Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sIZ_RL_UAD-bvnmWZeUmMW4nFF0.roa
File: sIZ_RL_UAD-bvnmWZeUmMW4nFF0.roa (raw, json)
Hash identifier: 7nRZX194hreYnFhiX7i80YQYyE5sA19qEAbvWOyPubo=
Subject key identifier: B0:86:7F:44:BF:D4:00:3F:9B:BE:79:96:65:E5:26:31:6E:27:14:5D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194845ACFC3EC11F6946FE20D2E50F12F93
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sIZ_RL_UAD-bvnmWZeUmMW4nFF0.roa
Signing time: Mon 20 Jan 2025 15:35:31 +0000
ROA not before: Mon 20 Jan 2025 15:35:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44948
IP address blocks: 77.81.50.0/23 maxlen: 23
109.61.104.0/21 maxlen: 24
139.28.96.0/22 maxlen: 24
194.50.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:5a:cf:c3:ec:11:f6:94:6f:e2:0d:2e:50:f1:2f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 20 15:35:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0867f44bfd4003f9bbe799665e526316e27145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:4e:9d:01:d9:99:ae:6d:5f:07:0e:b6:bc:
6e:82:e1:c9:bd:38:f9:58:7d:00:a5:19:0c:08:54:
e8:d5:a7:91:25:58:31:61:91:b7:d7:22:3d:25:d7:
eb:59:e5:2f:a7:57:c5:50:93:70:a8:23:a3:bd:cf:
c6:2a:99:32:0b:49:98:dd:a5:e7:11:5d:0a:75:fa:
88:aa:a0:60:49:1f:70:83:53:34:e5:87:df:c3:99:
45:1e:b6:43:c6:51:e3:26:6e:e2:bd:8d:bc:33:75:
50:ba:6c:c3:9a:d9:d3:ed:d2:59:6e:03:f1:a1:4b:
4f:ed:2b:bc:96:a1:5a:2e:9f:22:6d:8f:ff:49:a8:
ab:49:78:09:7b:49:f8:f4:d1:a9:4d:d2:30:9a:25:
3d:55:87:46:29:32:73:1c:ca:e5:2f:f4:c3:26:7e:
5c:b2:37:9f:a2:60:ae:89:b3:9c:f3:2d:4f:e7:96:
87:97:fb:af:e5:2a:62:a9:43:c0:f8:71:a5:5b:a5:
b2:4a:51:f6:81:c3:74:59:bd:83:47:aa:db:99:c6:
dc:c8:4e:e0:c3:6d:4e:b3:ca:af:09:04:c7:ac:24:
a1:d2:22:27:b7:6e:ac:3c:ea:1a:e5:aa:8f:c3:35:
d7:d7:46:9c:ee:ee:cd:dc:51:c8:84:60:ee:27:cc:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:7F:44:BF:D4:00:3F:9B:BE:79:96:65:E5:26:31:6E:27:14:5D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sIZ_RL_UAD-bvnmWZeUmMW4nFF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.50.0/23
109.61.104.0/21
139.28.96.0/22
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a0:5e:ca:74:a2:2b:8a:4a:60:ef:35:ff:ef:53:11:c8:7b:
b9:4e:1e:eb:05:43:e1:2f:7e:90:88:81:82:99:a1:4f:0c:b5:
51:82:71:a5:5e:ba:e3:80:cf:c8:17:a2:ef:7d:20:c6:f1:db:
e2:04:6a:a4:14:72:3d:9f:c1:de:90:c3:b0:9c:05:cc:7c:8b:
3f:66:41:d0:a0:2c:f3:08:23:35:b0:af:7c:42:46:ea:25:35:
a5:22:3c:d8:c4:85:54:a4:1c:c1:9e:ed:54:b6:22:06:4b:f4:
97:85:8c:94:c9:c4:f9:d0:26:5c:c8:fa:2e:f0:bb:b0:ba:0e:
5e:3c:b8:3f:88:50:71:d6:6e:5b:45:49:5a:61:18:98:4b:de:
27:45:b4:a2:e6:08:93:35:2d:6c:4a:70:df:a3:a2:6b:b0:09:
90:1b:62:6c:36:13:e5:26:cd:58:a9:66:9e:21:18:90:b9:17:
1a:4e:77:d6:af:be:aa:e7:cf:06:3a:e9:b1:eb:b6:b2:2a:6e:
fa:24:a7:89:db:bb:1a:db:95:7a:7a:80:ed:0d:99:24:9c:a3:
53:00:63:8b:bc:ea:4e:4a:80:32:5d:8b:7b:77:4c:06:a0:76:
89:62:a2:b6:dd:f3:93:82:c4:20:4a:7a:c0:2b:68:6f:39:5b:
61:c3:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:38:33 2025 by rpki-client