Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/SiqVjDxyVDLNzRkPzYZ0zi3Vu0M.roa
File: SiqVjDxyVDLNzRkPzYZ0zi3Vu0M.roa (raw, json)
Hash identifier: rLfdhWw7JobaBwa4dXxExClwDfQkRczwGTNcURoH/PA=
Subject key identifier: 4A:2A:95:8C:3C:72:54:32:CD:CD:19:0F:CD:86:74:CE:2D:D5:BB:43
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 01942368E4B644970CF83DB3A91D63857859
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/SiqVjDxyVDLNzRkPzYZ0zi3Vu0M.roa
Signing time: Wed 01 Jan 2025 19:47:44 +0000
ROA not before: Wed 01 Jan 2025 19:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204007
IP address blocks: 185.185.216.0/24 maxlen: 24
185.185.217.0/24 maxlen: 24
185.185.218.0/24 maxlen: 24
185.185.219.0/24 maxlen: 24
185.190.89.0/24 maxlen: 24
185.194.12.0/24 maxlen: 24
2a0b:6580::/29 maxlen: 29
2a10:64c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e4:b6:44:97:0c:f8:3d:b3:a9:1d:63:85:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Jan 1 19:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a2a958c3c725432cdcd190fcd8674ce2dd5bb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:15:bc:8c:42:85:9e:ae:36:a7:6b:3b:a8:
88:6f:cc:b7:e0:25:02:2d:ca:91:84:d6:4d:88:03:
39:94:6a:e8:3b:d9:ca:a5:10:f2:8a:52:f7:c2:8e:
db:7c:9a:cc:9f:ea:35:7b:9b:48:bc:97:df:52:9b:
57:2a:79:0d:32:7f:b6:c1:85:5a:7a:0c:f1:c1:2a:
bf:8b:7e:65:1f:53:12:c3:62:ed:db:c4:55:b3:54:
40:bb:52:55:8e:ae:08:f9:39:7e:1f:b2:e4:fe:fd:
e9:0f:74:4c:47:c7:1f:7e:06:20:2d:34:9b:92:d0:
fb:95:87:77:dc:c8:1c:41:41:45:8c:01:07:5c:cb:
ed:55:0f:1c:9a:c8:eb:4b:f7:43:ca:a2:12:65:5a:
4c:88:10:e4:a3:0d:68:b0:9d:d4:0b:84:11:44:28:
ad:5c:f3:dd:5f:e6:e8:68:d6:53:b5:cc:bc:27:cf:
95:a0:c8:99:80:d2:f7:8d:a1:f4:fd:84:79:6e:27:
53:63:fa:ec:d4:6a:5d:be:b8:75:90:5f:d0:e3:56:
14:c2:b8:05:d6:2b:a4:ba:d3:10:f9:52:2c:88:46:
f0:03:1d:5c:b2:b2:37:f9:27:26:eb:3e:68:09:85:
48:a2:d5:13:dc:c4:be:bd:c5:30:a7:e6:3b:0e:1a:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:95:8C:3C:72:54:32:CD:CD:19:0F:CD:86:74:CE:2D:D5:BB:43
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/SiqVjDxyVDLNzRkPzYZ0zi3Vu0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.216.0/22
185.190.89.0/24
185.194.12.0/24
IPv6:
2a0b:6580::/29
2a10:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:13:00:87:eb:70:91:af:b3:4b:28:b2:e1:72:81:e6:e6:a6:
4e:ef:93:b4:d4:83:aa:4e:f6:a6:42:f1:bb:8e:a2:18:58:1f:
d4:50:9e:a6:f0:98:39:9d:fa:bb:ab:7c:e8:9f:cd:fc:e9:bd:
2b:ec:fd:bd:0c:24:b9:00:34:be:af:99:05:82:f0:50:be:24:
ce:86:4b:a4:6e:0f:9f:19:fa:a3:c3:f8:df:0e:be:0c:ae:69:
36:f2:ed:38:e4:c7:fa:f5:92:5c:7e:5a:f1:61:3a:53:9d:ae:
c2:e3:56:62:e2:85:5e:f7:0e:63:a8:e2:23:65:30:0c:c9:de:
9a:f0:bc:01:6c:be:04:46:92:3d:25:bd:fc:6b:3f:65:27:7f:
0d:f4:db:19:67:0a:86:db:15:85:40:f9:c3:28:50:3a:01:13:
35:99:3d:07:1e:f7:72:0a:64:31:92:41:e0:87:c1:23:c2:bd:
64:05:8b:9c:0b:cd:76:a6:dd:74:19:a5:ec:09:f0:e4:86:73:
8e:15:fe:b2:3b:8e:33:fc:77:81:c7:a5:81:3d:53:b5:05:59:
c6:cc:de:7c:b2:7c:cf:cc:e3:4d:44:d8:bc:e4:f0:18:46:15:
4c:73:5f:de:75:25:60:0b:e5:61:43:0b:40:d8:c2:f8:7e:2a:
ed:df:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:47 2025 by rpki-client