Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa
File: SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa (raw, json)
Hash identifier: FJ99//JtNMttiwoypIrlcD1qx1Pik8unMC0r91//nuo=
Subject key identifier: 49:8F:9A:2E:E4:62:02:0A:16:69:9F:86:EC:88:8D:B8:43:40:C5:F0
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 01942748672F2220B0B315475EB38AEA9ECB
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 185.142.40.0/24 maxlen: 24
185.142.41.0/24 maxlen: 24
185.142.42.0/24 maxlen: 24
185.142.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:67:2f:22:20:b0:b3:15:47:5e:b3:8a:ea:9e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=498f9a2ee462020a16699f86ec888db84340c5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a6:f8:e3:0a:c0:80:c9:fe:c3:02:88:8f:3e:
e5:a7:59:8e:b6:c0:a8:a5:d0:34:51:19:40:39:d7:
f5:3d:5a:a7:a7:a7:87:9f:98:92:61:fe:24:c1:1a:
3a:40:12:72:ee:75:ff:cd:61:89:e8:2a:2d:7a:c3:
a4:ef:f1:a2:5f:06:ad:a9:1a:73:04:32:d4:10:1d:
92:c2:f4:0c:fc:7d:52:b2:ae:3a:4a:1d:b4:01:b9:
ff:fe:2a:87:c2:d6:6f:d5:26:9f:a8:0f:c5:fe:29:
0d:95:1d:f7:18:da:08:0e:5c:47:85:e6:c9:53:63:
57:14:ce:27:4a:9d:6c:fc:c6:05:7d:17:7f:05:1c:
c6:e7:57:8b:8a:8c:67:42:1a:8d:0c:df:98:79:7f:
ea:c9:6c:4a:ed:ae:19:48:b7:df:50:77:6a:a6:af:
c8:63:a0:41:65:e7:e0:40:1c:1e:74:d2:5e:f2:07:
4f:3d:81:c3:51:64:99:81:3a:c4:ee:aa:2b:50:af:
56:34:3b:f7:62:07:92:da:78:59:66:0b:07:c0:f8:
c7:f5:42:88:a8:4a:17:ef:b5:b2:2c:ee:5c:8e:d4:
d8:08:ca:87:4e:10:63:96:df:99:2f:5b:fc:48:39:
8b:61:65:8c:22:10:22:b5:c2:3f:4e:16:65:32:cb:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8F:9A:2E:E4:62:02:0A:16:69:9F:86:EC:88:8D:B8:43:40:C5:F0
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/SY-aLuRiAgoWaZ-G7IiNuENAxfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ee:1b:a3:ca:b7:43:d2:8e:50:df:8f:15:70:16:a9:7e:39:
a3:50:7c:18:7f:b0:f2:95:65:02:4c:c3:43:5d:d7:33:f7:6e:
eb:aa:9b:e9:90:f3:aa:4b:b6:5a:4d:1e:ef:94:f7:ed:de:11:
eb:db:a9:a0:09:3b:05:50:af:52:7b:d3:09:da:fb:50:89:7a:
a9:95:34:17:39:ff:50:d9:78:f3:65:77:1b:8c:4e:9d:c6:16:
d8:13:84:51:73:e0:9e:8e:31:5e:eb:8d:59:d7:97:4d:89:56:
59:3d:2a:d5:88:a9:bf:d3:eb:10:1b:41:6c:59:47:c9:61:ff:
ab:b1:71:b4:d7:f7:95:f6:9b:36:8a:89:3a:44:ef:60:d7:4b:
ce:e0:ab:af:b0:94:e7:fb:ef:80:42:16:2e:bf:32:ec:be:df:
76:32:ad:62:fb:9e:65:9d:01:1b:5b:58:8b:cb:50:10:52:b4:
dc:42:39:36:34:bc:b2:3e:c6:62:39:35:de:3f:9e:1d:c8:26:
d2:12:27:b4:78:33:03:d8:c0:d2:86:8e:a7:04:ea:4f:47:2c:
85:ff:08:08:c2:a2:a1:8b:70:7b:30:a1:d7:28:cf:3d:4d:c1:
34:72:b3:49:ab:0b:bc:fd:46:4b:dc:04:46:22:a6:3d:aa:01:
24:18:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:24 2025 by rpki-client