Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/sotFwW0dd18jhlgGMEoNrnqopP4.roa
File: sotFwW0dd18jhlgGMEoNrnqopP4.roa (raw, json)
Hash identifier: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=
Subject key identifier: B2:8B:45:C1:6D:1D:77:5F:23:86:58:06:30:4A:0D:AE:7A:A8:A4:FE
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 019421B1E93BEF2FA6924602238A0505A64E
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/sotFwW0dd18jhlgGMEoNrnqopP4.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34184
IP address blocks: 194.145.238.0/24 maxlen: 24
194.150.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e9:3b:ef:2f:a6:92:46:02:23:8a:05:05:a6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b28b45c16d1d775f23865806304a0dae7aa8a4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:f0:85:f3:33:7e:f4:fd:ff:30:e8:24:09:
52:52:63:a2:52:5d:b3:3a:fe:7f:87:88:be:1e:b9:
4b:0f:56:39:78:29:23:85:b7:5e:32:31:57:3c:82:
77:dc:ea:6b:40:9c:03:bc:7f:0a:4c:e0:d6:9a:56:
9a:1a:cc:f8:76:99:dd:2b:d7:a4:17:ab:3e:c0:42:
f5:bc:13:0f:79:92:76:0a:23:42:b1:10:05:27:ae:
a6:6a:21:a3:1d:99:7b:36:cb:5c:a4:04:2c:40:97:
5e:ea:87:cc:b2:95:06:7d:79:d1:de:82:af:8c:cd:
42:03:4e:c9:c8:81:f4:fc:dc:76:b9:de:d8:27:5a:
00:5e:d8:84:09:1a:c2:d7:6b:ff:08:1b:52:1d:5f:
38:f4:58:13:ab:e7:1d:86:92:07:9b:68:8f:3a:b8:
b6:05:5a:a5:66:25:92:5d:40:47:e8:15:65:19:96:
eb:01:72:53:e6:5c:af:c0:2c:7e:83:42:dc:5f:9f:
02:e6:d3:3e:a9:89:2f:f0:cd:5d:67:ae:a9:75:c2:
aa:a6:22:cc:a0:63:1e:9c:18:d5:fc:7a:e9:29:51:
43:8f:c7:9d:b3:20:af:ca:2c:a9:d3:87:ba:64:60:
4d:42:c4:34:68:7f:dc:d8:94:75:f5:e6:84:33:5a:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8B:45:C1:6D:1D:77:5F:23:86:58:06:30:4A:0D:AE:7A:A8:A4:FE
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/sotFwW0dd18jhlgGMEoNrnqopP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.238.0/24
194.150.186.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:38:b1:c7:fd:91:54:cf:de:54:33:6c:ae:40:fd:b7:83:c8:
d8:c3:a8:81:96:d6:9c:24:13:56:8b:d0:8a:a5:8b:a6:e3:56:
99:93:e9:c9:8c:77:ba:ce:52:a9:60:08:40:47:a0:5e:10:9f:
88:11:8b:48:28:c6:e8:bb:80:67:76:a1:2c:31:74:f4:29:0f:
1d:c1:a8:33:67:6c:5b:0f:d9:2b:f9:24:46:40:38:1f:ec:78:
31:52:85:43:91:d6:cd:c1:34:d9:d6:b6:5a:35:58:7c:a7:37:
54:07:4a:3d:17:0b:35:6f:23:3f:c8:4b:67:f1:5f:87:67:9d:
32:0f:b9:43:bd:45:e9:fa:a9:0d:17:8c:4d:4e:43:5d:d4:67:
61:d1:ea:a2:c8:9e:19:11:d1:d6:81:3a:6c:27:c3:44:a5:c5:
ee:55:79:9d:4b:86:f1:5e:f4:f8:e3:93:9c:6a:a0:68:f4:55:
be:1f:27:ce:a9:0d:27:f3:3c:d5:70:45:57:bb:ed:f8:f3:5b:
9a:19:9e:0a:88:52:26:17:63:fb:a5:49:49:c4:2a:98:54:6c:
49:80:f0:b9:67:7d:7f:8d:0b:14:ff:75:cf:30:ff:55:a4:d6:
48:b1:2d:bd:04:4d:e2:78:75:10:9a:75:54:2e:a6:08:26:c3:
46:0c:f9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:21:50 2025 by rpki-client