Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hLG5am-eELsOCBbhwH5wl329XO0.roa
File: hLG5am-eELsOCBbhwH5wl329XO0.roa (raw, json)
Hash identifier: Ekg1Lw9tzvjNke5VToKTte5TbtRCEFZPknRaGxDKrRw=
Subject key identifier: 84:B1:B9:6A:6F:9E:10:BB:0E:08:16:E1:C0:7E:70:97:7D:BD:5C:ED
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A272374258E5CDE33DB9A52F73F1F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hLG5am-eELsOCBbhwH5wl329XO0.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.41.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:27:23:74:25:8e:5c:de:33:db:9a:52:f7:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84b1b96a6f9e10bb0e0816e1c07e70977dbd5ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:9d:e3:f0:23:e3:4b:c8:03:bb:b7:e5:a9:
2c:19:72:c2:58:d8:1c:be:91:8f:90:47:0f:0f:df:
c8:7a:5b:3e:41:fb:63:3d:65:10:22:83:e0:71:18:
48:98:df:f3:0d:5d:f2:e0:c0:e5:c8:ad:fb:9c:ed:
a9:86:98:15:3b:9b:d3:7d:09:49:98:fb:25:a5:4e:
60:d6:48:6e:dd:de:57:da:f7:c2:f6:0a:24:0d:18:
a4:87:28:fd:f0:b8:53:b6:2d:cd:d1:73:86:f7:0b:
2a:1e:7f:54:93:f4:cc:b3:14:c5:33:7e:eb:45:dc:
b5:7b:77:46:fd:be:74:c8:76:fa:ac:b0:f9:45:0c:
e7:98:74:65:b9:54:3e:d9:1f:1d:b6:3c:83:b6:32:
b2:bd:ad:47:63:9e:93:31:ab:cf:4e:48:ce:46:4c:
f6:e9:88:fa:69:01:c4:1a:5d:c2:76:3d:80:7d:52:
03:c0:f7:92:25:ad:30:de:e5:73:30:2a:ed:a1:9f:
bb:68:c4:23:2f:5e:5e:5e:4a:51:a9:60:8b:52:30:
df:c7:9c:03:32:aa:70:75:57:07:95:5b:e7:90:49:
48:16:a9:71:98:b0:1f:61:98:c6:c4:a7:37:93:da:
cb:a6:20:89:14:94:b1:06:41:3a:29:47:aa:7b:bb:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B1:B9:6A:6F:9E:10:BB:0E:08:16:E1:C0:7E:70:97:7D:BD:5C:ED
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hLG5am-eELsOCBbhwH5wl329XO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.41.0/24
163.5.86.0/24
163.5.97.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a5:52:60:fb:c0:7a:02:1a:72:8b:df:a5:ef:7f:03:71:86:
1e:4b:08:c4:94:f0:34:8e:7e:1b:88:7e:34:48:77:39:f1:0e:
54:d8:07:c5:85:60:74:74:f2:e3:df:14:f3:b2:81:a8:49:53:
66:68:a4:ff:71:92:bc:70:62:8a:e9:fa:4d:9c:2b:47:87:b3:
4c:d1:eb:68:60:2a:78:1c:df:0e:91:34:d4:79:2b:0d:be:96:
4b:cf:1d:ba:f8:c6:ad:84:e5:ec:f6:a4:96:17:b6:1a:e9:16:
ec:30:8b:2e:4b:13:e5:e6:39:1f:61:63:ed:bd:4c:c1:14:a9:
fa:71:c7:cd:b4:a4:3e:ac:6b:a9:a8:a4:30:8c:36:f4:5a:e2:
6f:c7:a6:fa:ed:97:3e:74:60:68:28:0b:a8:ec:ed:93:b5:17:
b2:01:67:16:58:26:24:a9:01:99:e2:c6:2a:fe:c1:54:45:20:
90:b0:da:11:f4:63:46:12:3a:84:20:1c:45:63:13:43:5e:db:
c2:74:37:61:1f:36:8e:dc:7f:49:96:7b:c7:42:3e:e0:58:d4:
0a:93:6a:76:07:16:cb:1c:7d:6a:3d:0d:c9:9c:e9:fc:fa:91:
ff:c0:ed:50:79:6e:1b:fd:4a:bf:f7:36:ea:02:56:e6:66:86:
85:a5:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:43 2025 by rpki-client