Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5jaPS9ryfTCjeS0r16ya5WlZ4x4.roa
File: 5jaPS9ryfTCjeS0r16ya5WlZ4x4.roa (raw, json)
Hash identifier: 4y6qsnWFqwSUqAgvBRafYov7XY9Z5pVTp26t+z/dcyQ=
Subject key identifier: E6:36:8F:4B:DA:F2:7D:30:A3:79:2D:2B:D7:AC:9A:E5:69:59:E3:1E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193A7ED8A4BAA9EC571740A0AD414D19E51
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5jaPS9ryfTCjeS0r16ya5WlZ4x4.roa
Signing time: Sun 08 Dec 2024 20:19:42 +0000
ROA not before: Sun 08 Dec 2024 20:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214143
IP address blocks: 163.5.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a7:ed:8a:4b:aa:9e:c5:71:74:0a:0a:d4:14:d1:9e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 8 20:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6368f4bdaf27d30a3792d2bd7ac9ae56959e31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:58:f0:92:09:94:8e:b6:f6:21:08:f9:6d:
98:28:00:77:88:9a:7f:08:83:38:b9:a0:f0:3e:dd:
a4:62:aa:bb:c3:7d:29:a3:91:40:68:89:da:82:db:
66:50:26:fd:6d:f3:e1:43:f1:f7:9e:a1:86:40:af:
6f:3f:3f:5b:94:27:94:70:e6:9c:75:23:6c:a3:d6:
ce:50:a1:f1:1c:2a:19:c2:f3:f3:e1:11:99:74:ff:
95:8c:ce:e0:4b:63:2f:89:ff:05:d7:f2:55:20:5d:
bf:ee:b8:61:8e:27:55:c3:b1:80:f3:57:31:89:53:
6a:66:d2:eb:21:cb:bb:83:f5:7d:21:13:ad:56:3f:
67:00:92:59:11:af:16:51:19:fc:ce:92:eb:1a:e0:
20:e7:c1:37:a5:e9:74:bf:e0:2c:42:04:a2:2f:27:
4e:c3:91:82:eb:91:76:c0:08:45:be:d7:d7:c7:3e:
1c:7a:cc:cc:86:59:ed:9f:c2:68:57:d1:69:12:7d:
d4:37:d6:91:7f:37:35:21:94:4e:d5:3d:72:7e:4b:
12:7f:4a:96:57:54:60:69:5c:a1:7c:21:cc:2a:e8:
0b:52:65:e3:e7:33:fb:d1:36:5f:38:15:84:ad:d8:
45:77:eb:af:74:da:2c:bb:19:2e:ef:73:19:4b:60:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:8F:4B:DA:F2:7D:30:A3:79:2D:2B:D7:AC:9A:E5:69:59:E3:1E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5jaPS9ryfTCjeS0r16ya5WlZ4x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1c:e6:57:11:6c:45:85:d8:76:74:8c:aa:49:c2:25:a2:58:
92:00:10:dc:c7:7a:c1:ca:56:8c:b0:19:13:71:f4:da:f8:41:
f0:eb:f8:22:1f:71:26:1f:fa:6e:f0:3d:4e:06:6d:41:2b:0b:
8f:b4:28:fd:84:46:96:a3:56:b3:2d:b0:ae:b1:4b:0c:60:9e:
86:c3:99:71:7b:82:f6:69:0e:73:59:0f:f4:88:53:a8:42:89:
5f:09:2b:b6:21:43:c2:1a:e7:4f:59:57:58:5a:fc:4e:38:61:
7b:72:04:60:42:44:fc:a3:92:e3:06:44:70:48:de:51:15:2e:
21:c9:f3:2e:99:75:5c:b9:7a:f4:a7:c6:a7:99:e2:4d:8f:e2:
7d:81:e9:ac:75:15:82:c6:19:c8:c8:ac:22:10:4a:57:e0:3b:
7c:60:53:f7:ab:14:d9:f1:d3:28:6b:fa:3b:4c:7d:b6:c6:38:
13:9a:d3:05:ba:c0:da:10:41:71:5f:bb:48:07:ff:7b:68:8c:
b2:4e:6d:33:d1:85:c1:8a:09:ce:60:64:d9:b2:08:a2:84:05:
5f:6d:97:fd:81:05:92:95:96:b2:20:56:2c:17:7c:53:3e:3a:
bc:69:a4:c7:63:e7:39:f8:06:da:98:b7:e4:48:b8:2a:4c:e0:
0e:0a:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:36:39 2025 by rpki-client