Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Cra4kSECMYo_90gtcSde3T3S3No.roa
File: Cra4kSECMYo_90gtcSde3T3S3No.roa (raw, json)
Hash identifier: 1/U5xpLF2+2Qz5se1SCRTKzRZLsWB3OMkCPmPmlaHII=
Subject key identifier: 0A:B6:B8:91:21:02:31:8A:3F:F7:48:2D:71:27:5E:DD:3D:D2:DC:DA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A2F08269F503D985D9AD1E43E5592
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Cra4kSECMYo_90gtcSde3T3S3No.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55720
IP address blocks: 163.5.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2f:08:26:9f:50:3d:98:5d:9a:d1:e4:3e:55:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ab6b8912102318a3ff7482d71275edd3dd2dcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:ca:04:8a:f8:2c:55:8a:ff:22:09:c7:7b:
7b:58:f2:e9:d7:ba:5d:38:16:16:c7:8d:7a:14:46:
6f:88:50:c4:5e:4c:2d:74:01:5f:c4:f4:25:f7:f2:
52:93:42:11:c3:35:4e:a0:92:d6:89:46:dd:8d:b5:
c0:37:66:a7:20:07:80:65:5e:25:9b:d4:d2:f2:22:
34:84:22:07:55:bd:7b:d6:af:4f:ba:0c:1f:31:51:
8e:d2:ad:1c:89:4e:6b:e0:40:6a:b1:39:31:b1:e8:
06:3f:48:e0:95:78:54:eb:17:5a:9f:43:6c:46:05:
27:6f:a3:5a:45:1f:f6:b2:07:ee:d7:4f:da:96:6c:
9d:92:a5:c9:5a:ea:4e:d1:00:24:1d:9c:a8:98:9d:
ed:d8:06:ff:0b:1d:e6:df:07:6a:9d:fd:9d:29:f0:
74:7b:58:d4:be:6f:5e:15:3c:0b:06:ef:a7:de:eb:
63:c6:ce:0f:f5:0d:95:4c:5f:eb:9c:f5:3d:36:eb:
7e:8a:41:f8:63:c6:84:82:e4:c5:17:38:2a:d0:34:
83:6e:35:18:54:38:4c:c3:26:9b:ef:7d:40:b9:23:
bf:a3:e6:fe:94:76:a4:28:d7:85:a9:13:06:7a:77:
69:26:03:38:c6:f4:db:f8:82:b2:fe:2a:28:60:a8:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B6:B8:91:21:02:31:8A:3F:F7:48:2D:71:27:5E:DD:3D:D2:DC:DA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Cra4kSECMYo_90gtcSde3T3S3No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.139.0/24
Signature Algorithm: sha256WithRSAEncryption
73:99:d3:1d:c3:30:6e:de:ea:33:d6:7f:2b:a1:fe:c3:d7:71:
9c:bc:ce:ed:55:9c:a6:89:b4:a7:e0:7e:35:f2:30:75:71:e3:
4c:49:77:3a:1a:c7:df:12:eb:1c:ca:80:b3:b8:ca:47:f4:a1:
36:fd:2b:7f:f2:32:eb:86:dc:9c:cb:8d:cb:ac:4d:53:fb:83:
c5:0c:e4:3a:bb:d5:0f:a7:bc:a8:8a:fe:6d:48:0e:d6:48:7f:
e0:67:5b:50:0c:04:77:df:7f:4f:14:ed:63:5d:8b:b3:5d:60:
5d:9c:d6:93:95:df:7f:9d:09:b1:0d:11:ff:dc:d4:60:31:d6:
ff:c0:dc:b6:57:83:62:94:27:c1:40:f8:2f:78:45:bd:77:fe:
2b:fd:75:72:5c:10:8a:f8:7e:b9:07:00:d8:0e:b1:af:65:b3:
10:3c:23:d2:ee:17:15:42:9b:be:08:a8:22:1b:eb:08:02:ba:
3c:d2:fc:ca:71:eb:70:94:4c:df:6e:fb:a1:ca:ac:32:b2:92:
e5:2c:9e:44:36:ff:4d:54:0d:d5:5b:ed:db:45:e0:49:3f:63:
dd:ad:c6:46:a7:4c:84:be:bc:85:93:0c:d2:e7:08:d8:b7:0f:
d8:79:b3:32:0e:44:55:11:b5:a4:47:7e:de:c6:44:48:29:87:
06:b8:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:47 2025 by rpki-client