Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa
File: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (raw, json)
Hash identifier: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=
Subject key identifier: 16:EF:15:EC:BF:8A:98:4E:11:43:42:A0:C1:0F:A5:F5:5C:93:16:F1
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 01961F03E8CCDC6DACA6B4A2DB21EED5F5C3
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa
Signing time: Thu 10 Apr 2025 09:24:32 +0000
ROA not before: Thu 10 Apr 2025 09:24:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200888
IP address blocks: 2.56.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:03:e8:cc:dc:6d:ac:a6:b4:a2:db:21:ee:d5:f5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Apr 10 09:24:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ef15ecbf8a984e114342a0c10fa5f55c9316f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:51:ff:02:74:49:ca:44:6f:a9:d9:ad:d1:
83:c8:39:64:04:93:f9:85:00:59:88:8a:33:04:a8:
90:4e:87:09:23:20:c9:16:62:ae:50:13:89:db:a1:
99:40:9c:da:5e:e1:b6:e6:d5:62:1d:2c:a0:a6:a0:
ad:c3:22:f6:21:d2:16:83:70:b1:df:96:8d:c4:44:
7d:0e:a9:51:a3:20:25:2d:01:fe:3b:75:74:bb:be:
47:52:87:bd:52:0c:fd:2d:ab:91:d1:68:67:9d:fd:
aa:a8:f0:3e:7d:97:08:d4:54:7f:a7:bb:10:70:a5:
3e:36:1e:66:31:c0:79:4e:ba:50:5f:04:27:d5:0a:
c8:52:12:91:17:77:be:29:e1:09:86:d0:c0:fe:ab:
90:00:0a:f8:6e:60:03:f8:81:3f:c8:99:fa:0f:78:
16:05:f0:0c:ba:12:c1:30:7b:11:b4:9e:d5:6d:1a:
dd:da:ff:9e:39:73:5f:5b:bf:de:dc:78:b3:95:28:
05:1f:aa:94:01:4a:ce:dc:1f:92:94:7f:f1:d5:53:
ac:75:53:43:d0:44:82:08:41:0d:50:61:42:9f:a9:
29:79:79:47:69:1c:de:62:ef:de:77:d8:24:e8:80:
43:71:33:63:35:ba:be:55:0b:09:ca:97:ff:5f:3a:
eb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:15:EC:BF:8A:98:4E:11:43:42:A0:C1:0F:A5:F5:5C:93:16:F1
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.169.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b3:6c:6f:37:2a:49:29:aa:5e:7f:c8:42:b8:be:1c:12:da:
42:80:86:d2:9e:a0:90:2f:db:9a:43:ef:0a:be:d8:1c:6a:79:
32:88:a5:a9:f9:b3:d4:b1:cc:e2:9a:1e:a7:41:fc:93:8d:af:
ae:65:a7:d4:f2:5e:8a:d1:74:d6:74:03:3c:64:b7:18:1c:b5:
8f:a3:49:02:2b:20:08:6f:87:62:64:2d:ec:1f:57:50:a5:4b:
44:5d:76:13:13:79:29:9c:eb:c7:c5:c3:dd:a4:eb:8a:71:0c:
f5:b3:5d:05:0c:a7:fd:1e:9c:5c:8e:95:6f:d0:e1:53:b1:bc:
1a:77:f6:ac:ec:73:dd:7d:d2:37:05:9f:6e:19:9e:2f:16:2e:
20:84:22:79:71:46:fc:ff:0b:b9:1a:c1:c5:db:65:ff:5d:5c:
16:5f:09:54:a1:83:1b:14:e9:79:bf:26:1d:0c:81:ba:9d:40:
e5:2c:fa:de:32:76:cd:84:d9:00:be:b1:6e:bc:db:2a:53:17:
0e:3e:c6:75:08:d8:4b:b5:8c:a7:c3:15:20:3b:d9:1d:3f:ac:
75:00:be:49:c3:e2:5c:7d:d6:c3:cf:25:34:9b:0c:96:0d:9c:
7d:42:a2:e2:58:e1:c3:d3:ee:c9:64:cc:24:72:f8:7d:97:58:
dd:14:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net