Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/SOT0W2XrP7CCow7oMidVP0WeTQc.roa
File: SOT0W2XrP7CCow7oMidVP0WeTQc.roa (raw, json)
Hash identifier: LK/wr/vv637+E1XEkLAUiLeI/zSDn9f20e+XXEbQLBM=
Subject key identifier: 48:E4:F4:5B:65:EB:3F:B0:82:A3:0E:E8:32:27:55:3F:45:9E:4D:07
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 0194266C3E4ED004A66B656636DAF7997E5E
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/SOT0W2XrP7CCow7oMidVP0WeTQc.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44802
IP address blocks: 185.17.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3e:4e:d0:04:a6:6b:65:66:36:da:f7:99:7e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48e4f45b65eb3fb082a30ee83227553f459e4d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:56:4e:84:41:15:2c:4e:27:bb:03:5a:d3:
b7:9a:b8:09:37:d9:0e:30:3e:e7:83:e1:e0:c4:0e:
26:f7:45:6b:65:97:1c:23:42:c3:33:03:68:45:9e:
48:f8:7b:42:aa:52:9c:53:11:9b:33:24:6a:85:c9:
b4:e6:c4:10:fe:f5:5d:77:6a:b9:5d:5b:43:a1:81:
00:4d:d5:b6:be:f4:f6:fe:1b:74:92:f4:25:46:6c:
4b:89:41:86:81:8f:73:33:7e:b6:ae:bc:09:76:60:
23:cb:4f:60:3c:dc:5b:c8:ff:2e:4d:09:04:05:de:
db:bd:94:31:ef:c8:25:7b:56:fa:b9:0b:ca:c4:fb:
7f:38:29:93:85:56:ed:62:fa:0a:fe:a3:89:fa:5d:
6d:0a:b2:a2:51:46:c3:77:60:7d:6e:49:cb:32:94:
d7:6e:5a:1a:ba:fa:67:9d:d2:58:77:9d:51:dc:2e:
95:cd:00:09:9a:84:68:3e:58:26:ce:10:ae:a6:fa:
af:8d:d6:f6:b3:23:b6:fa:5d:aa:20:2f:f9:e7:29:
ad:11:4f:55:da:2f:3c:a6:77:3c:62:03:81:38:a5:
5c:f5:7b:a6:dd:bd:c8:2d:cd:ab:f5:bc:4f:5d:44:
5b:18:a3:80:1d:cb:aa:e6:01:6a:4a:eb:56:3d:14:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:F4:5B:65:EB:3F:B0:82:A3:0E:E8:32:27:55:3F:45:9E:4D:07
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/SOT0W2XrP7CCow7oMidVP0WeTQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.8.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fb:2e:e2:9f:a0:5e:ff:b2:c3:01:a6:6b:2a:af:94:1c:0e:
d5:3b:06:13:d0:ba:57:fe:5f:63:8d:e2:76:96:0c:1f:4e:22:
d9:25:f5:1d:af:d4:e4:38:40:b0:57:a7:74:03:c7:9b:13:59:
2e:ae:eb:cd:a0:f0:2c:f8:2e:2a:f0:d9:de:de:5e:77:fb:ce:
b0:4e:a9:14:0e:7c:72:59:55:fd:a0:06:6a:03:5a:86:83:82:
df:66:46:60:a8:5d:e3:36:9d:00:f8:00:3a:00:4f:b4:c2:fd:
e0:25:9c:67:db:5f:da:74:9d:53:ca:95:c7:96:ee:a2:7c:0a:
6f:00:7d:65:57:8d:1d:f9:c5:b7:f3:96:81:12:65:0d:9e:03:
c2:97:2d:3f:7a:05:c7:c5:2c:c6:01:ca:aa:c2:d6:49:bb:c2:
96:c0:fc:a5:9a:0c:de:62:59:f4:6e:81:41:8e:ef:b5:f1:6e:
04:b4:33:f2:5c:81:7d:e0:ad:93:2f:dd:d7:0b:0e:a1:c6:b5:
3d:85:92:44:a8:74:25:5c:3c:f8:64:ec:73:31:70:81:8e:8c:
c8:5a:89:1b:d5:67:14:09:b6:d0:44:05:1c:17:5a:80:be:32:
9a:82:57:c8:17:4a:6a:e8:3b:85:eb:25:85:05:cc:0c:86:d4:
e1:8f:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:26:32 2025 by rpki-client