Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/SoOpRTbCsxQmVUOfO7RGlrnkYII.roa
File: SoOpRTbCsxQmVUOfO7RGlrnkYII.roa (raw, json)
Hash identifier: /NHNZ9owOeiB6fJ2mWalv1Audw/nCzYt8WNLBFtC6Cw=
Subject key identifier: 4A:83:A9:45:36:C2:B3:14:26:55:43:9F:3B:B4:46:96:B9:E4:60:82
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0431144B
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/SoOpRTbCsxQmVUOfO7RGlrnkYII.roa
Signing time: Sat 01 Jan 2022 00:50:41 +0000
ROA not before: Sat 01 Jan 2022 00:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 185.93.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70325323 (0x431144b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 1 00:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a83a94536c2b3142655439f3bb44696b9e46082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:08:c9:3f:c1:63:08:c7:2b:7b:44:d4:47:
58:a7:af:0b:62:40:23:e0:a5:59:85:71:7c:2f:c3:
0e:70:69:44:25:17:a1:91:c6:18:35:5e:ee:12:f1:
69:b9:a1:b7:41:cf:71:11:c6:93:57:44:67:12:b3:
12:71:00:e3:07:a3:e0:97:71:7b:41:9a:e5:72:ee:
3d:db:04:86:9c:74:1c:c0:7d:63:69:76:d8:98:ab:
c4:3e:bb:5e:aa:6a:19:d5:54:a1:94:a9:46:e8:b4:
72:f6:9f:4f:84:12:ef:69:e6:02:26:3f:34:55:16:
7a:22:e7:34:77:87:35:f9:d4:74:5c:c3:b0:7c:63:
dc:90:7f:dd:a1:92:a9:05:c7:5a:19:56:6a:71:d2:
19:56:8a:bf:b4:04:e5:48:66:e6:11:6d:60:f6:f5:
7d:1c:32:bd:98:9a:85:74:97:54:d6:82:11:18:16:
d9:75:e0:b1:5a:1a:cd:62:90:aa:58:8b:d9:5f:2d:
0a:b8:4d:aa:a4:13:59:a5:25:56:74:7c:34:1a:90:
0a:05:03:08:1c:63:d7:d7:48:37:6b:d7:ab:f5:f7:
0a:81:cd:97:80:83:6e:f7:0d:2f:27:17:d1:ec:66:
24:8f:ec:20:73:22:43:8c:50:f4:d0:00:3c:12:76:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:A9:45:36:C2:B3:14:26:55:43:9F:3B:B4:46:96:B9:E4:60:82
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/SoOpRTbCsxQmVUOfO7RGlrnkYII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f6:2e:c2:43:99:ea:53:dd:d5:79:7b:4b:06:70:da:55:e2:
79:80:03:a0:fb:50:eb:f8:d5:58:0e:e0:50:ac:f2:d4:89:52:
39:f4:13:7b:f5:6c:7f:a4:38:1d:97:f2:a2:1a:3d:1c:0a:f5:
97:fd:a4:5f:b4:cb:f5:03:ce:82:2b:02:43:e5:0d:64:7b:e9:
90:2c:ad:36:7a:4d:a1:ac:cf:9c:9f:18:c2:ed:77:33:26:38:
25:2f:b5:f0:b2:d2:48:69:9d:63:cd:e9:83:37:58:79:d2:a6:
67:e7:ae:36:8d:2d:fd:44:31:34:8e:14:6d:55:ad:39:a8:1f:
85:a6:d2:2b:32:fa:fd:5b:56:55:37:0a:f6:7d:3c:58:d2:a8:
86:c4:aa:62:fe:9f:0a:04:5d:c0:e1:45:bb:77:6d:07:f1:2b:
db:fb:93:5f:c7:11:ce:5a:f0:5a:40:e3:56:d3:d5:d1:10:b1:
4b:32:dc:f3:0b:6a:d9:c8:4e:7a:d4:94:16:cf:7d:f8:02:f3:
e0:87:5f:31:37:09:10:bf:c3:6d:1b:c1:97:1d:34:7b:2e:92:
f6:56:ff:16:a3:b7:7b:0a:31:e9:a3:0c:77:9f:5b:22:d3:0e:
68:3a:40:b9:79:10:6b:b0:e7:ec:22:2d:10:da:87:cb:bf:39:
d7:ac:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:17 2025 by rpki-client