Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/js5Wj0_LfZK6hVwOB6z7DllR8v8.roa
File: js5Wj0_LfZK6hVwOB6z7DllR8v8.roa (raw, json)
Hash identifier: +lIa449F+mw/MMhVCpoBsf7U7evC5C8lBS0SNk+vPBU=
Subject key identifier: 8E:CE:56:8F:4F:CB:7D:92:BA:85:5C:0E:07:AC:FB:0E:59:51:F2:FF
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 0184963CC8D55483ADB8BD385CF722B0E769
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/js5Wj0_LfZK6hVwOB6z7DllR8v8.roa
Signing time: Sun 20 Nov 2022 18:11:16 +0000
ROA not before: Sun 20 Nov 2022 18:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201925
IP address blocks: 109.207.104.0/24 maxlen: 24
109.207.108.0/24 maxlen: 24
109.207.107.0/24 maxlen: 24
109.207.106.0/24 maxlen: 24
194.126.165.0/24 maxlen: 24
194.126.166.0/24 maxlen: 24
194.126.167.0/24 maxlen: 24
217.117.132.0/22 maxlen: 22
185.165.151.0/24 maxlen: 24
2001:67c:2fd0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:96:3c:c8:d5:54:83:ad:b8:bd:38:5c:f7:22:b0:e7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Nov 20 18:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ece568f4fcb7d92ba855c0e07acfb0e5951f2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:83:d0:44:ab:da:ad:b9:6c:af:66:7a:3c:
d9:4f:eb:16:4d:02:27:6e:8d:a9:53:91:d5:f4:6b:
c6:98:ce:6a:14:ab:e2:54:23:8f:6d:c8:ea:df:7d:
1e:82:f8:a4:09:e3:0e:b7:18:a2:b5:3c:a0:97:9b:
9f:c8:bd:d2:e2:71:67:4e:9a:bb:48:d2:e2:7f:57:
e3:fc:25:bb:9f:ea:ed:ef:95:d7:86:b4:33:eb:42:
35:7a:25:ac:fa:24:aa:b2:ff:1d:da:6f:ea:5b:1f:
bd:0d:76:6c:51:18:1c:81:26:0c:f4:91:15:a3:48:
3b:8f:bd:dc:74:b3:31:54:b6:ec:6d:1b:15:c2:08:
59:7d:2e:83:5b:0f:38:68:2c:87:6d:e3:48:aa:8a:
5a:5c:50:35:01:03:90:53:87:ae:3b:52:16:34:e9:
39:83:1b:06:74:b2:2b:13:f0:d3:48:4d:02:f0:9e:
4c:00:13:0c:35:42:6c:ee:8d:c5:4f:3f:ed:de:e0:
78:ca:54:6b:ae:43:59:90:cb:2d:ed:f5:b2:5c:d6:
c3:80:a6:a1:3b:b4:c7:f3:d4:67:d4:21:48:00:43:
93:99:49:25:24:4f:f8:e0:30:84:65:b6:5c:7c:3f:
43:f8:05:f4:fd:12:a2:45:08:94:28:63:63:20:31:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CE:56:8F:4F:CB:7D:92:BA:85:5C:0E:07:AC:FB:0E:59:51:F2:FF
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/js5Wj0_LfZK6hVwOB6z7DllR8v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.104.0/24
109.207.106.0-109.207.108.255
185.165.151.0/24
194.126.165.0-194.126.167.255
217.117.132.0/22
IPv6:
2001:67c:2fd0::/48
