Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/jvr-TtmshyO-21Athyko7-oCA0g.roa
File: jvr-TtmshyO-21Athyko7-oCA0g.roa (raw, json)
Hash identifier: YbFNgrbQ4nYeYFpzPZPmunVsALPP8JY0whWvWBRLdqk=
Subject key identifier: 8E:FA:FE:4E:D9:AC:87:23:BE:DB:50:2D:87:29:28:EF:EA:02:03:48
Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378
Certificate serial: 019423D6EF64B18CA71371CE9AB802BCD288
Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/jvr-TtmshyO-21Athyko7-oCA0g.roa
Signing time: Wed 01 Jan 2025 21:47:56 +0000
ROA not before: Wed 01 Jan 2025 21:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8774
IP address blocks: 109.237.0.0/22 maxlen: 22
109.237.4.0/22 maxlen: 22
109.237.8.0/22 maxlen: 22
109.237.12.0/22 maxlen: 22
185.113.208.0/23 maxlen: 23
185.113.210.0/24 maxlen: 24
185.113.211.0/24 maxlen: 24
195.135.212.0/24 maxlen: 24
195.135.213.0/24 maxlen: 24
195.135.214.0/24 maxlen: 24
195.135.215.0/24 maxlen: 24
2a05:3740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ef:64:b1:8c:a7:13:71:ce:9a:b8:02:bc:d2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c98430885628971307c59b5cf241682102378
Validity
Not Before: Jan 1 21:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8efafe4ed9ac8723bedb502d872928efea020348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:d7:10:49:76:95:6f:b0:c9:3d:15:db:fe:
27:5d:eb:5d:49:8e:66:99:dd:6e:16:dd:38:08:d9:
1c:13:fc:43:f7:e9:c3:ba:83:63:c0:10:f6:9e:5a:
8a:e8:f0:9e:84:63:8b:9f:01:83:69:34:e2:64:d5:
eb:f1:b7:60:18:f2:eb:80:45:f3:a1:c6:af:04:8a:
c3:d6:a3:bc:34:d0:09:14:c5:28:1f:ca:23:45:41:
57:4d:e4:a1:e6:60:2b:35:1f:f3:56:6f:04:52:ec:
2e:05:da:7b:21:cd:27:62:5c:a3:b6:40:37:0a:06:
9c:44:6e:f8:9c:f2:2d:d9:52:62:47:fd:f1:2a:8e:
cd:21:cd:86:d4:e4:e0:69:08:16:60:13:b6:29:70:
50:a0:b5:4c:c0:c5:c3:8a:ec:ac:8d:d8:a1:c4:61:
46:e3:83:c5:db:01:10:b0:7e:62:21:20:e8:17:20:
8d:57:5d:93:60:44:a0:fc:e3:b6:c4:6a:a8:31:ff:
bd:97:c5:d7:b9:bd:9f:55:ab:40:df:c9:89:60:18:
bb:a2:e6:cf:0a:8d:72:69:82:b9:5f:cc:08:e8:28:
8f:fa:ee:cc:22:91:60:ce:05:44:6b:8f:45:c2:7b:
e6:02:8a:43:74:56:80:5a:78:8a:5d:cf:69:53:9f:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:FE:4E:D9:AC:87:23:BE:DB:50:2D:87:29:28:EF:EA:02:03:48
X509v3 Authority Key Identifier:
keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/jvr-TtmshyO-21Athyko7-oCA0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.0.0/20
185.113.208.0/22
195.135.212.0/22
IPv6:
2a05:3740::/29
Signature Algorithm: sha256WithRSAEncryption
9f:bf:d4:9d:4b:38:de:69:4f:74:35:23:a6:69:fa:5d:62:02:
54:1d:7b:1d:05:85:76:09:75:e2:e8:d0:1e:ff:e2:cd:0f:76:
80:4f:9f:a8:df:9a:2a:19:79:8b:7c:87:65:1b:5c:6e:66:1d:
2b:d3:8f:7e:4a:9e:44:f1:67:ac:24:94:13:ee:c8:2c:74:f5:
16:95:60:27:5c:94:82:99:3e:d5:05:e0:0d:83:35:15:98:f5:
47:04:bd:07:60:80:85:0e:3c:31:db:32:73:ce:8f:06:1c:f3:
02:2c:a4:e1:83:da:e5:5a:f7:a9:2e:8f:5d:8f:31:9a:da:af:
98:14:b0:d2:67:e7:d0:fa:66:71:c3:92:a0:69:c5:11:05:44:
ea:0e:99:ab:8a:f5:61:24:d1:94:2c:6a:7f:30:d0:bc:7e:39:
ea:c0:98:c9:9f:03:4f:aa:e4:c4:19:ac:99:57:a5:1a:38:c6:
59:0d:97:18:3f:0c:ec:50:d7:e5:0b:71:5d:b3:43:36:24:04:
1e:12:82:53:06:25:d8:ce:7d:5a:25:9f:77:83:53:20:66:8a:
48:a1:8d:07:c8:11:3f:c0:f7:5f:0b:86:45:b0:01:6b:85:c9:
50:97:74:1f:f9:a0:0c:47:84:18:e7:cf:c4:46:54:65:02:e0:
33:cc:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net