Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/FjLc6iE1HCBUPWs6XDYXgHm0OF4.roa
File: FjLc6iE1HCBUPWs6XDYXgHm0OF4.roa (raw, json)
Hash identifier: kIa9UaUqLSZ9J3sHBlTkTWhH3Zl6GZgevA7Dd1AIyEw=
Subject key identifier: 16:32:DC:EA:21:35:1C:20:54:3D:6B:3A:5C:36:17:80:79:B4:38:5E
Certificate issuer: /CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Certificate serial: 019422FB896D2F0CAEC69455532D95964576
Authority key identifier: 9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/FjLc6iE1HCBUPWs6XDYXgHm0OF4.roa
Signing time: Wed 01 Jan 2025 17:48:17 +0000
ROA not before: Wed 01 Jan 2025 17:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34444
IP address blocks: 185.10.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:89:6d:2f:0c:ae:c6:94:55:53:2d:95:96:45:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Validity
Not Before: Jan 1 17:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1632dcea21351c20543d6b3a5c36178079b4385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:cb:69:4d:88:7e:bc:5f:26:24:a6:7c:b9:
b0:54:db:48:0b:e0:c7:00:ca:fb:b9:00:02:87:5a:
83:3a:44:5e:71:4c:77:43:a1:7c:ab:45:fd:24:c7:
d4:44:01:9b:a5:c3:ff:9a:2a:e3:4a:57:8b:fe:2a:
fe:d4:ed:14:f1:47:85:42:99:51:18:42:f7:4b:d1:
70:52:9d:6c:75:04:72:41:51:75:f5:87:9f:85:31:
1b:89:28:c6:69:05:fe:2c:c8:bf:18:cc:2b:2d:78:
24:c4:e6:18:db:75:9d:b7:a8:f6:1e:d0:cb:16:b9:
6f:81:5c:f1:e1:ce:4c:92:17:e5:75:b3:a2:66:78:
14:b8:1e:f3:71:90:2f:78:f7:ce:80:07:af:43:6d:
05:6c:fc:c2:06:e2:d0:ba:74:d5:3e:d8:e0:59:35:
43:ba:d6:b9:e0:80:47:dd:5e:4c:db:02:66:63:23:
66:7f:6f:6e:95:23:70:8d:f3:06:9b:a6:10:cf:6e:
7d:d4:e1:5d:55:fb:51:5e:77:4c:77:0b:24:5b:8c:
e0:76:11:23:49:ae:8a:9e:c8:a3:47:33:fc:cb:c9:
d1:c3:22:a1:17:8e:bd:e3:92:8b:2b:83:fa:73:14:
d2:53:de:d0:3f:cc:ee:0f:14:ba:83:12:ea:7a:d2:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:32:DC:EA:21:35:1C:20:54:3D:6B:3A:5C:36:17:80:79:B4:38:5E
X509v3 Authority Key Identifier:
keyid:9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/FjLc6iE1HCBUPWs6XDYXgHm0OF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.241.0/24
Signature Algorithm: sha256WithRSAEncryption
08:18:19:66:98:8a:94:02:ba:f8:c2:46:6b:d4:f9:07:57:22:
ec:ec:16:b5:44:d4:ef:41:c8:27:b7:e0:50:12:02:05:5c:6b:
e8:2a:9d:9b:72:98:59:9d:c9:52:6c:1c:b0:28:97:65:19:f4:
c2:e7:82:18:39:1c:e1:f8:d2:24:1b:09:ce:6f:d1:39:7d:7f:
97:89:b5:7d:bb:4c:65:5e:76:5f:d2:9c:aa:8e:db:75:bf:9a:
e7:7d:17:27:f6:fc:d7:2d:1e:b6:7a:14:7c:0a:01:38:03:b7:
8d:d0:bc:65:d5:2c:9f:6e:06:50:8f:c1:26:bc:60:b2:2d:d3:
0b:26:d0:61:89:c2:36:2f:84:e6:6e:52:22:70:ab:97:72:7e:
77:46:ac:9c:e1:5b:6a:af:3f:47:ec:99:f0:37:43:18:68:7f:
21:26:48:94:37:6e:61:39:98:79:05:c4:d1:f9:19:fd:30:53:
2e:99:1f:78:1c:99:17:72:ff:e5:98:3a:0d:4d:12:8b:23:69:
86:c0:fa:ed:51:58:bb:d4:41:37:cd:35:dd:7b:c4:1e:99:3c:
30:ce:af:d4:db:a6:5d:8e:e3:5b:e7:0a:e6:3f:fc:47:1a:5e:
f8:69:98:3e:bc:19:53:fa:3f:81:36:69:38:2b:f5:a8:c2:7c:
e0:54:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:49 2025 by rpki-client