Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/JEagz34AmrWJSl5tWfv6gEtsLGA.roa
File: JEagz34AmrWJSl5tWfv6gEtsLGA.roa (raw, json)
Hash identifier: 6ThacyL41jFB75SwEJNS97B98Umjv7cIvZNxvFFSXfI=
Subject key identifier: 24:46:A0:CF:7E:00:9A:B5:89:4A:5E:6D:59:FB:FA:80:4B:6C:2C:60
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 019421B22DA6F3CAE3E5C2CB175DD05DB0D4
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/JEagz34AmrWJSl5tWfv6gEtsLGA.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29067
IP address blocks: 109.70.104.0/22 maxlen: 24
109.70.108.0/24 maxlen: 24
109.70.109.0/24 maxlen: 24
109.70.111.0/24 maxlen: 24
185.159.140.0/24 maxlen: 24
185.159.141.0/24 maxlen: 24
193.29.220.0/24 maxlen: 24
195.47.253.0/24 maxlen: 24
2001:67c:258::/48 maxlen: 48
2001:4130::/32 maxlen: 48
2001:4130:20::/48 maxlen: 48
2001:4130:b0::/48 maxlen: 48
2001:4130:cd::/48 maxlen: 48
2001:4130:ce::/48 maxlen: 48
2001:4130:141::/48 maxlen: 48
2001:4130:50f1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2d:a6:f3:ca:e3:e5:c2:cb:17:5d:d0:5d:b0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2446a0cf7e009ab5894a5e6d59fbfa804b6c2c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:80:9b:69:63:6c:ec:37:be:dc:ab:c1:fb:
df:8a:34:a0:2a:e0:fc:b4:dd:25:7d:67:60:d4:85:
ea:3f:bf:2d:33:49:b5:fa:9d:93:b2:e9:05:5a:57:
fc:f2:56:df:a1:6d:18:19:9f:f5:3f:bd:ea:01:f4:
bd:87:39:57:a9:c9:25:c7:4e:14:c3:1d:92:28:cf:
a6:4e:5a:2a:82:e3:ec:bb:24:bc:7e:95:50:5b:a7:
2b:b7:75:11:32:91:d9:7b:5d:83:fb:32:11:84:42:
3b:b7:f1:06:b9:03:46:f3:fd:97:11:6a:39:fd:7d:
2e:b6:9a:e6:fa:42:4f:b7:dc:f0:ce:74:42:e6:99:
d2:b0:70:0e:9c:e0:28:d4:ec:93:d5:78:b9:3c:6a:
19:ee:55:da:02:93:ac:21:5c:7e:e0:4f:40:2e:7c:
c4:4b:e1:0d:6a:86:93:f7:dd:94:80:0c:47:73:26:
28:c3:1e:d4:58:ea:92:21:fc:c5:e5:c2:8f:29:4d:
c6:0d:4a:b0:1e:37:3d:a6:53:8c:01:f0:19:b4:89:
7c:08:f2:14:de:47:af:57:c4:5c:53:cf:75:c9:8c:
62:67:63:70:bb:a3:86:68:ce:c6:b8:64:7e:16:ae:
4b:a5:16:69:69:ba:b0:fd:0d:d1:27:57:58:73:40:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:46:A0:CF:7E:00:9A:B5:89:4A:5E:6D:59:FB:FA:80:4B:6C:2C:60
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/JEagz34AmrWJSl5tWfv6gEtsLGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.104.0-109.70.109.255
109.70.111.0/24
185.159.140.0/23
193.29.220.0/24
195.47.253.0/24
IPv6:
2001:67c:258::/48
2001:4130::/32
Signature Algorithm: sha256WithRSAEncryption
