd:11:50:0a:82:86:04:65:3c:08:2d:bb:
d8:9c:4d:f7:52:b0:0c:18:f7:d3:fd:2d:2b:c9:ab:40:e6:75:
58:f8:fe:7f:ec:fb:a8:b9:75:94:9c:20:0a:26:d4:06:bd:28:
3e:cc:10:b4:31:2c:2e:90:38:c9:ee:0e:61:c9:a0:77:bc:a9:
cf:30:d3:26:2a:42:e5:c0:f7:ae:35:94:c2:67:09:fc:59:e2:
b0:1d:8f:e2:28:93:6a:07:47:52:0c:79:0d:b1:0a:ea:4d:6d:
e0:db:8f:ea:01:31:5f:1d:cc:72:bf:34:1e:41:9a:93:e1:3f:
cb:c7:14:10:4d:a8:ec:77:a2:f9:b3:54:f8:72:7c:96:7c:ef:
92:b7:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:39 2025 by rpki-client