Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/soe--L3Zv3Ab_c4ax7SKPcclEEk.roa
File: soe--L3Zv3Ab_c4ax7SKPcclEEk.roa (raw, json)
Hash identifier: EM4MaU25MU3aJWehslBE3y3dfKuyrb7A7eUnc8kofN8=
Subject key identifier: B2:87:BE:F8:BD:D9:BF:70:1B:FD:CE:1A:C7:B4:8A:3D:C7:25:10:49
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 0194236920C3E62AF0CF4F834C4AA2125B67
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/soe--L3Zv3Ab_c4ax7SKPcclEEk.roa
Signing time: Wed 01 Jan 2025 19:47:59 +0000
ROA not before: Wed 01 Jan 2025 19:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202558
IP address blocks: 185.46.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:20:c3:e6:2a:f0:cf:4f:83:4c:4a:a2:12:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Jan 1 19:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b287bef8bdd9bf701bfdce1ac7b48a3dc7251049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:d6:da:9e:c0:c3:6c:4e:8e:07:98:de:6d:
44:60:fb:13:3c:18:c4:86:99:ea:8a:b3:1a:3a:fb:
4b:e6:d1:40:f7:7c:09:eb:14:15:66:95:97:88:9f:
8f:88:a9:aa:fd:eb:ee:21:7a:41:73:59:e5:9f:d7:
9e:b4:c7:85:31:75:8c:6a:17:3a:54:27:8e:76:f6:
36:03:eb:34:1e:21:d2:26:03:8a:fe:3d:e2:dd:5d:
17:43:96:a7:6b:0b:ba:43:f2:4a:3c:9a:be:94:bb:
5a:ae:ab:91:fd:46:7e:cd:67:67:22:63:7e:00:b4:
d5:44:a5:d5:62:38:45:58:ab:e1:d3:bc:72:08:a2:
b2:fa:08:ae:e7:56:79:8d:74:ea:01:93:d7:af:17:
ff:98:93:77:b4:c8:65:8c:0e:4f:a3:a7:8c:8e:7e:
96:11:33:b2:75:60:cf:7c:ff:5b:95:61:ec:91:bb:
2c:97:7d:f6:e1:eb:09:05:de:78:bc:cd:dd:3a:0f:
65:88:d8:11:15:10:07:f5:9d:0b:bd:25:62:15:06:
d7:0e:32:ab:fa:18:6e:82:ba:2f:9e:46:f9:15:0e:
b3:72:4e:d1:97:b7:65:77:c2:5f:34:a3:04:16:34:
22:04:ba:b7:53:19:7f:ad:aa:34:fb:ef:f7:16:41:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:BE:F8:BD:D9:BF:70:1B:FD:CE:1A:C7:B4:8A:3D:C7:25:10:49
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/soe--L3Zv3Ab_c4ax7SKPcclEEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:39:d0:b7:33:be:fb:a7:58:61:59:d3:5d:c9:0a:7c:ce:a5:
9e:83:3d:94:56:33:ba:cd:d7:a3:16:85:a3:46:23:0e:75:4c:
2a:81:6a:e0:80:2e:55:eb:1a:93:63:1e:65:e0:0a:2b:72:2d:
32:04:8f:1a:1b:31:88:33:3d:a3:a2:3a:6a:72:6a:2f:49:f9:
95:1f:3e:49:ea:dc:ce:0d:dd:89:98:ef:5c:09:9f:d8:75:e7:
f6:b4:8b:cc:f4:c5:be:0c:e4:76:7a:7a:af:19:df:25:84:d7:
73:34:ae:ca:b1:b1:08:81:2f:dc:35:01:61:a5:1e:2d:3c:cc:
2a:79:e3:28:85:00:0d:a3:b4:a5:11:65:3b:38:01:9c:49:f4:
ae:6a:80:02:18:e6:35:17:52:87:21:3e:ff:06:ea:3a:59:54:
f0:ff:d2:0d:b2:95:06:9d:86:b9:04:21:f3:4e:ab:9e:a7:7e:
48:46:e9:84:b2:b3:21:f0:46:70:77:99:26:43:c7:13:17:e7:
7e:8f:80:42:60:8e:ce:79:ea:4f:e0:0b:7e:e3:1b:f5:65:3a:
a2:6a:9b:ff:0b:4e:8e:9f:e2:d7:9e:34:18:4d:07:9c:72:cf:
f7:06:9a:3e:80:e7:33:b5:51:1a:76:a9:b3:7b:1a:ad:68:2f:
26:f7:ab:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaSDD5irwz0+DTEqiEltnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMTk1MzVmYWMzZmE0ODc3OTU3OWJjZThmYzNiNDAyZGVm
MmNiNDQwHhcNMjUwMTAxMTk0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjg3YmVmOGJkZDliZjcwMWJmZGNlMWFjN2I0OGEzZGM3MjUxMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0bW2p7Aw2xOjgeY3m1EYPsTPBjE
hpnqirMaOvtL5tFA93wJ6xQVZpWXiJ+PiKmq/evuIXpBc1nln9eetMeFMXWMahc6
VCeOdvY2A+s0HiHSJgOK/j3i3V0XQ5anawu6Q/JKPJq+lLtarquR/UZ+zWdnImN+
ALTVRKXVYjhFWKvh07xyCKKy+giu51Z5jXTqAZPXrxf/mJN3tMhljA5Po6eMjn6W
ETOydWDPfP9blWHskbssl3324esJBd54vM3dOg9liNgRFRAH9Z0LvSViFQbXDjKr
+hhugrovnkb5FQ6zck7Rl7dld8JfNKMEFjQiBLq3Uxl/rao0++/3FkEKoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLKHvvi92b9wG/3OGse0ij3HJRBJMB8GA1UdIwQY
MBaAFOEZU1+sP6SHeVebzo/DtALe8stEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQt
ZGU5ZTI3ZWJiMjVkLzEvc29lLS1MM1p2M0FiX2M0YXg3U0tQY2NsRUVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85Yjg3ZDQtZTBmOS00MjNkLWFmOWQtZGU5ZTI3ZWJiMjVk
LzEvNFJsVFg2d19wSWQ1VjV2T2o4TzBBdDd5eTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS6NMA0G
CSqGSIb3DQEBCwUAA4IBAQBrOdC3M777p1hhWdNdyQp8zqWegz2UVjO6zdejFoWj
RiMOdUwqgWrggC5V6xqTYx5l4Aorci0yBI8aGzGIMz2jojpqcmovSfmVHz5J6tzO
Dd2JmO9cCZ/Ydef2tIvM9MW+DOR2enqvGd8lhNdzNK7KsbEIgS/cNQFhpR4tPMwq
eeMohQANo7SlEWU7OAGcSfSuaoACGOY1F1KHIT7/Buo6WVTw/9INspUGnYa5BCHz
Tquep35IRumEsrMh8EZwd5kmQ8cTF+d+j4BCYI7OeepP4At+4xv1ZTqiapv/C06O
n+LXnjQYTQeccs/3Bpo+gOcztVEadqmzexqtaC8m96uy
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:14:34 2025 by rpki-client