Signature Algorithm: sha256WithRSAEncryption
77:cb:51:d1:96:ca:33:8e:db:83:fa:0c:a5:b2:1a:ce:03:8e:
b8:f9:57:b4:6c:7d:e9:f4:62:04:f5:3b:75:b9:7c:09:03:82:
88:16:15:1f:9e:ce:e4:02:20:ea:ac:4b:09:07:1c:ec:5c:1e:
92:06:02:58:49:04:b4:08:16:31:60:43:5b:53:08:ba:31:21:
6d:1e:8c:42:39:37:0d:e2:26:e5:fb:53:5c:53:ed:aa:0e:9e:
01:87:cc:93:56:a9:1b:83:0a:c4:90:2c:b2:bc:1d:6a:63:85:
61:3c:3d:22:8f:b5:eb:82:5e:23:52:26:96:09:08:f6:cf:72:
1f:91:5d:4e:a7:d9:87:c9:5b:d9:3c:ad:75:c1:e0:9c:0d:a1:
83:25:7b:3e:89:c4:6d:57:93:f2:40:b5:85:7e:32:3c:ab:8b:
db:7e:ea:bf:fc:4e:a0:d6:7a:b7:fe:fc:ef:53:8b:bd:65:51:
71:6a:0e:7d:cb:f8:52:22:a0:1d:87:34:04:b1:fd:34:a3:90:
ca:df:a6:fd:0a:39:ca:59:0c:20:f3:ea:29:07:9d:b4:3c:55:
e3:3a:bf:46:d1:f0:db:15:06:2d:dc:7d:f9:e3:e6:c2:91:bc:
2a:03:6f:56:aa:f6:d6:71:44:d9:a8:8c:52:9a:f2:a5:1e:22:
0d:90:65:d5
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAYSWPMjVVIOtuL04XPcisOdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx
NmMzMmEwHhcNMjIxMTIwMTgxMTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWNlNTY4ZjRmY2I3ZDkyYmE4NTVjMGUwN2FjZmIwZTU5NTFmMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleiD0ESr2q25bK9mejzZT+sWTQIn
bo2pU5HV9GvGmM5qFKviVCOPbcjq330egvikCeMOtxiitTygl5ufyL3S4nFnTpq7
SNLif1fj/CW7n+rt75XXhrQz60I1eiWs+iSqsv8d2m/qWx+9DXZsURgcgSYM9JEV
o0g7j73cdLMxVLbsbRsVwghZfS6DWw84aCyHbeNIqopaXFA1AQOQU4euO1IWNOk5
gxsGdLIrE/DTSE0C8J5MABMMNUJs7o3FTz/t3uB4ylRrrkNZkMst7fWyXNbDgKah
O7TH89Rn1CFIAEOTmUklJE/44DCEZbZcfD9D+AX0/RKiRQiUKGNjIDGl/wIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFI7OVo9Py32SuoVcDges+w5ZUfL/MB8GA1UdIwQY
MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt
MWIwNmQxYzcwNGMxLzEvanM1V2owX0xmWks2aFZ3T0I2ejdEbGxSOHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx
LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA0BAIAATAuAwQAbc9oMAwD
BAFtz2oDBABtz2wDBAC5pZcwDAMEAMJ+pQMEA8J+oAMEAtl1hDAPBAIAAjAJAwcA
IAEGfC/QMA0GCSqGSIb3DQEBCwUAA4IBAQB3y1HRlsozjtuD+gylshrOA464+Ve0
bH3p9GIE9Tt1uXwJA4KIFhUfns7kAiDqrEsJBxzsXB6SBgJYSQS0CBYxYENbUwi6
MSFtHoxCOTcN4ibl+1NcU+2qDp4Bh8yTVqkbgwrEkCyyvB1qY4VhPD0ij7Xrgl4j
UiaWCQj2z3IfkV1Op9mHyVvZPK11weCcDaGDJXs+icRtV5PyQLWFfjI8q4vbfuq/
/E6g1nq3/vzvU4u9ZVFxag59y/hSIqAdhzQEsf00o5DK36b9CjnKWQwg8+opB520
PFXjOr9G0fDbFQYt3H354+bCkbwqA29WqvbWcUTZqIxSmvKlHiINkGXV
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:41 2025 by rpki-client