Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/E-owwaRkGBOgTW0gbT6t0z8jYpA.roa
File: E-owwaRkGBOgTW0gbT6t0z8jYpA.roa (raw, json)
Hash identifier: MzJgxXYLXxOfkRd2uBOOGYCYN+rSmPW8si+rCfGvcKY=
Subject key identifier: 13:EA:30:C1:A4:64:18:13:A0:4D:6D:20:6D:3E:AD:D3:3F:23:62:90
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 019425FC1BE25AE378E046910BF2B46CB328
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/E-owwaRkGBOgTW0gbT6t0z8jYpA.roa
Signing time: Thu 02 Jan 2025 07:47:46 +0000
ROA not before: Thu 02 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56786
IP address blocks: 185.229.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1b:e2:5a:e3:78:e0:46:91:0b:f2:b4:6c:b3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13ea30c1a4641813a04d6d206d3eadd33f236290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:67:42:ba:bc:61:b2:93:c9:82:5d:e8:21:fe:
c0:95:71:bf:d4:97:ce:47:83:80:1b:3f:28:68:ac:
07:e1:23:2a:4b:31:ed:e3:d3:d2:f8:78:aa:19:36:
fb:cd:20:4a:ee:6f:28:f1:61:4c:6d:82:f6:37:1b:
7c:8e:fc:e4:64:b5:f4:3e:83:5c:65:d2:8e:b9:b3:
6e:8c:2c:f2:ff:f1:83:45:58:49:10:2e:1d:95:1a:
1e:66:30:37:33:c8:2d:0b:75:dc:b2:35:18:b6:b0:
2f:02:0f:3b:9a:85:31:b6:62:8a:53:b8:50:ed:ed:
0c:d9:ef:54:fe:49:51:b6:44:8d:ca:b0:64:49:63:
b2:b6:ba:87:12:28:c0:96:5f:ea:ba:b1:c8:71:c5:
45:67:40:36:e9:ec:76:ad:66:5d:26:ec:ca:51:cb:
80:45:08:c0:e4:c3:41:d1:cc:67:30:48:a9:89:74:
c3:65:af:7b:20:e7:7c:e5:93:bf:86:54:52:85:f2:
78:04:ec:b8:1d:6e:51:d1:6d:84:32:75:02:15:23:
8d:be:75:d2:04:62:b0:10:68:4a:11:39:9b:9d:2d:
a7:c9:80:48:09:f0:cc:16:80:14:e7:67:a9:75:a3:
80:f3:21:fe:f9:8f:60:4b:9f:2f:9c:70:43:39:59:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EA:30:C1:A4:64:18:13:A0:4D:6D:20:6D:3E:AD:D3:3F:23:62:90
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/E-owwaRkGBOgTW0gbT6t0z8jYpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.16.0/22
Signature Algorithm: sha256WithRSAEncryption
75:cc:43:04:a4:05:63:46:26:1e:69:ac:9c:32:33:65:02:61:
0d:4b:71:57:fe:bd:5d:95:07:a7:eb:24:b9:63:59:f1:92:89:
ba:0d:95:94:22:1e:a7:da:93:fa:00:e8:d9:3e:95:6e:9e:58:
7e:11:b3:a7:d5:0b:fb:63:b6:cc:ac:47:c3:2f:96:9f:6d:67:
94:55:98:0b:31:a3:62:a5:72:f9:50:0f:2d:30:65:38:6a:ec:
b2:69:9b:7d:4c:ca:78:d6:32:bb:91:19:1b:16:af:f9:a7:ff:
d8:98:1c:b8:5f:35:e7:37:c2:b9:7a:63:20:74:27:74:2b:27:
77:b8:0e:0f:27:a4:81:25:8b:3d:61:5c:c2:d4:70:e6:34:b1:
da:78:55:e6:74:e5:bc:88:8d:8a:1d:8b:56:26:2c:da:41:ae:
f1:aa:76:4d:ce:47:14:e7:b8:4a:4e:b6:18:f6:96:4d:45:66:
a6:b9:38:1f:35:48:03:6f:d3:59:35:da:9c:96:76:b5:f5:14:
59:75:a8:46:01:8a:07:34:41:95:8e:8e:ad:7d:b7:67:1e:c2:
ef:84:e9:c7:57:a3:0a:4c:7d:65:2f:6f:95:d6:0a:9d:f4:f5:
1e:f7:7b:50:b8:4f:3e:8f:0b:a5:93:a6:f0:8f:4a:b0:41:f5:
ac:ce:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:45 2025 by rpki-client