Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/FX3UzX2cO5ERnTlsaAL3sjb5pqM.roa
File: FX3UzX2cO5ERnTlsaAL3sjb5pqM.roa (raw, json)
Hash identifier: sf856XhluVLLaFcW6LL5qwxltKysuWcuVyaabODyAaA=
Subject key identifier: 15:7D:D4:CD:7D:9C:3B:91:11:9D:39:6C:68:02:F7:B2:36:F9:A6:A3
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01958A8FB9FA0C8509540F0558496F57E3E2
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/FX3UzX2cO5ERnTlsaAL3sjb5pqM.roa
Signing time: Wed 12 Mar 2025 13:33:49 +0000
ROA not before: Wed 12 Mar 2025 13:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 185.83.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:8f:b9:fa:0c:85:09:54:0f:05:58:49:6f:57:e3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 12 13:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=157dd4cd7d9c3b91119d396c6802f7b236f9a6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:da:e8:56:3f:a7:90:06:90:c6:68:e4:e2:
da:a3:70:97:0d:a8:ea:80:9e:24:68:73:34:f6:0d:
5e:61:df:c8:12:bf:81:e3:1c:7a:a6:91:ce:59:2b:
e9:1d:16:6a:29:fe:35:61:63:63:62:c6:71:23:d4:
18:41:b1:57:e0:b0:73:61:54:68:2b:98:0b:f3:e3:
ba:1e:07:53:57:0e:82:ec:5e:b6:67:f7:cf:58:e0:
d9:25:5d:6c:a8:d3:96:d8:67:e4:6b:d6:d4:d7:10:
06:71:89:6a:93:45:a6:90:a5:6f:5c:51:67:2c:3b:
f8:c9:f8:72:fa:b8:fc:44:00:70:59:a1:26:2c:e1:
45:e3:9a:d6:8d:e5:14:d4:a2:2b:21:91:e3:51:cb:
a2:14:01:43:9a:13:eb:79:6d:91:61:41:19:86:63:
d5:9e:9a:7f:56:cf:43:70:c0:e5:c0:f7:26:82:01:
4e:28:c6:a3:d2:48:77:65:f1:f5:36:a3:c0:5a:7e:
94:3e:87:64:41:29:69:68:89:5e:67:83:85:9f:ce:
ea:a5:f7:44:06:7f:c0:11:36:a7:8a:6e:9e:bf:76:
11:98:d9:05:62:fc:6d:bb:a1:f8:a7:2c:ed:4b:5b:
ac:04:a5:64:32:69:7a:cd:af:b3:67:be:09:cb:71:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:D4:CD:7D:9C:3B:91:11:9D:39:6C:68:02:F7:B2:36:F9:A6:A3
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/FX3UzX2cO5ERnTlsaAL3sjb5pqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a5:54:3b:30:3e:97:9c:ef:25:fa:cd:d7:65:09:fd:1a:c0:
14:e3:49:96:64:4d:f8:06:d2:01:9f:8b:41:e7:9a:6c:c7:aa:
4e:e9:6a:b0:ef:f9:98:ce:5d:c3:fb:1e:eb:07:38:06:ba:f9:
36:04:ae:1e:5a:7a:64:1a:a6:c6:c9:b4:60:8a:45:c2:0f:3d:
b1:97:04:be:18:9e:5a:f7:48:4c:5c:e4:2b:ab:5b:9e:59:d5:
be:2e:ac:d5:5c:74:3a:f5:78:43:0d:8d:1c:67:93:ce:82:07:
1a:2e:4c:1f:6d:0f:cf:de:72:ec:70:65:01:bd:f5:0e:d7:01:
18:cb:56:5f:2b:3b:37:f7:bd:15:6b:81:5a:80:90:47:f3:2a:
66:d8:10:8a:28:0e:ca:61:6f:e1:72:cc:20:0c:1b:1c:00:41:
c7:4e:da:70:6f:0f:d0:9f:9d:43:53:aa:29:13:61:50:c2:6c:
86:db:be:bd:8a:d4:6f:ba:01:e7:9b:6e:cf:c8:48:c3:cf:05:
7e:b1:bc:0d:cd:fb:a5:bb:c7:d0:77:fa:eb:ed:98:fa:67:13:
4d:fa:f7:07:97:fc:79:87:a0:47:bf:51:6a:81:c1:82:27:b8:
94:b9:6b:08:d6:7d:e9:4a:2f:61:8e:78:35:57:4e:55:55:a9:
04:84:55:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:24 2025 by rpki-client