Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/FkEOeGCG6FOuT4U--JFdO1PewE8.roa
File: FkEOeGCG6FOuT4U--JFdO1PewE8.roa (raw, json)
Hash identifier: eIbVZKlSGWPsJMIug3qSSnFjSdzCZQjxpUdDU4xeYbs=
Subject key identifier: 16:41:0E:78:60:86:E8:53:AE:4F:85:3E:F8:91:5D:3B:53:DE:C0:4F
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B5C54051BBBF6CB7C63E7AD55FBC
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/FkEOeGCG6FOuT4U--JFdO1PewE8.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204552
IP address blocks: 62.205.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b5:c5:40:51:bb:bf:6c:b7:c6:3e:7a:d5:5f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16410e786086e853ae4f853ef8915d3b53dec04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:dd:b6:eb:b0:dc:4b:ec:48:25:89:fe:ea:
7d:18:c7:69:fd:0b:e6:cc:a8:d2:95:32:c5:6a:d7:
4a:1a:e8:38:1f:12:43:c2:ca:96:a8:57:29:8b:9e:
ed:bd:20:39:53:2f:1d:27:bb:02:8d:25:bc:6a:73:
25:7b:0e:00:8c:b1:c7:f8:61:7b:4e:36:bd:06:45:
6d:6f:73:ec:9b:9c:bd:3e:c3:82:3b:a5:6a:9f:43:
bf:47:1d:80:04:a0:7e:c9:b1:16:29:7d:75:43:01:
7e:0d:f8:9b:9d:7e:d3:99:9d:85:b8:99:e2:8d:ab:
f1:6b:c0:c3:72:a7:9f:aa:47:89:38:1b:e7:c6:7f:
a0:c8:47:f7:66:b2:c3:d3:94:12:98:5b:dc:0e:12:
c3:a8:37:7b:84:a0:06:ed:45:d7:65:9e:7d:8d:d7:
da:67:23:5b:bb:b8:a8:1b:18:75:48:e1:9c:50:7f:
24:08:f6:12:e2:44:3e:f9:01:67:ee:f3:ba:fe:09:
d2:78:af:97:d4:4a:b0:5b:8c:42:39:18:56:e0:7c:
57:b2:44:20:33:e9:76:ed:96:29:c2:d9:e6:f3:70:
0c:14:d8:0c:22:b6:43:0a:ae:87:df:b8:6f:5c:21:
94:69:07:da:4b:f3:e4:2f:2f:a1:a9:a5:da:a8:15:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:0E:78:60:86:E8:53:AE:4F:85:3E:F8:91:5D:3B:53:DE:C0:4F
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/FkEOeGCG6FOuT4U--JFdO1PewE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.156.0/24
Signature Algorithm: sha256WithRSAEncryption
70:af:21:0c:ae:98:c9:8c:72:1d:61:af:c2:7e:ec:ee:20:c4:
26:b4:74:70:7d:c2:1d:1f:4c:e8:94:e8:1a:8b:60:b5:02:02:
f3:7b:ec:4d:cc:fb:5c:b8:41:b3:d1:d4:45:9f:2f:e6:fd:bf:
bf:6e:c2:a0:33:f3:ea:c4:bb:cc:ac:f1:0c:db:9e:09:12:ad:
1f:fd:fa:21:b7:fc:46:14:ed:52:55:1c:9d:49:87:e5:79:f9:
fd:55:01:85:61:c9:b8:5b:78:52:f9:b9:94:8e:12:4d:16:5f:
12:e9:d6:9b:8b:93:c8:ad:69:9b:5e:f7:52:b0:85:7e:64:0a:
a0:29:70:47:6e:97:e7:5a:de:ab:a3:2c:db:7e:1e:57:fa:0a:
ba:73:02:7a:1f:cb:4a:6e:df:2a:75:fd:52:9d:cd:b5:b6:d7:
d0:db:b1:bb:7f:2a:43:67:0a:fa:94:68:15:df:e6:78:58:4f:
12:3b:fb:d1:48:1b:1e:44:0f:b7:3d:4e:f5:03:ec:a2:43:5c:
c1:f2:30:e5:24:52:66:3d:dd:9f:2a:35:56:c8:b9:4e:67:26:
5f:3b:ae:5d:db:ff:f8:ef:02:90:5d:8a:48:fc:71:10:13:7a:
63:4e:b1:ae:4f:04:27:62:04:d5:b7:5d:d4:79:cd:df:2c:f5:
df:31:1b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:28:54 2025 by rpki-client