Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SVkxsib9RLbRM3qyIE2gqupTgww.roa
File: SVkxsib9RLbRM3qyIE2gqupTgww.roa (raw, json)
Hash identifier: lVnzE9MNq6cGjpYOh+jEzRyJGqU/qf7bPILtSJAqFnE=
Subject key identifier: 49:59:31:B2:26:FD:44:B6:D1:33:7A:B2:20:4D:A0:AA:EA:53:83:0C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A20B5141096D9989717D7030FDF3C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SVkxsib9RLbRM3qyIE2gqupTgww.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 163.5.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:20:b5:14:10:96:d9:98:97:17:d7:03:0f:df:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=495931b226fd44b6d1337ab2204da0aaea53830c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:60:17:af:0d:eb:56:1c:0e:ca:6d:d2:25:
6d:15:89:af:36:dc:dd:84:80:80:02:2e:7e:54:34:
b6:fe:1c:1b:03:2d:0d:f7:4f:3a:a7:aa:4e:7a:a6:
30:9c:89:0b:8f:2b:88:b8:c9:ee:a6:f6:7f:e0:4e:
32:4a:28:19:e8:02:7a:bf:9b:27:f4:74:ba:a4:4d:
47:61:ff:0c:0f:d2:13:22:b1:9b:26:f2:cf:ef:36:
c2:3c:12:53:87:6a:31:64:1e:f6:38:2f:45:8c:4a:
4e:bd:b4:11:ee:ad:22:1f:67:b5:1a:c8:30:0c:63:
19:49:c7:06:d2:c6:cf:a7:7a:34:05:5b:19:f8:cb:
79:ce:d1:14:2d:71:95:92:e1:2a:d3:2b:c8:b2:cb:
e7:f6:aa:65:27:66:08:d1:87:ba:79:c3:b8:9e:04:
a0:b4:a8:94:83:79:97:b2:fa:22:e2:ab:7e:22:16:
ac:3b:68:9b:58:4e:96:a0:02:fd:c0:07:c8:f9:72:
3b:2b:fd:b3:80:4e:1e:ca:83:c4:39:a2:11:d3:9b:
30:f4:5c:65:b9:dc:2f:b5:d3:60:03:47:c1:82:20:
66:d2:5b:fa:0c:fa:63:df:b4:1f:33:8b:a8:63:ff:
75:b0:62:03:a0:cd:7d:6f:1f:c3:56:c3:bd:8b:94:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:31:B2:26:FD:44:B6:D1:33:7A:B2:20:4D:A0:AA:EA:53:83:0C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SVkxsib9RLbRM3qyIE2gqupTgww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.47.0/24
Signature Algorithm: sha256WithRSAEncryption
22:31:c4:06:8e:8a:10:ca:72:83:e3:9b:ed:cb:a1:a4:03:ba:
60:95:ef:1b:44:3d:01:3a:1a:6c:54:e1:5f:c5:a9:c8:c8:77:
a3:2a:86:f3:89:de:6c:3b:88:f9:81:55:a4:dc:70:33:67:62:
15:c0:c8:ef:28:8c:d2:e9:74:f4:e8:a1:e3:08:43:2e:f8:ca:
b1:11:f2:4f:59:53:bb:45:c3:a9:32:7d:04:89:64:99:9c:1d:
e7:93:0e:fc:3f:0b:55:b2:d5:06:6d:88:ff:8a:cd:f3:27:56:
0e:12:72:27:e1:d7:1b:a5:69:f4:8f:8a:6b:68:e8:65:44:31:
2c:b3:95:25:2b:76:3f:d3:0d:ad:4a:ac:48:0b:af:69:60:a1:
75:a8:a2:c7:2e:9f:ad:e1:c0:0f:64:b7:07:05:9d:7c:dd:93:
f7:a9:57:d6:f3:45:70:48:86:04:73:ec:9b:c7:fb:d8:26:21:
70:9b:a3:2d:dd:13:d9:51:44:ae:33:c6:0f:84:b7:e1:c8:b8:
c2:3a:79:cc:bd:17:6e:5b:cc:90:2d:00:f1:6b:61:ec:14:6c:
6d:c9:1e:e2:57:c8:6a:c6:de:51:9f:49:40:0a:b0:e3:21:f4:
4d:02:13:9d:15:75:4e:34:0e:23:8e:5f:20:ce:dd:47:ec:c8:
eb:c2:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:09 2025 by rpki-client