Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/sokDkP-AFv0WpA5zEjpwPgxw33o.roa
File: sokDkP-AFv0WpA5zEjpwPgxw33o.roa (raw, json)
Hash identifier: j9WT9CAUkwC2vb2yk5NS1q9utwb63VqmSqWMQcu4e48=
Subject key identifier: B2:89:03:90:FF:80:16:FD:16:A4:0E:73:12:3A:70:3E:0C:70:DF:7A
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 01822C5D40AB01A691179FDEA80CD4E5D520
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/sokDkP-AFv0WpA5zEjpwPgxw33o.roa
Signing time: Sat 23 Jul 2022 18:41:24 +0000
ROA not before: Sat 23 Jul 2022 18:41:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7118
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2c:5d:40:ab:01:a6:91:17:9f:de:a8:0c:d4:e5:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jul 23 18:41:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2890390ff8016fd16a40e73123a703e0c70df7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:ce:6d:9c:6d:5d:d5:b4:b8:48:35:4f:d3:
32:99:b1:af:aa:1e:fb:6a:c3:2a:70:8d:08:28:ef:
ad:49:ac:c6:67:ad:83:b1:fc:42:ca:eb:8f:09:2d:
88:be:cc:97:24:10:19:3c:47:a9:d9:5c:04:b1:a5:
ec:71:3f:18:56:37:90:b2:b4:12:70:a5:ae:34:c7:
9d:c4:e1:01:a6:83:b4:56:dc:b4:fd:4b:35:10:d1:
39:f9:f0:3f:c1:a0:55:61:d5:3b:76:a0:f2:e6:f8:
9a:32:26:6a:71:a9:5e:0f:8c:58:ca:5a:95:70:39:
fb:43:42:69:01:78:7e:da:21:e7:63:70:ed:d9:d8:
0b:59:a6:78:d9:ab:59:3c:d2:6f:e9:e6:db:42:b3:
cb:f3:c0:b0:29:93:ec:19:3a:ad:08:2e:82:51:90:
e2:0a:99:bd:2e:f4:76:dd:2b:8d:56:01:50:50:49:
0f:5f:46:d1:23:b6:0a:a8:7c:85:51:4d:46:a2:dd:
b4:bf:ae:6a:de:3d:5a:ef:53:ca:57:48:6f:37:e6:
40:9c:9d:1d:32:39:c4:5e:50:dd:ea:13:e7:9c:2f:
76:eb:87:35:d2:27:a3:a7:ac:71:fa:f0:79:84:55:
89:2b:f9:4a:c9:43:58:0f:1f:59:a4:9d:b4:08:14:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:03:90:FF:80:16:FD:16:A4:0E:73:12:3A:70:3E:0C:70:DF:7A
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/sokDkP-AFv0WpA5zEjpwPgxw33o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
63:4d:4d:d8:a0:e2:16:73:8d:ec:dc:3c:16:9d:f0:2c:18:2e:
56:19:82:a9:a5:8b:aa:27:ff:f7:c4:3b:db:53:ea:91:74:99:
11:97:b5:59:6b:b2:7c:4f:4d:8e:28:b4:17:50:fc:9c:4a:e2:
53:d6:b1:8d:39:b0:72:6e:45:d8:82:10:98:66:7b:b8:9e:4c:
c4:59:30:d2:31:46:ae:e4:fe:8c:40:16:1d:b3:2f:ac:cf:60:
9b:67:c0:35:e0:cd:d9:17:31:46:6c:36:e7:41:fa:a4:d1:30:
0a:a7:6c:c9:c8:dc:cb:36:6e:9b:62:93:e1:d6:b4:20:51:9a:
13:b9:3c:3e:54:fc:00:c6:99:b3:b8:67:2e:2d:18:58:e8:aa:
f9:41:8d:a6:43:27:52:53:80:05:cc:f7:de:ee:c4:8e:1b:a7:
9a:56:af:8b:e1:33:5e:51:dc:ad:91:5d:21:0d:d4:da:6d:0a:
73:f0:67:25:fb:34:d7:73:d8:fa:c1:22:57:57:26:11:f0:e2:
46:8a:07:ae:ba:7a:46:63:f4:2b:d4:15:d7:b8:c3:6a:58:f1:
95:ce:cb:68:da:26:40:75:bd:bb:8e:2b:2c:c5:b9:e0:01:2b:
41:5f:0b:67:ff:5b:5d:ec:ce:2e:c9:1b:fd:48:8a:dd:fe:d8:
b0:a8:e2:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIsXUCrAaaRF5/eqAzU5dUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMjAzYzE0MTllYzZhMjFlNjYxMjcyMDNmNTFjMWZhNzRk
YzA0NGYwHhcNMjIwNzIzMTg0MTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjg5MDM5MGZmODAxNmZkMTZhNDBlNzMxMjNhNzAzZTBjNzBkZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVXObZxtXdW0uEg1T9MymbGvqh77
asMqcI0IKO+tSazGZ62DsfxCyuuPCS2IvsyXJBAZPEep2VwEsaXscT8YVjeQsrQS
cKWuNMedxOEBpoO0Vty0/Us1ENE5+fA/waBVYdU7dqDy5viaMiZqcaleD4xYylqV
cDn7Q0JpAXh+2iHnY3Dt2dgLWaZ42atZPNJv6ebbQrPL88CwKZPsGTqtCC6CUZDi
Cpm9LvR23SuNVgFQUEkPX0bRI7YKqHyFUU1Got20v65q3j1a71PKV0hvN+ZAnJ0d
MjnEXlDd6hPnnC9264c10iejp6xx+vB5hFWJK/lKyUNYDx9ZpJ20CBQo/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLKJA5D/gBb9FqQOcxI6cD4McN96MB8GA1UdIwQY
MBaAFH8gPBQZ7Goh5mEnID9Rwfp03ARPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnlBOEZCbnNhaUhtWVNjZ1AxSEItblRjQkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jOTA0NjktZTYzOC00YTU3LTkyY2Ut
NTM0ZTczY2MzYjdjLzEvc29rRGtQLUFGdjBXcEE1ekVqcHdQZ3h3MzNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jOTA0NjktZTYzOC00YTU3LTkyY2UtNTM0ZTczY2MzYjdj
LzEvZnlBOEZCbnNhaUhtWVNjZ1AxSEItblRjQkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6cMA0G
CSqGSIb3DQEBCwUAA4IBAQBjTU3YoOIWc43s3DwWnfAsGC5WGYKppYuqJ//3xDvb
U+qRdJkRl7VZa7J8T02OKLQXUPycSuJT1rGNObBybkXYghCYZnu4nkzEWTDSMUau
5P6MQBYdsy+sz2CbZ8A14M3ZFzFGbDbnQfqk0TAKp2zJyNzLNm6bYpPh1rQgUZoT
uTw+VPwAxpmzuGcuLRhY6Kr5QY2mQydSU4AFzPfe7sSOG6eaVq+L4TNeUdytkV0h
DdTabQpz8Gcl+zTXc9j6wSJXVyYR8OJGigeuunpGY/Qr1BXXuMNqWPGVzsto2iZA
db27jissxbngAStBXwtn/1td7M4uyRv9SIrd/tiwqOJJ
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:59:28 2025 by rpki-client