Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/si63heC5AIvLLejmiH4SUxw44s0.roa
File: si63heC5AIvLLejmiH4SUxw44s0.roa (raw, json)
Hash identifier: A2b+++OovlxutbnaWL8WBqlzNLX6SyYHAUqNmWE0KKc=
Subject key identifier: B2:2E:B7:85:E0:B9:00:8B:CB:2D:E8:E6:88:7E:12:53:1C:38:E2:CD
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 019421439182107DB1FC1A62DA7E07691B84
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/si63heC5AIvLLejmiH4SUxw44s0.roa
Signing time: Wed 01 Jan 2025 09:47:43 +0000
ROA not before: Wed 01 Jan 2025 09:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201227
IP address blocks: 185.81.96.0/24 maxlen: 24
185.81.99.0/24 maxlen: 24
194.59.171.0/24 maxlen: 24
2a05:8642::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:91:82:10:7d:b1:fc:1a:62:da:7e:07:69:1b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Jan 1 09:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b22eb785e0b9008bcb2de8e6887e12531c38e2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:c4:ff:0a:fb:25:a8:c7:37:b6:9f:d4:8f:
c2:6e:49:9b:ad:03:5a:85:c0:02:56:f3:42:bc:e5:
f1:bb:f2:0a:03:03:9e:6c:f0:10:b8:94:38:fa:74:
90:9e:c6:a7:cc:3e:b6:c2:db:6a:04:19:3f:f8:6e:
cb:93:c6:eb:0e:5c:10:00:07:40:c3:9a:95:22:f7:
f4:01:56:a4:4c:1c:43:c1:28:d8:98:ad:1b:27:c8:
87:7a:5d:b1:c1:e1:de:47:81:b9:17:63:26:6f:76:
ca:43:a9:2d:21:fa:c1:0c:bf:af:ab:1f:aa:27:3c:
38:b9:2b:a0:8f:c3:a1:41:c7:ff:dc:f8:e7:c0:a1:
c7:7b:5d:36:a3:64:72:80:e2:29:f7:85:de:f2:3a:
76:73:cf:1d:60:69:3b:b1:f1:f9:14:c7:c8:0f:a5:
95:65:d6:1d:ae:df:c6:90:3b:5f:1f:c3:4a:c3:0c:
fa:f8:af:36:19:b9:e3:5c:00:69:57:c1:45:46:3b:
f6:7b:cc:43:2e:04:19:c9:f8:bc:04:8f:71:14:ad:
3d:1f:ba:60:13:0e:5d:93:0b:6a:c5:22:21:ea:d3:
69:eb:1f:ff:ff:4f:df:ba:a6:6a:7e:dc:66:f1:2e:
b0:85:01:b3:44:a6:7c:2d:8a:21:f4:2e:c6:43:67:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:B7:85:E0:B9:00:8B:CB:2D:E8:E6:88:7E:12:53:1C:38:E2:CD
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/si63heC5AIvLLejmiH4SUxw44s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.96.0/24
185.81.99.0/24
194.59.171.0/24
IPv6:
2a05:8642::/32
Signature Algorithm: sha256WithRSAEncryption
86:01:5c:d0:74:bc:62:3e:cb:9b:2f:f8:e8:2f:00:10:66:5b:
4b:3e:ed:4d:e8:9f:8c:05:0a:f6:9c:57:c8:46:d1:ee:46:cd:
76:ea:bf:ca:2b:6b:29:ce:37:25:f0:4e:4a:8e:98:0b:7c:52:
ec:0f:e3:8d:7f:4c:e5:9a:5a:77:61:22:2b:89:d5:b6:ea:12:
c7:b8:48:f5:db:00:5b:c2:fb:b6:3b:64:31:16:df:45:63:57:
8b:0a:f0:ec:3a:00:a5:ed:50:4d:19:0e:85:fe:f0:39:43:06:
81:2d:4f:19:00:7e:29:23:db:6f:d4:0b:ef:c6:df:d4:b7:91:
2a:2d:7e:ca:1d:6e:40:c4:60:ba:8c:e4:b1:08:83:93:36:22:
09:38:48:a3:18:29:66:6d:ce:1a:53:b4:38:6c:50:27:a9:2f:
cd:5c:56:c8:43:d8:e2:4e:5b:6d:dc:6e:a3:4a:29:3c:d9:62:
2a:a5:2a:37:37:1b:7d:4e:39:71:45:38:42:7d:7a:25:f0:c6:
59:c7:c1:e2:14:be:be:14:92:a7:96:be:40:3e:b1:c4:8b:95:
e7:09:7a:78:4a:80:04:cc:51:df:d6:9b:f2:d5:0e:05:d7:c6:
89:39:7e:2a:57:fe:ed:0a:a3:69:41:3c:f0:57:5e:41:97:fa:
13:a2:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:21 2025 by rpki-client