Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/SILH-qSxDgx7eX-oXJh3NOd3Qrg.roa
File: SILH-qSxDgx7eX-oXJh3NOd3Qrg.roa (raw, json)
Hash identifier: VNcUGFvwX5/w1pzvKedo5FFCUZK318Jsx+l+mT21BeE=
Subject key identifier: 48:82:C7:FA:A4:B1:0E:0C:7B:79:7F:A8:5C:98:77:34:E7:77:42:B8
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 0191B68E44ED7A2591F442D2B28F65233DD5
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/SILH-qSxDgx7eX-oXJh3NOd3Qrg.roa
Signing time: Tue 03 Sep 2024 06:24:22 +0000
ROA not before: Tue 03 Sep 2024 06:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a02:3040:43:ff00::/56 maxlen: 56
2a02:3040:4e::/48 maxlen: 48
2a02:3040:4f::/50 maxlen: 50
2a02:3040:4f:8000::/50 maxlen: 50
2a02:3040:4f:c000::/50 maxlen: 50
2a02:3040:50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:8e:44:ed:7a:25:91:f4:42:d2:b2:8f:65:23:3d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Sep 3 06:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4882c7faa4b10e0c7b797fa85c987734e77742b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:f2:e0:bd:e6:41:bc:5b:6d:22:20:fd:0f:
59:9c:00:5d:82:0f:26:6e:91:8d:8a:28:be:df:49:
5b:71:e0:ac:0a:c2:7e:43:cc:73:ee:da:8f:fb:f6:
20:ac:1e:d7:83:8d:83:09:79:da:37:83:b6:4e:71:
d0:b6:83:ec:46:57:bf:0e:50:8a:d0:76:07:43:10:
90:b7:55:03:b3:7e:76:88:36:02:39:05:0a:08:b0:
0c:41:6a:54:b0:b4:99:52:42:5d:5b:db:a9:ec:63:
28:8a:62:65:c3:36:a6:eb:3c:11:2e:d3:18:8c:0f:
dc:fd:45:29:cd:15:6a:5d:48:9f:6b:25:0c:a5:26:
ff:1b:48:10:d6:6f:1a:26:a0:d5:67:3d:86:a3:6b:
5c:ed:42:7d:d1:f2:3f:5d:45:b4:86:95:21:14:3d:
eb:d1:83:5d:d6:69:78:11:6f:5d:e2:f1:f1:9e:d5:
66:75:68:95:07:cb:16:27:ec:e7:d1:7d:a9:50:02:
7b:bc:40:ed:9b:d8:ff:19:8e:d9:bd:9c:1d:96:27:
a1:48:8b:ab:db:1e:45:4e:3a:bf:1c:e8:27:17:7d:
e8:f8:d7:6e:61:d7:af:14:ce:16:7f:10:89:d4:f7:
12:a6:00:00:72:f2:30:75:93:29:2e:8f:e8:40:ea:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:C7:FA:A4:B1:0E:0C:7B:79:7F:A8:5C:98:77:34:E7:77:42:B8
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/SILH-qSxDgx7eX-oXJh3NOd3Qrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:3040:43:ff00::/56
2a02:3040:4e::-2a02:3040:4f:3fff:ffff:ffff:ffff:ffff
2a02:3040:4f:8000::-2a02:3040:50:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:f7:7c:c8:7a:6d:fb:00:e4:19:f9:50:af:df:51:d4:52:b2:
7c:b2:e5:d5:0a:39:0b:d1:b5:d2:2c:3f:be:9c:d1:c1:8a:7f:
46:4a:05:f3:8b:29:7c:4a:0f:85:52:14:75:23:25:d8:9c:df:
35:65:be:06:6a:3c:d4:ab:c7:12:9f:16:aa:3f:a1:a5:23:4d:
48:4b:a6:7b:72:20:9d:f3:d6:51:89:f7:55:f0:9d:57:50:fb:
51:ad:5b:d8:16:28:ed:7b:f5:fa:f3:b0:78:89:1d:83:fe:82:
3d:86:0b:5f:94:d8:6d:fa:9c:8f:c8:ec:39:e4:af:c2:1d:d8:
13:b6:ed:8a:24:33:49:76:97:51:04:ea:71:25:c1:96:0d:52:
87:a1:01:9d:48:d3:69:6b:c7:ec:ed:76:d6:76:22:d1:4f:61:
2b:01:66:17:59:32:c2:3d:e8:9a:7a:5b:12:ab:5f:4a:00:42:
44:2d:f4:d9:8d:34:c4:e8:b5:02:dd:0e:e0:af:6c:65:be:9e:
d2:bb:25:4d:02:da:42:4a:84:b1:06:2a:7b:c6:c2:de:c8:8c:
83:e5:18:75:75:45:1c:2c:b0:de:15:0b:ad:5d:7f:fa:a1:3c:
f8:34:ab:88:5a:7e:c0:42:f7:3e:cb:8f:01:91:78:1c:af:91:
fe:c1:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:52:15 2025 by rpki-client