Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/SoB8_0B4GOtYomyJQxt0uZ0Oeww.roa
File: SoB8_0B4GOtYomyJQxt0uZ0Oeww.roa (raw, json)
Hash identifier: OQVaFQPCwhrwCF+WYF+druX/sOmGI/9eo2Z2LvF9GLs=
Subject key identifier: 4A:80:7C:FF:40:78:18:EB:58:A2:6C:89:43:1B:74:B9:9D:0E:7B:0C
Certificate issuer: /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial: 019420D640CE18E638FFFD34B70F9417693D
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/SoB8_0B4GOtYomyJQxt0uZ0Oeww.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56672
IP address blocks: 194.107.140.0/23 maxlen: 23
195.189.198.0/24 maxlen: 24
195.189.199.0/24 maxlen: 24
2a00:4680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:40:ce:18:e6:38:ff:fd:34:b7:0f:94:17:69:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a807cff407818eb58a26c89431b74b99d0e7b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:3c:3f:5e:11:02:c8:06:0d:96:f7:ab:dd:
27:4c:c4:ad:fb:2a:2b:c4:1c:80:7d:8b:d5:67:00:
90:4b:e7:a3:67:65:a4:ce:2c:67:8b:81:41:61:d0:
9f:d7:e2:c8:2d:91:c7:ef:99:6b:60:d9:6d:ad:e8:
f2:87:c4:e2:82:bf:30:90:8d:41:93:71:06:fd:f5:
f7:2f:85:b3:40:10:82:67:08:3a:68:29:e8:3f:8b:
ec:66:29:4c:df:fd:e5:e5:87:08:54:07:60:b3:9f:
d1:bd:ba:6e:24:2e:67:d6:cd:a4:39:f7:8c:9e:57:
f3:c0:15:58:50:a1:bc:1d:b3:81:54:b8:50:13:32:
5b:01:ea:9e:c0:f6:34:2a:39:b6:51:b8:c9:74:b1:
b2:e1:2c:10:56:c2:99:da:67:bd:3d:e6:79:03:33:
6b:e1:8c:15:f0:71:9f:da:62:27:f4:52:c1:4f:12:
60:d4:16:1b:32:77:f1:5b:72:f8:1d:04:d6:ca:10:
68:6e:67:1d:d2:9b:d0:99:65:03:f4:21:ae:7a:d1:
1d:5f:87:f4:aa:a5:c6:aa:fe:87:fb:ba:1a:2e:fa:
aa:97:7d:c1:e3:f8:bb:d5:e6:a2:73:16:d1:02:8f:
b8:b8:25:9a:7b:18:74:48:11:81:03:5f:23:47:e5:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:7C:FF:40:78:18:EB:58:A2:6C:89:43:1B:74:B9:9D:0E:7B:0C
X509v3 Authority Key Identifier:
keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/SoB8_0B4GOtYomyJQxt0uZ0Oeww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.140.0/23
195.189.198.0/23
IPv6:
2a00:4680::/32
Signature Algorithm: sha256WithRSAEncryption
7d:a6:b9:4d:ac:c5:39:f1:00:1c:54:36:f2:6c:27:03:ba:d8:
e7:a1:d4:85:49:c2:af:41:ad:d0:60:ee:32:4b:60:f6:cd:b4:
c4:5e:16:66:d8:08:f1:0b:4a:fd:1e:f0:73:ae:14:8b:c9:f8:
62:1e:c0:d8:ed:3f:63:64:9b:9a:1e:14:5c:fe:36:af:3f:2e:
76:7d:ea:ad:3a:2d:31:6a:9b:2d:a0:b5:9b:72:e8:d4:03:ed:
7f:06:d0:85:b5:5d:c7:36:57:54:ef:57:fb:ea:88:8e:b0:e6:
23:83:5b:db:3d:96:9e:e2:b6:39:c8:3c:f7:59:71:86:a0:6e:
24:d8:6e:e5:d7:90:1c:02:df:d0:68:b3:9e:a1:6b:e3:02:a5:
59:57:5c:60:5e:40:88:91:d1:00:53:4b:6b:b4:58:1f:62:26:
3d:15:17:b8:74:ed:f7:b9:4f:a8:e8:b1:c8:f5:fb:d5:45:63:
0d:21:c2:85:23:57:c3:a9:dd:5b:31:c1:60:2b:55:2d:cd:71:
8d:3c:e0:58:67:87:0e:aa:53:b7:a4:22:90:ea:fe:00:42:9c:
bd:06:d7:54:db:89:8f:6a:8e:fe:e5:06:25:fe:9c:a7:27:e0:
dc:0c:f9:66:f9:44:40:cf:13:45:de:1a:e2:23:77:e8:25:31:
ec:eb:1a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:57 2025 by rpki-client