Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/So_XVf81y0yff5tiRM9T6wfxiFI.roa
File: So_XVf81y0yff5tiRM9T6wfxiFI.roa (raw, json)
Hash identifier: /9R1Xw1rux8XGra0y/ls+X0S7fa8zp372SXlAhhQnOg=
Subject key identifier: 4A:8F:D7:55:FF:35:CB:4C:9F:7F:9B:62:44:CF:53:EB:07:F1:88:52
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019504DCF00AA31072D795BB0E3F4101449B
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/So_XVf81y0yff5tiRM9T6wfxiFI.roa
Signing time: Fri 14 Feb 2025 14:29:02 +0000
ROA not before: Fri 14 Feb 2025 14:29:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 213.18.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:dc:f0:0a:a3:10:72:d7:95:bb:0e:3f:41:01:44:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 14 14:29:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a8fd755ff35cb4c9f7f9b6244cf53eb07f18852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:52:40:8a:00:94:64:ff:d2:aa:bc:c2:8e:
54:f1:77:6d:51:ee:d0:c1:d7:6f:88:8e:ef:5a:26:
6f:15:80:04:ae:13:19:25:3a:14:ec:6f:54:1f:97:
5b:8c:96:72:7a:be:a2:8c:76:5b:d3:8b:e0:9c:cd:
c9:20:99:29:d5:b8:15:a3:49:2d:51:ff:f1:0b:83:
d2:b6:c9:79:5c:ab:b9:95:91:32:44:72:2b:91:ef:
0c:0d:3c:02:2f:19:df:19:04:3f:c9:67:dc:1f:1a:
13:c7:15:f8:6c:fa:ef:96:d2:6d:ed:c0:6d:57:23:
a9:39:5b:d4:33:a5:4e:e2:78:2f:d2:c9:4e:91:e1:
b2:d5:0f:5f:f2:3c:7c:df:fb:8c:1e:93:9b:e0:5c:
9b:67:03:02:aa:d6:23:c2:da:bc:e0:9e:cb:00:50:
8a:56:eb:c3:e0:ff:eb:cf:6b:a6:64:e1:e5:5e:1c:
f8:4e:3a:c3:6f:2f:77:56:a7:4d:5a:80:cd:0f:95:
26:91:54:c4:2c:ca:5c:48:57:71:b9:4f:6c:c0:c1:
13:5a:60:8e:da:bb:95:70:6b:1d:bb:28:40:90:5b:
28:f7:48:f0:76:62:20:5a:7b:c0:03:a0:03:02:2b:
4b:6b:c9:8a:e5:aa:a2:46:b1:55:6d:47:ac:be:aa:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:D7:55:FF:35:CB:4C:9F:7F:9B:62:44:CF:53:EB:07:F1:88:52
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/So_XVf81y0yff5tiRM9T6wfxiFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.18.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:8b:24:14:74:3c:be:44:01:ee:f3:6c:5b:b3:a2:82:e9:63:
cd:85:b6:05:4d:9e:9d:e9:ad:38:f8:6a:f6:ae:4e:7b:4c:05:
1a:d5:dc:26:51:0e:36:54:37:e0:80:86:5f:47:c1:4f:1b:28:
b1:0c:85:68:8d:86:95:c0:a4:aa:96:64:50:d5:05:6b:1e:94:
ba:e6:b6:62:b1:78:6c:34:27:30:0d:4a:b3:8b:06:f4:8e:31:
37:7d:e1:1a:7b:2b:25:bb:ca:30:b9:02:75:da:de:11:a9:69:
26:7b:e3:2b:c6:25:a7:d8:02:8e:33:e5:e5:77:1a:e7:df:a8:
ca:55:12:b3:d9:1a:85:b8:69:39:6c:65:4c:3a:c3:a8:c4:a8:
27:96:c3:e9:e3:0b:f8:8e:09:7b:12:9a:3e:e0:b2:d6:da:26:
ff:41:be:a9:c0:f3:a7:2a:5b:73:8a:13:95:01:96:41:de:e8:
92:5e:81:d2:eb:d6:13:ff:67:0e:e3:6c:ea:d9:ea:ac:73:b9:
47:f7:e5:d7:88:ac:d5:90:c0:f1:99:38:4f:dd:57:ed:ed:55:
c9:61:54:f3:ba:30:51:cf:d7:a7:81:ae:73:a1:3c:ba:68:67:
ab:61:cb:08:25:14:72:be:05:42:b5:e5:b0:c9:34:05:d0:9c:
46:95:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:49:42 2025 by rpki-client