Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/soLPFB9BaoeGyxe_ows2MqIBmHY.roa
File: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (raw, json)
Hash identifier: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=
Subject key identifier: B2:82:CF:14:1F:41:6A:87:86:CB:17:BF:A3:0B:36:32:A2:01:98:76
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 019423D6BA1A245DC3A6C979DD8FB67D0954
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/soLPFB9BaoeGyxe_ows2MqIBmHY.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57219
IP address blocks: 176.97.48.0/24 maxlen: 24
185.144.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ba:1a:24:5d:c3:a6:c9:79:dd:8f:b6:7d:09:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b282cf141f416a8786cb17bfa30b3632a2019876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:52:f1:69:ca:3a:12:fe:7a:62:48:c8:df:
a8:04:0c:78:23:b7:fc:06:87:ef:20:87:e8:e5:08:
ec:55:9a:6b:21:f7:f6:97:f3:c3:b9:a9:6b:d1:90:
6d:d5:4f:f4:66:9d:89:0b:cf:18:39:0b:5b:7c:db:
d7:dd:de:19:b1:60:2f:8d:95:ad:88:d8:4a:64:0b:
94:fd:7c:57:c5:45:07:2f:e4:3a:d7:6c:76:8e:fc:
17:6c:ad:5c:7c:b6:22:0b:e1:5b:01:37:6e:b7:17:
ed:35:9b:f6:50:2b:ef:e5:2e:35:33:48:7a:66:6a:
31:7b:47:98:00:01:79:e0:dc:19:96:89:3f:b8:ea:
28:92:61:ba:99:40:0c:ca:d1:2e:80:c6:72:e0:d1:
dc:d4:1c:86:d4:bd:fd:30:64:35:30:b8:19:3f:e3:
7a:03:5d:6e:11:a4:a2:38:5a:5c:c3:ee:70:53:5a:
24:f0:84:72:9d:c3:73:0b:40:82:60:4b:09:d7:0c:
22:10:9d:12:6d:71:2d:11:47:ac:2e:5f:c4:21:a3:
e0:36:4d:85:1a:2a:0a:aa:e9:55:c9:f4:8c:c1:98:
16:66:d0:da:2d:73:67:10:bb:c7:51:3d:3e:7d:05:
76:5a:fc:36:38:1f:c9:06:c8:fc:a5:54:86:dd:26:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:CF:14:1F:41:6A:87:86:CB:17:BF:A3:0B:36:32:A2:01:98:76
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/soLPFB9BaoeGyxe_ows2MqIBmHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.48.0/24
185.144.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f7:ce:36:e4:5d:b6:ba:c5:76:35:75:6c:d1:d4:8e:f6:90:
5b:9a:61:12:53:04:2a:0e:da:52:73:d6:14:83:c2:fe:fc:24:
4b:49:e9:50:a2:aa:17:ed:1a:53:ca:ae:74:0a:ba:65:3a:b9:
07:a7:fb:2f:2d:52:de:68:2b:22:fe:5f:54:d8:ed:24:e9:f3:
3c:84:14:80:70:c8:9e:57:e7:6c:f0:c7:ff:00:e6:72:92:b0:
bc:af:74:30:3c:b3:03:46:de:48:19:ba:8d:03:ff:ca:a9:a1:
47:bd:0a:5e:39:69:66:10:86:fb:2d:a4:30:d8:3e:8b:37:63:
2c:97:f6:09:1c:be:8c:ac:4a:10:60:c1:40:d5:43:bb:35:0e:
35:3d:a6:9a:46:5a:ac:a5:55:f8:51:5c:78:d2:6a:aa:82:0e:
ae:d3:44:6c:43:5a:f6:70:d4:67:02:1d:37:50:e2:0c:31:30:
79:ba:13:4e:8a:88:51:d0:9e:9b:c6:c6:41:33:b9:fc:51:3a:
25:91:7d:00:8f:9d:83:d3:c0:d0:e1:49:cd:4f:37:b7:69:2b:
d5:75:a1:d5:dd:32:2d:a2:2e:fc:6b:ab:4b:f7:e9:1f:a7:d8:
b0:4c:89:34:8e:fe:81:9a:d7:6b:ac:dc:19:86:3e:ad:bf:a0:
97:7e:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net