Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/6w2zju3MQesL2h0kBvZh3fnqTpk.roa
File: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (raw, json)
Hash identifier: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=
Subject key identifier: EB:0D:B3:8E:ED:CC:41:EB:0B:DA:1D:24:06:F6:61:DD:F9:EA:4E:99
Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial: 01942747EB04172CFB2EEDFACC9EAC758664
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/6w2zju3MQesL2h0kBvZh3fnqTpk.roa
Signing time: Thu 02 Jan 2025 13:50:12 +0000
ROA not before: Thu 02 Jan 2025 13:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21267
IP address blocks: 185.168.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:eb:04:17:2c:fb:2e:ed:fa:cc:9e:ac:75:86:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0db38eedcc41eb0bda1d2406f661ddf9ea4e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:36:02:e1:8b:ad:ef:6e:70:ec:75:cf:96:
99:2b:f2:dc:8a:0c:05:e3:9b:d0:93:a9:dc:ed:a3:
2e:06:22:04:46:bf:06:f2:a9:d6:93:9b:74:93:ae:
2b:d0:ae:bd:07:6e:f9:f0:d8:52:42:91:f2:8e:71:
94:6b:ea:d5:23:73:4a:87:15:07:ee:b5:a4:b3:66:
fa:fc:7a:79:24:df:7c:a0:8c:e3:8a:2b:f3:1f:0c:
6f:3f:36:67:ba:cb:12:2c:7c:b0:01:06:b6:61:86:
73:e9:f7:d1:77:46:da:37:18:02:7d:c7:ae:90:51:
88:9b:e3:b4:05:0e:41:f9:5d:09:ff:23:58:c5:e2:
46:dd:13:78:1c:f0:1e:d1:a3:93:72:ab:a9:31:4f:
d4:dc:25:78:c5:8f:53:23:05:16:74:03:88:78:70:
fa:2f:8c:23:85:43:24:ae:76:37:9d:62:89:ce:ec:
f5:d0:3e:ec:fb:a4:c6:7f:ee:84:24:40:0c:65:77:
fc:9e:2f:71:ae:5a:82:bf:c8:85:64:10:bf:cd:f8:
bc:64:cd:a7:18:a2:be:e6:78:ca:ac:85:16:94:03:
e3:81:79:86:a1:e0:ab:4e:05:b0:a2:2b:77:cd:bc:
eb:09:c7:71:03:8b:10:03:aa:d0:da:c1:63:0c:cf:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0D:B3:8E:ED:CC:41:EB:0B:DA:1D:24:06:F6:61:DD:F9:EA:4E:99
X509v3 Authority Key Identifier:
keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/6w2zju3MQesL2h0kBvZh3fnqTpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:23:e4:4b:fc:30:df:dc:1c:76:d7:bc:c3:ef:e6:b1:9e:a6:
75:9c:a2:cf:ac:02:69:9b:aa:19:67:05:3f:27:bc:72:c5:61:
4c:a1:7c:19:e9:f2:1b:6b:f5:f9:b4:e7:8b:43:a8:c2:ca:06:
fc:99:13:02:4e:fc:41:05:53:d2:6f:32:68:31:77:7e:31:4f:
28:91:7b:ec:80:2c:7c:82:8a:48:e5:19:75:48:34:af:fd:b3:
c3:86:68:5d:7c:83:72:a7:1e:c1:11:31:0f:d8:3e:4e:c2:60:
ff:e7:29:22:e4:11:88:df:db:41:70:42:39:40:e3:00:0d:6d:
7a:f2:b4:60:b0:f3:c1:27:2d:1b:e3:4a:29:4f:24:18:4f:06:
95:ad:6b:e1:4f:5b:12:5d:92:6b:88:89:ae:fa:d1:05:be:6c:
29:f0:46:0f:75:76:29:ff:53:71:98:b7:bd:df:83:06:4d:11:
f9:e0:04:bb:20:c3:14:f2:85:a2:02:50:a1:2a:3b:d9:59:52:
01:7f:5a:b6:a0:4c:2b:f7:cd:09:85:39:39:c0:a8:b7:4b:79:
26:7c:fc:04:ea:8f:04:19:ae:15:9f:a4:bb:a0:c0:6b:6a:ba:
e5:38:0a:fb:28:f0:e7:f0:ee:4a:f9:a7:e8:ae:36:4d:2f:a3:
20:13:24:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:28 2025 by rpki-client