Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/SiWRZkKpgde5atWHqH4e8qB6Tgc.roa
File: SiWRZkKpgde5atWHqH4e8qB6Tgc.roa (raw, json)
Hash identifier: iSQoSjNloOyOq1kG8c4T/IKGd9ldR/sWYpzULfuNsNw=
Subject key identifier: 4A:25:91:66:42:A9:81:D7:B9:6A:D5:87:A8:7E:1E:F2:A0:7A:4E:07
Certificate issuer: /CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Certificate serial: 01941F8C7AF85F5593002F1E807A123A554F
Authority key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/SiWRZkKpgde5atWHqH4e8qB6Tgc.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202767
IP address blocks: 185.135.116.0/22 maxlen: 22
185.155.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:f8:5f:55:93:00:2f:1e:80:7a:12:3a:55:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a25916642a981d7b96ad587a87e1ef2a07a4e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:79:15:be:11:cd:98:76:e8:21:cb:03:18:
d1:d8:7d:7e:22:ae:df:92:4c:2d:26:ac:67:66:c2:
71:c9:70:1e:93:a0:a4:82:04:4f:1e:b8:76:77:df:
37:9b:9c:fa:fa:28:7d:c0:ea:af:67:53:85:81:58:
b9:c0:e6:c2:a8:10:68:b5:48:68:2c:96:3d:13:ff:
92:39:50:2b:d0:c1:ae:6e:75:49:a2:a1:90:a5:3a:
a4:25:2e:09:19:fc:1c:14:59:98:df:58:c2:f1:6b:
37:f4:9d:92:ed:e9:6e:37:c7:d0:77:bb:51:25:94:
1e:1b:b4:a3:f8:69:b6:89:98:7c:52:c3:c6:18:4b:
1a:8c:84:18:90:59:7c:3e:f0:08:c9:44:76:fa:a7:
ab:94:1f:63:a6:03:82:43:a6:7f:aa:86:0b:fc:cf:
fc:ca:8c:64:3c:8a:2f:25:c7:2f:f5:dc:2e:93:70:
05:2f:6c:33:68:ff:64:81:94:ed:58:a1:bc:f7:dd:
4a:77:32:69:b5:b6:26:2f:dd:57:9e:0e:f9:d9:91:
26:91:9f:5e:5b:d7:9d:28:69:27:78:54:34:28:2d:
3f:af:c7:a9:29:7e:22:80:57:f7:51:b4:9a:ca:98:
f0:fb:ae:37:94:d1:20:3b:60:2b:d5:e5:90:c6:82:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:25:91:66:42:A9:81:D7:B9:6A:D5:87:A8:7E:1E:F2:A0:7A:4E:07
X509v3 Authority Key Identifier:
keyid:60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/SiWRZkKpgde5atWHqH4e8qB6Tgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.116.0/22
185.155.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:56:8b:66:10:60:59:90:a3:e9:f3:22:4a:a8:80:4f:7f:4a:
7f:54:d4:f8:78:29:8a:76:0c:2e:2f:db:83:3b:19:24:c3:59:
01:6d:5c:41:6a:ee:2f:42:86:d4:be:6c:3b:e6:14:30:96:79:
c8:09:96:7b:70:8d:00:fa:f5:40:c5:e6:86:86:0c:ff:27:72:
39:d2:81:67:a3:d9:6c:ca:e5:1d:59:7a:30:97:58:32:eb:af:
fd:6b:9d:80:7a:4c:e9:8d:fe:3d:a6:4e:6a:a5:b2:5e:ba:e0:
6e:d0:3e:ba:05:31:41:5c:31:99:36:7a:99:ce:c7:3c:ee:17:
71:ad:d6:08:cc:c2:f4:17:47:fa:3c:64:55:3e:fe:64:2b:8c:
d5:23:7c:d3:20:ed:f7:c4:7b:a7:29:c8:de:53:44:89:29:6b:
a3:07:5b:93:e8:04:93:7b:98:ac:c5:47:2e:01:11:15:11:9d:
15:cf:ce:6f:2e:f4:cd:3f:41:13:2d:af:14:e1:24:25:3b:f4:
48:2c:84:f9:35:dd:81:1c:58:4c:de:d2:ab:a3:b7:7e:ba:a9:
85:18:93:e0:73:4f:0f:a3:55:48:6f:48:e7:70:84:cf:81:a4:
24:33:44:31:19:ae:71:cb:16:96:33:df:91:93:cb:3e:b3:18:
58:cf:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:57 2025 by rpki-client