Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/owuwWzW3ptzbUlMGr01FLYIGSSY.roa
File: owuwWzW3ptzbUlMGr01FLYIGSSY.roa (raw, json)
Hash identifier: E0V5+KOpIdqo+plR/JmJS5ifpH340RwXyldBs+uj1oQ=
Subject key identifier: A3:0B:B0:5B:35:B7:A6:DC:DB:52:53:06:AF:4D:45:2D:82:06:49:26
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019426D94793712073560DC8F671FB4860A4
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/owuwWzW3ptzbUlMGr01FLYIGSSY.roa
Signing time: Thu 02 Jan 2025 11:49:21 +0000
ROA not before: Thu 02 Jan 2025 11:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29447
IP address blocks: 83.158.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:47:93:71:20:73:56:0d:c8:f6:71:fb:48:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Jan 2 11:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a30bb05b35b7a6dcdb525306af4d452d82064926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:dc:03:93:b6:a7:61:d0:3c:b6:73:c3:bb:
79:b0:1d:ba:f7:a2:0f:e3:4d:1c:e0:ea:f2:d4:85:
b3:db:ca:87:98:6a:cb:09:2e:5e:18:71:ec:59:4b:
bd:a2:08:f0:66:2d:f2:4c:13:0e:da:9b:0b:13:49:
55:f8:de:6f:c3:98:1d:96:21:09:6b:b5:30:e6:5a:
37:57:81:12:07:5a:df:37:ec:f1:5c:fe:36:8f:3f:
3d:66:a9:c2:38:7c:62:39:6d:fe:a4:b0:4e:92:ed:
0a:4e:f4:c2:14:08:8c:3b:dd:08:b6:a2:b7:63:fa:
5d:71:11:28:7a:4f:5a:1c:cf:5d:da:75:b6:97:44:
6e:16:36:52:e1:06:33:46:fc:56:1b:43:2e:8e:45:
73:1c:e3:a9:bf:5a:74:87:91:46:64:c7:ed:c9:24:
08:07:b0:b6:4e:32:ea:3e:d4:14:2f:50:ed:48:75:
56:6d:c7:d7:39:b1:1a:bf:37:68:d5:62:04:90:20:
7b:1e:22:34:91:ef:ef:b5:40:10:89:89:4d:e4:fa:
14:c2:69:1a:d2:7f:ab:9c:7d:ef:25:19:00:ae:e1:
6b:f8:c6:c0:c4:db:65:f2:3e:18:da:f2:a4:2f:5a:
3e:dd:d8:23:97:e3:a3:b5:64:9b:66:0d:4f:b2:68:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0B:B0:5B:35:B7:A6:DC:DB:52:53:06:AF:4D:45:2D:82:06:49:26
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/owuwWzW3ptzbUlMGr01FLYIGSSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:4a:e4:a9:7d:39:82:e6:2f:8a:56:97:73:6d:12:8f:c6:cb:
18:02:25:7f:50:0a:c8:ce:98:38:5b:20:38:c6:5a:27:7c:87:
69:b6:3c:fb:fc:f7:2f:17:58:ef:65:a7:ab:e0:14:4c:a7:12:
82:2a:76:0e:0b:a8:21:74:ca:b3:7d:90:c3:e6:a7:87:0b:f4:
88:70:ef:bf:a8:6e:81:82:8f:50:4e:6f:02:05:85:98:33:b6:
e7:0c:86:43:44:f4:fa:67:3b:5d:e4:9a:a8:c4:6c:44:76:08:
3d:1a:63:58:26:a6:79:cd:cd:88:e6:7b:0f:f1:ab:1e:c9:90:
5f:e9:73:f5:34:20:92:53:15:26:f0:22:c1:c8:3c:13:d3:08:
ac:f1:98:07:4e:72:19:af:fb:7c:de:bc:04:38:cc:01:a1:b3:
10:64:76:49:53:27:b0:46:8d:a4:c4:5e:4c:9b:ab:7e:55:d7:
e6:42:fd:55:2e:c8:8a:d3:6d:55:13:94:a1:c3:e3:7d:be:f0:
d1:23:e1:22:f8:8c:b9:83:ef:cd:ef:3b:73:d8:d8:dc:dc:b3:
f7:fa:fb:df:f1:fc:8d:e8:b5:52:a5:64:31:3e:e3:8a:92:58:
dc:db:ba:92:29:8c:eb:04:cf:7b:2b:20:6b:ad:12:3c:1a:3d:
22:4d:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:51 2025 by rpki-client