Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/so4Ox0bzJMlY-LIWih2N4dQlCqw.roa
File: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (raw, json)
Hash identifier: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=
Subject key identifier: B2:8E:0E:C7:46:F3:24:C9:58:F8:B2:16:8A:1D:8D:E1:D4:25:0A:AC
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 01942143FE4CDE398080801BAD09F56DB4E7
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/so4Ox0bzJMlY-LIWih2N4dQlCqw.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12779
IP address blocks: 194.28.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fe:4c:de:39:80:80:80:1b:ad:09:f5:6d:b4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b28e0ec746f324c958f8b2168a1d8de1d4250aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:a0:f1:5b:0f:65:bf:ad:d6:df:91:0f:ac:
b5:ed:60:d6:c8:cf:bc:8e:15:70:db:08:e5:53:74:
69:28:60:e8:9e:5e:37:e6:5a:f6:f8:65:5e:0d:9a:
b5:47:cc:3c:ac:70:6b:d9:da:88:49:49:da:39:39:
05:7c:f2:ba:83:7c:ce:b4:ef:3b:b6:42:c9:ee:af:
e1:91:eb:07:e5:6a:82:ae:fa:6d:c9:16:4f:91:76:
86:bc:c1:5d:c5:cd:e2:c4:ef:61:2d:9a:6c:1d:26:
0d:4f:90:b7:bd:3d:be:87:85:91:dd:be:9b:40:b1:
be:6c:00:7a:57:45:1c:d7:64:e0:fe:c1:f1:c5:87:
b2:86:f3:32:5a:11:76:41:30:2c:7f:b2:fa:3a:40:
8d:32:d6:5e:c5:a0:74:2c:7b:2a:9a:25:37:2c:3c:
60:5d:27:a6:64:21:c4:fd:a8:f0:8f:ab:61:a8:ce:
20:f9:03:5c:1b:61:db:73:a0:b4:fc:9e:6d:7a:5d:
8c:8f:3b:d1:e1:c3:58:80:3f:b9:75:c2:b6:4c:60:
49:07:fe:49:27:46:f2:e7:c7:f2:b8:46:8d:31:ea:
d7:cb:af:42:99:30:15:00:05:32:d3:19:3c:f9:6c:
22:5e:99:b3:78:54:b4:ed:e1:5b:bc:1b:f1:50:c4:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8E:0E:C7:46:F3:24:C9:58:F8:B2:16:8A:1D:8D:E1:D4:25:0A:AC
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/so4Ox0bzJMlY-LIWih2N4dQlCqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:b6:13:1a:07:98:56:c1:a2:85:6a:a8:c3:ed:f9:43:4f:5f:
67:02:d4:5d:2d:9e:0d:48:07:c6:e9:68:65:de:e4:9b:67:7b:
06:ad:25:80:c9:14:3e:fd:9a:60:1f:82:17:b6:5f:60:8c:4e:
eb:b0:30:08:c0:c5:6c:6a:a0:b0:3d:7b:c8:64:58:3f:c3:a4:
bc:07:5c:d2:f1:10:db:ec:14:41:8b:c9:e7:fc:32:f4:0b:44:
28:39:3d:b8:89:30:8b:6a:46:b8:40:a2:03:6d:2c:8f:b4:58:
24:cd:29:c1:1f:fc:33:7a:83:90:a4:cd:98:4d:a4:e5:ba:f4:
50:c4:de:36:26:e0:85:65:33:ba:44:0e:4a:53:f9:af:2c:5f:
af:a3:9a:57:1f:9a:1a:54:96:44:8b:13:90:75:af:96:57:8e:
dd:e0:48:7c:ef:a5:bf:75:23:12:2c:6c:20:12:36:b4:c0:37:
f2:6c:05:b3:13:98:27:ec:f0:ce:b1:d5:e0:6d:e5:bc:1f:5e:
91:0f:57:e8:a0:86:4a:bf:4d:be:24:48:13:23:3a:b9:9e:7a:
e6:74:cd:b4:78:7a:2c:13:47:9b:21:26:bb:3c:0c:19:80:5f:
3f:be:da:c1:7e:ad:46:35:38:12:f5:a0:b1:4f:55:be:87:13:
63:aa:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net