Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/SiRuz5DPXz9HshuqRJYB7VyQXyE.roa
File: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (raw, json)
Hash identifier: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=
Subject key identifier: 4A:24:6E:CF:90:CF:5F:3F:47:B2:1B:AA:44:96:01:ED:5C:90:5F:21
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 01942521BE95089310B82C1E8C92DB55CACD
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/SiRuz5DPXz9HshuqRJYB7VyQXyE.roa
Signing time: Thu 02 Jan 2025 03:49:15 +0000
ROA not before: Thu 02 Jan 2025 03:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.187.104.0/24 maxlen: 24
185.187.105.0/24 maxlen: 24
185.187.106.0/24 maxlen: 24
185.187.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:be:95:08:93:10:b8:2c:1e:8c:92:db:55:ca:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Jan 2 03:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a246ecf90cf5f3f47b21baa449601ed5c905f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:67:9c:08:37:a1:63:8d:d9:e0:9e:af:2b:
bf:7c:8c:4f:e8:1d:57:07:68:a9:b5:0e:87:f7:d8:
3b:e5:62:5c:bb:47:62:68:11:e2:9f:72:68:2d:87:
e0:e5:d5:84:53:ea:22:9c:2b:c5:e2:fd:1b:88:22:
6d:85:1c:df:02:ea:11:52:2b:da:ac:44:59:d7:32:
cc:fd:66:d0:61:3d:82:f9:39:c3:fb:d2:ae:49:61:
0b:40:1f:51:7f:82:28:f9:25:2c:0e:00:86:ef:8d:
38:b5:6d:05:19:da:e7:79:0d:e3:7f:41:38:c0:94:
28:1e:8a:9c:c8:51:0b:da:88:db:91:9b:9a:d2:22:
58:6e:54:57:89:46:53:65:20:3f:9b:a7:48:5a:78:
87:21:a3:3f:19:04:88:75:73:a3:23:0a:88:20:f0:
3c:db:8b:52:7c:52:5e:f6:f6:f5:9e:cc:84:7a:56:
cf:ed:3a:b7:b1:e5:14:9d:bc:62:7a:09:c3:72:77:
71:ae:29:06:26:49:62:d5:39:ea:00:dd:7a:18:f0:
e1:94:e7:8a:86:e6:41:6b:ed:16:8f:75:cc:d2:88:
f6:eb:d0:4d:c7:19:58:ee:50:cf:ef:f4:21:c5:55:
48:17:9f:ed:4e:57:f6:18:f1:84:d4:2d:3a:73:82:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:6E:CF:90:CF:5F:3F:47:B2:1B:AA:44:96:01:ED:5C:90:5F:21
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/SiRuz5DPXz9HshuqRJYB7VyQXyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.104.0/22
Signature Algorithm: sha256WithRSAEncryption
74:d8:19:60:b4:bb:c8:2a:7f:61:83:25:9a:90:aa:db:2e:2a:
d0:b1:db:05:6a:df:77:9a:c1:d3:e2:9c:bc:11:bb:5b:e2:6f:
fb:65:7c:3e:0c:49:e6:1f:38:2d:ff:d0:40:a8:63:55:2a:69:
8c:73:2c:fa:bb:a3:68:12:26:db:10:4c:76:b0:2c:aa:2d:42:
a4:a6:5e:f8:31:e9:dc:61:a6:3c:a5:fb:33:25:0e:c9:da:33:
73:13:f5:a1:b3:ae:f3:dc:0d:ee:81:23:27:b2:84:c0:23:99:
2d:31:fe:61:be:00:b9:01:b7:1f:2a:03:7d:0c:53:07:c5:0f:
66:90:b8:22:c0:92:1f:19:00:ec:a7:0c:62:56:99:17:2d:ef:
ca:b1:f1:d7:05:45:96:95:44:d4:06:b2:c9:73:b0:1b:6d:14:
ef:d3:95:15:fe:6d:9d:74:02:73:e3:3e:c5:b5:99:ef:fe:a4:
a8:4c:14:14:37:ac:d8:4e:b5:55:ea:b2:ed:4b:31:2f:68:f8:
e9:77:f8:63:37:d6:21:99:96:c3:8f:bd:2f:42:7f:87:08:d7:
15:19:f2:4e:ec:17:ba:76:a3:e6:82:52:cd:09:6b:33:70:8f:
e5:90:4e:28:4c:fd:1d:8f:b1:1c:a9:37:ab:c7:00:37:31:d7:
3d:9c:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:01:46 2025 by rpki-client