Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cN9QrnFhp9ZUrbqGK3gHQQcvCco.roa
File: cN9QrnFhp9ZUrbqGK3gHQQcvCco.roa (raw, json)
Hash identifier: /x98nWkBGU933Q8yo+z5DNXGNZYWxHfJeoNUARAfr5Y=
Subject key identifier: 70:DF:50:AE:71:61:A7:D6:54:AD:BA:86:2B:78:07:41:07:2F:09:CA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A3D80A096B4E747A863FFFD00855E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cN9QrnFhp9ZUrbqGK3gHQQcvCco.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199432
IP address blocks: 163.5.84.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3d:80:a0:96:b4:e7:47:a8:63:ff:fd:00:85:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70df50ae7161a7d654adba862b780741072f09ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:5d:26:5b:d9:86:58:f3:77:a7:6c:d4:d5:
ce:be:3a:59:f6:bd:e1:b6:f2:df:f8:a4:ee:45:c3:
66:11:2a:ff:9f:fe:9b:69:f5:75:37:2a:55:36:f1:
2e:1c:a1:94:e4:4e:48:98:3f:af:17:65:0a:18:8e:
a7:a6:dd:dc:77:6f:ae:29:9f:92:19:9e:c0:40:56:
bc:8e:1f:9c:c5:46:d4:0d:2c:f2:46:2c:30:f9:75:
af:f5:78:13:46:cd:63:a2:8a:e3:d8:24:bc:c6:f2:
3b:1e:7b:3b:e4:cb:e3:56:64:12:1a:bd:d9:54:10:
85:41:3e:4f:35:de:76:af:cb:3c:c8:83:37:75:2a:
5a:56:19:86:ab:3a:9c:60:e5:dd:20:df:99:1f:dd:
af:e2:5f:48:28:3e:5b:2d:5f:61:4a:5d:33:08:50:
1e:41:3d:a9:1b:fe:dd:d0:a7:d0:38:bf:ca:de:44:
a7:bc:05:14:50:1e:2a:15:0e:96:f0:ea:72:e4:97:
87:74:42:3d:1e:cf:dd:13:b2:29:78:fa:09:44:7d:
83:18:10:0b:1c:66:b0:ce:e8:55:a4:69:bb:0b:c3:
59:6c:26:10:4f:29:c0:1b:10:46:21:ad:ce:ee:d6:
23:16:96:f9:c1:de:2d:d9:1c:8a:f3:3b:cf:87:7e:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DF:50:AE:71:61:A7:D6:54:AD:BA:86:2B:78:07:41:07:2F:09:CA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cN9QrnFhp9ZUrbqGK3gHQQcvCco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.84.0/24
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:41:fc:dd:01:26:1f:b7:d0:ec:4f:d0:3b:cc:77:47:cd:89:
9c:85:52:70:38:05:47:e2:87:9b:97:2e:7b:6b:79:22:00:c4:
fb:f4:76:c8:2d:26:4d:d7:be:d5:a3:05:63:c6:d3:53:2e:c2:
04:3c:99:27:ae:01:f7:81:32:34:c1:fa:de:e2:7a:0c:26:42:
d1:3d:53:72:4d:14:db:d2:a0:e2:7f:fc:dd:5e:ce:62:b6:31:
e4:62:c1:98:7b:72:7c:c8:d9:18:9c:36:b1:38:75:a7:79:16:
4b:f5:1e:e8:1b:c8:71:36:b3:a5:52:46:15:c0:72:b8:21:84:
09:a8:06:43:12:90:d9:98:d0:45:3f:b0:d6:81:9d:61:05:ae:
15:b2:7f:cf:11:98:34:8a:22:d9:e1:c3:cc:2f:52:8e:eb:69:
1d:c7:70:4b:ac:3b:8f:ea:93:63:20:d0:a1:4a:05:6f:d0:81:
11:6d:b8:84:2b:9a:6c:5f:5e:38:35:bf:0e:91:0b:e6:26:4c:
e2:1d:72:17:98:63:5b:64:02:70:36:e3:2e:9d:c0:3b:ae:ae:
21:f3:78:68:0b:3a:8f:77:92:17:c6:76:21:4d:e9:f8:b4:56:
a4:8f:aa:02:b7:d2:21:91:57:4e:38:03:9e:98:cf:31:fc:d8:
d1:c2:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:58 2025 by rpki-client