Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-1wjcoTbIgUma_PnviYELbHrRGU.roa
File: 1-1wjcoTbIgUma_PnviYELbHrRGU.roa (raw, json)
Hash identifier: 050P3ICZzEEtQmNXgQe8CRSjzuMyUoHy/UCSXqZCAiE=
Subject key identifier: FB:5C:23:72:84:DB:22:05:26:6B:F3:E7:BE:26:04:2D:B1:EB:44:65
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01957AEBAB711332834F23B29665FF031B0E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-1wjcoTbIgUma_PnviYELbHrRGU.roa
Signing time: Sun 09 Mar 2025 12:40:19 +0000
ROA not before: Sun 09 Mar 2025 12:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 163.5.111.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:eb:ab:71:13:32:83:4f:23:b2:96:65:ff:03:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 9 12:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb5c237284db2205266bf3e7be26042db1eb4465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:ec:a7:9d:6b:9b:b9:aa:b5:c1:3e:e2:a3:
47:4c:37:51:5c:27:6f:eb:59:0f:96:44:c5:f1:f5:
ef:55:da:9b:6b:32:ee:8f:c5:e1:b8:37:2f:6c:31:
47:8e:c1:e4:99:01:34:38:b8:ee:50:a6:f1:62:57:
89:ed:4d:0c:d1:92:f5:6f:76:18:b8:3a:fa:47:77:
f0:53:12:2d:63:11:8c:2a:7a:e5:fd:f7:a3:1c:5a:
88:a0:2c:fe:86:19:8b:6c:48:4b:65:4f:57:59:60:
b0:c3:66:2f:90:c1:c4:aa:f4:d0:53:70:46:2b:cc:
ae:73:33:ba:e7:99:2f:87:36:b1:d5:0a:91:2f:43:
85:4e:30:d8:8d:ff:b4:01:e0:40:55:2b:f5:9a:47:
57:ba:bc:70:45:91:3e:2d:ae:20:2e:55:c7:fd:5e:
9c:85:c2:47:c3:5a:8b:01:f4:60:44:4f:14:86:80:
c6:50:75:59:36:a2:02:a6:06:47:fb:bd:c6:ca:e7:
67:39:ab:44:bf:7e:d0:e0:48:da:14:22:f7:b1:bd:
4d:63:45:9a:60:95:57:0d:b6:7e:84:f8:91:91:ba:
33:91:3d:33:f8:24:ae:c2:f4:75:f8:e5:e5:e1:47:
f7:34:fc:78:d1:6f:93:31:1a:7c:46:20:7c:0b:2c:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5C:23:72:84:DB:22:05:26:6B:F3:E7:BE:26:04:2D:B1:EB:44:65
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-1wjcoTbIgUma_PnviYELbHrRGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.111.0/24
163.5.155.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
72:25:e4:d0:7e:07:16:ed:00:12:bb:d2:47:e5:f3:da:56:7d:
d6:3f:b8:20:c4:d8:3b:14:d7:c8:3d:d5:43:80:00:98:9e:f8:
25:54:40:87:5e:e1:63:bb:ef:4e:6d:5c:2a:34:93:2a:ed:c8:
f5:3c:71:20:f7:c8:38:2b:ab:ce:29:58:08:13:7c:72:6a:7c:
4e:5a:28:83:30:ff:cf:c2:ea:93:cc:11:d3:54:c2:26:d0:a9:
7f:a6:bc:4f:60:7a:73:06:99:36:50:a3:16:b5:b8:c7:32:8a:
f2:09:ff:86:6d:49:3d:36:fa:3a:31:00:44:ed:3f:73:08:18:
bf:df:f1:7c:0f:6a:82:33:91:20:b2:08:82:4b:5c:ad:73:6f:
9b:3d:24:14:5b:7a:ac:ee:75:b6:ee:2a:5e:43:72:6b:1c:69:
83:27:7e:7d:35:a2:ce:be:bc:5c:ac:b8:4b:38:7b:c7:af:bb:
18:b5:16:6a:d7:a4:a0:f0:bd:57:25:84:28:03:9f:2b:aa:4d:
56:3d:c2:de:61:e0:3b:12:ab:fc:41:0c:30:cb:fa:4e:a0:7f:
6a:25:45:1e:bb:05:47:08:a6:be:de:52:07:e9:f2:c0:d8:e3:
80:a9:1a:83:db:c2:ea:c6:ed:51:4f:7f:03:e6:5f:ce:e3:48:
6c:b4:11:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:19 2025 by rpki-client