Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6YOXBEZvcI2w7_Ms9M-P63AYjCo.roa
File: 6YOXBEZvcI2w7_Ms9M-P63AYjCo.roa (raw, json)
Hash identifier: etbS5/dsvMuChPxbQyNuTju1DMRuO67uBuy/ZRmhk6g=
Subject key identifier: E9:83:97:04:46:6F:70:8D:B0:EF:F3:2C:F4:CF:8F:EB:70:18:8C:2A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193AB186429216AA79836E2459905B8E5F5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6YOXBEZvcI2w7_Ms9M-P63AYjCo.roa
Signing time: Mon 09 Dec 2024 11:05:22 +0000
ROA not before: Mon 09 Dec 2024 11:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 163.5.1.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:18:64:29:21:6a:a7:98:36:e2:45:99:05:b8:e5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 9 11:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9839704466f708db0eff32cf4cf8feb70188c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:4c:9a:1b:ff:2a:94:38:c7:6f:f7:d3:9e:
a7:80:62:b1:62:db:07:08:e0:d4:16:49:89:4e:79:
3d:53:ad:f4:a8:23:18:8f:3a:b9:18:a4:7c:86:43:
d6:f5:09:51:bc:97:a0:07:47:2c:80:5a:cc:7e:cf:
00:22:c8:89:07:c8:10:36:96:58:ff:cc:8a:ca:1e:
9e:36:66:3d:42:f9:4e:04:40:8b:b7:05:d6:5f:73:
26:0e:30:47:85:0d:8f:6e:0c:c8:cf:fd:6c:c4:fe:
2d:e1:bb:db:41:a6:85:87:09:88:fb:98:7e:ba:09:
f1:61:43:97:7e:e9:d5:16:e8:f6:1e:bd:f1:69:80:
1e:e5:38:e5:f0:78:41:fa:3e:45:ff:e6:70:fe:ad:
eb:8c:4f:a8:97:e2:55:d9:cf:78:68:58:ac:64:0a:
b0:b3:46:58:21:03:71:46:b4:3a:8d:41:df:26:39:
40:5d:0f:52:8f:e0:5f:3f:f4:45:ac:f4:fb:f0:da:
04:5a:fb:5a:a8:ba:2e:07:82:37:f4:80:90:02:25:
d1:a4:c9:65:2a:b2:50:df:cb:de:3d:69:8e:7d:83:
3f:aa:cc:1f:69:a9:9c:6f:d4:36:78:05:8f:ba:82:
bb:be:0d:b3:33:1e:72:32:e3:de:46:7b:88:3e:2b:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:83:97:04:46:6F:70:8D:B0:EF:F3:2C:F4:CF:8F:EB:70:18:8C:2A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6YOXBEZvcI2w7_Ms9M-P63AYjCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.1.0/24
163.5.4.0/24
163.5.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:72:d8:01:92:0e:50:c4:0e:99:2f:44:90:cc:4a:7f:cb:59:
ee:25:19:1e:42:c1:d7:64:de:68:81:61:0a:25:db:07:01:53:
1a:a5:b8:8e:d7:9e:b5:2f:af:75:36:82:fe:76:01:5b:38:15:
f0:3e:59:b5:6f:65:b8:63:85:77:0c:cd:7d:12:28:5d:be:f0:
5e:69:98:67:9d:8b:a1:91:13:1e:4d:64:29:72:bc:9a:e5:08:
5f:81:ab:ec:09:f2:66:aa:a1:45:88:e4:9f:05:7d:f1:4f:b6:
8a:e8:05:8a:34:88:d3:aa:10:f0:a9:d4:0a:51:35:57:9b:01:
fe:ec:d2:9a:ef:8e:9d:3a:f3:14:01:a8:83:71:87:d1:0e:52:
bb:54:6b:21:4d:ca:48:61:7a:5f:78:14:25:58:b0:db:b8:59:
a9:9c:7c:68:8a:9f:6b:73:aa:49:fb:08:ef:82:5f:bf:94:b5:
80:73:c3:5a:2d:c5:8a:a0:c8:0f:c3:ef:21:e0:dd:75:7a:d4:
e9:43:b5:64:c6:d6:ab:31:0b:b1:0f:c8:5c:02:42:67:96:4b:
b7:71:6b:b2:26:23:fc:01:34:49:a5:7c:21:02:71:34:ee:93:
6f:d9:f9:7b:dc:d5:fa:fa:d8:2c:18:4f:b6:ed:c0:3e:52:e5:
0a:1f:ae:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:14 2025 by rpki-client