Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa
File: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (raw, json)
Hash identifier: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=
Subject key identifier: EB:10:8B:E4:1B:48:5F:46:70:F9:B1:32:2B:83:DB:15:94:37:22:85
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 0194266C1F39C8098879E708B376E76FCC26
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40021
IP address blocks: 176.57.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1f:39:c8:09:88:79:e7:08:b3:76:e7:6f:cc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb108be41b485f4670f9b1322b83db1594372285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:44:2f:57:a2:3c:05:31:01:4c:8b:e8:51:
6c:fc:35:34:71:f3:78:9f:4b:d3:8b:47:bf:3b:b8:
6c:ce:d0:d9:23:a4:5b:f4:ce:ea:28:65:ad:df:fe:
f1:23:38:4c:b4:0d:64:71:03:3b:04:90:40:b7:b9:
fb:9e:d8:c7:54:e9:c5:c0:36:73:08:61:82:2b:34:
01:01:be:d7:61:31:fe:e5:2f:26:56:db:89:37:4a:
bd:f6:e4:f2:e1:75:b9:ac:1c:f5:be:be:11:12:17:
f7:25:7b:0b:65:c5:ff:10:3c:f1:ec:8a:ea:56:68:
ac:bc:e1:23:0b:2c:a8:fd:9f:90:3c:a1:b2:c8:46:
fc:b1:21:87:85:03:61:51:d8:df:77:4d:03:8a:f7:
d3:42:72:b8:9f:4a:3b:56:64:bb:8f:3e:84:c3:3e:
af:61:28:74:69:0d:72:6f:60:b4:55:6a:1f:c9:4e:
85:1b:15:a9:86:7c:c7:ee:a9:10:55:98:8b:40:e2:
08:7c:7c:75:21:c6:9f:8b:bf:9e:b5:ab:ce:12:f3:
4a:ac:4a:52:1a:ee:50:22:e4:af:69:2a:8d:fc:ef:
82:bd:18:cf:a1:19:c6:6b:f5:39:d9:e6:93:e6:48:
87:ab:5c:a7:11:ed:7a:ed:5b:3d:53:31:fd:f2:3f:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:10:8B:E4:1B:48:5F:46:70:F9:B1:32:2B:83:DB:15:94:37:22:85
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.165.0/24
Signature Algorithm: sha256WithRSAEncryption
02:19:04:11:74:9d:96:8a:f8:f5:e1:4e:73:96:c9:d1:1c:48:
c0:3c:e8:fb:82:eb:c1:92:a2:86:b7:25:0a:2f:bd:44:d6:e8:
67:5d:d1:44:0c:b4:31:b0:f1:d4:e8:12:8e:f3:76:ad:9f:dd:
82:4c:11:c1:03:1f:51:53:4d:d5:eb:59:1c:0c:36:d2:51:39:
7a:2b:df:35:30:4d:b2:89:7a:b1:dc:47:5c:55:e4:7a:47:d2:
f7:4c:7a:ae:9f:16:ef:1d:14:76:12:7f:bb:41:7b:93:44:31:
c7:8a:65:2d:0d:b8:2e:7f:c9:a5:ef:01:7b:6c:9c:25:89:75:
c5:70:1c:f9:df:84:e5:f3:72:ba:3e:c6:dd:bb:af:3a:93:37:
e4:83:85:f0:5a:2f:0b:7f:55:38:bc:6d:65:dd:7a:69:2a:9d:
17:8e:3a:88:f4:ce:d4:bf:6b:3a:ff:df:6b:70:07:0c:1f:9b:
90:fb:cd:ab:e1:2d:21:06:15:9f:b4:e1:dc:f1:2d:b5:38:3b:
ac:58:1c:1a:2c:1e:4d:35:66:8a:22:34:6b:fe:91:14:c6:89:
46:35:88:8a:7f:0a:5e:f5:9f:ff:8d:00:9b:46:01:6c:67:6e:
10:86:f0:d4:5d:b1:a7:90:c5:75:f4:6c:41:ff:56:79:6d:b3:
db:11:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:37 2025 by rpki-client