2a:8b:9c:1f:3b:a4:58:ba:d0:d6:d7:a5:5d:b4:13:65:fc:b5:
0a:e6:4c:55:1c:f9:89:79:52:98:9f:6d:20:f0:8c:37:e5:72:
0d:03:23:42:78:bb:4a:64:44:87:79:14:94:59:b8:b3:d9:36:
bc:08:cc:27:e9:7b:90:be:9f:02:c0:77:d6:af:46:fa:8d:8e:
e7:1c:40:7d:e2:a1:db:db:ef:01:79:57:62:96:97:cd:d2:3e:
68:bc:cf:c4:44:ae:49:22:bc:1f:f4:99:5c:f5:e4:d1:37:62:
74:37:e9:ae:c0:95:ed:ab:69:31:4f:0c:da:40:eb:8d:14:2e:
45:9c:19:f0:04:36:1b:7d:ad:71:5f:43:9f:18:e6:ef:77:e9:
f1:0a:02:fe:65:b1:2a:5f:34:72:f2:a3:77:f2:86:ef:ad:ce:
7e:29:6b:a0:e3:ae:1b:b7:24:77:68:6f:00:30:fb:e3:13:d1:
92:33:e8:82:74:c5:e4:5b:af:f9:b4:dc:31:2f:7a:27:f6:55:
a5:00:f4:00:4d:54:c9:2d:c7:8c:9c:90:50:2c:36:31:82:82:
9a:f1:d0:4c:eb:6a:29:34:1f:b5:15:58:5e:a0:67:f8:f4:65:
3e:1f:b1:e7:75:9d:db:d5:4a:cd:f0:31:3f:8b:b4:0f:48:fd:
6a:ef:a5:e9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZQhsi2m88rj5cLLF13QXbDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZiMmI4YWZhNjAzNmQyYzhlODMxNzczNmZhYWE3MmQ4
MGM0ZjIwHhcNMjUwMTAxMTE0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDQ2YTBjZjdlMDA5YWI1ODk0YTVlNmQ1OWZiZmE4MDRiNmMyYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP+Am2ljbOw3vtyrwfvfijSgKuD8
tN0lfWdg1IXqP78tM0m1+p2TsukFWlf88lbfoW0YGZ/1P73qAfS9hzlXqcklx04U
wx2SKM+mTloqguPsuyS8fpVQW6crt3URMpHZe12D+zIRhEI7t/EGuQNG8/2XEWo5
/X0utprm+kJPt9zwznRC5pnSsHAOnOAo1OyT1Xi5PGoZ7lXaApOsIVx+4E9ALnzE
S+ENaoaT992UgAxHcyYowx7UWOqSIfzF5cKPKU3GDUqwHjc9plOMAfAZtIl8CPIU
3kevV8RcU891yYxiZ2Nwu6OGaM7GuGR+Fq5LpRZpabqw/Q3RJ1dYc0Bi1QIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFCRGoM9+AJq1iUpebVn7+oBLbCxgMB8GA1UdIwQY
MBaAFCI2srivpgNtLI6DF3NvqqctgMTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMt
OGI1ZWY0MWQ4YzI1LzEvSkVhZ3ozNEFtcldKU2w1dFdmdjZnRXRzTEdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMtOGI1ZWY0MWQ4YzI1
LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAsBAIAATAmMAwDBANtRmgD
BAFtRmwDBABtRm8DBAG5n4wDBADBHdwDBADDL/0wFgQCAAIwEAMHACABBnwCWAMF
ACABQTAwDQYJKoZIhvcNAQELBQADggEBACqLnB87pFi60NbXpV20E2X8tQrmTFUc
+Yl5UpifbSDwjDflcg0DI0J4u0pkRId5FJRZuLPZNrwIzCfpe5C+nwLAd9avRvqN
juccQH3iodvb7wF5V2KWl83SPmi8z8RErkkivB/0mVz15NE3YnQ36a7Ale2raTFP
DNpA640ULkWcGfAENht9rXFfQ58Y5u936fEKAv5lsSpfNHLyo3fyhu+tzn4pa6Dj
rhu3JHdobwAw++MT0ZIz6IJ0xeRbr/m03DEveif2VaUA9ABNVMktx4yckFAsNjGC
gprx0Ezraik0H7UVWF6gZ/j0ZT4fsed1ndvVSs3wMT+LtA9I/Wrvpek=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net