Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6edUqr35qr_vYcCO-Zj3d9pIbxI.roa
File: 6edUqr35qr_vYcCO-Zj3d9pIbxI.roa (raw, json)
Hash identifier: M0J5zDy1UwaSiNlLem/aATVdWtc+KmH5nOikbPqsdxo=
Subject key identifier: E9:E7:54:AA:BD:F9:AA:BF:EF:61:C0:8E:F9:98:F7:77:DA:48:6F:12
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195713602F230918120B68464767660A286
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6edUqr35qr_vYcCO-Zj3d9pIbxI.roa
Signing time: Fri 07 Mar 2025 15:25:19 +0000
ROA not before: Fri 07 Mar 2025 15:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199432
IP address blocks: 163.5.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:36:02:f2:30:91:81:20:b6:84:64:76:76:60:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 7 15:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9e754aabdf9aabfef61c08ef998f777da486f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:d7:09:34:b4:f6:c0:e9:22:7a:20:b4:10:
5d:b3:d6:4c:a2:dd:49:b7:7d:a3:fd:95:12:1f:9b:
21:eb:45:23:ae:19:52:fc:f9:40:4e:01:5a:29:0c:
3f:15:18:af:69:e3:a2:45:98:70:bd:6b:5c:be:72:
76:0c:45:9f:3b:92:ab:08:72:5f:2a:4b:3c:c2:a9:
59:59:53:e1:4c:02:ea:b8:d2:7e:05:ff:b5:0e:eb:
90:51:58:33:49:da:aa:15:d1:9a:fc:09:e4:cb:1a:
6f:49:21:fb:a9:8b:5e:a6:d3:c5:48:30:7b:da:7a:
d7:3b:64:c2:9e:55:4e:5e:27:32:e1:25:92:c1:02:
d3:5a:60:41:93:70:b0:03:22:1d:c2:6e:e2:44:3c:
03:69:93:96:fb:f5:5a:a0:24:3b:51:d5:51:1f:54:
fe:e5:d2:05:b0:88:c3:72:53:cc:fd:c8:50:59:bd:
93:5c:87:f9:21:e2:1f:62:d3:eb:f1:69:0c:c9:26:
3f:4e:b3:2a:2e:99:50:29:a0:be:b5:82:96:c9:a1:
be:18:e7:aa:a5:c6:f4:84:5c:80:a1:c0:d9:72:35:
97:aa:eb:79:af:27:c4:2d:3d:e0:73:68:38:c7:7d:
49:c4:1b:c8:08:b3:7c:46:da:8a:47:c5:03:e9:65:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E7:54:AA:BD:F9:AA:BF:EF:61:C0:8E:F9:98:F7:77:DA:48:6F:12
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6edUqr35qr_vYcCO-Zj3d9pIbxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fb:68:b8:3e:42:64:c8:c9:02:2c:88:7a:2c:1a:8f:c4:e6:
21:6b:96:d7:e0:ba:2d:cc:7b:b0:37:fd:3f:6d:47:49:19:f0:
a1:f4:10:b4:f5:a9:36:5c:4d:e2:ab:20:cc:d4:e2:33:df:16:
df:77:ba:a9:70:31:a8:f2:d2:d7:40:40:f8:65:9f:ff:b6:43:
9b:a3:0a:25:d7:76:67:9f:18:39:f4:c9:14:7a:6e:16:ea:06:
7b:f4:a7:85:85:b2:07:05:1f:be:7b:9d:ff:39:02:5b:9b:ad:
df:e8:82:6b:6c:5c:1e:af:b6:a5:d2:fd:0a:7e:4e:83:dd:0e:
60:52:6f:e1:b0:aa:24:3b:0f:a0:a0:e9:1e:19:cc:62:4a:e1:
28:4b:18:d9:23:37:2f:f0:e9:05:1f:d3:ac:c7:00:3f:c9:e2:
fa:4d:f6:97:50:f4:10:88:e7:65:72:6b:db:da:6d:d4:71:15:
39:22:80:e1:a4:a0:37:a0:62:b0:70:c0:3f:64:75:34:bd:82:
40:eb:06:7c:47:e4:b1:28:1a:42:d3:dc:c5:22:d6:59:76:d4:
b9:3e:28:63:25:7e:21:88:a5:be:4d:d5:b7:d9:17:f9:67:db:
c2:27:21:00:17:d9:b6:63:96:aa:df:5d:fe:a3:23:dd:58:40:
b6:af:60:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVxNgLyMJGBILaEZHZ2YKKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMzA3MTUyNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWU3NTRhYWJkZjlhYWJmZWY2MWMwOGVmOTk4Zjc3N2RhNDg2ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRLXCTS09sDpInogtBBds9ZMot1J
t32j/ZUSH5sh60UjrhlS/PlATgFaKQw/FRivaeOiRZhwvWtcvnJ2DEWfO5KrCHJf
Kks8wqlZWVPhTALquNJ+Bf+1DuuQUVgzSdqqFdGa/AnkyxpvSSH7qYteptPFSDB7
2nrXO2TCnlVOXicy4SWSwQLTWmBBk3CwAyIdwm7iRDwDaZOW+/VaoCQ7UdVRH1T+
5dIFsIjDclPM/chQWb2TXIf5IeIfYtPr8WkMySY/TrMqLplQKaC+tYKWyaG+GOeq
pcb0hFyAocDZcjWXqut5ryfELT3gc2g4x31JxBvICLN8RtqKR8UD6WXhHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOnnVKq9+aq/72HAjvmY93faSG8SMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNmVkVXFyMzVxcl92WWNDTy1aajNkOXBJYnhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowV/MA0G
CSqGSIb3DQEBCwUAA4IBAQCk+2i4PkJkyMkCLIh6LBqPxOYha5bX4LotzHuwN/0/
bUdJGfCh9BC09ak2XE3iqyDM1OIz3xbfd7qpcDGo8tLXQED4ZZ//tkObowol13Zn
nxg59MkUem4W6gZ79KeFhbIHBR++e53/OQJbm63f6IJrbFwer7al0v0Kfk6D3Q5g
Um/hsKokOw+goOkeGcxiSuEoSxjZIzcv8OkFH9OsxwA/yeL6TfaXUPQQiOdlcmvb
2m3UcRU5IoDhpKA3oGKwcMA/ZHU0vYJA6wZ8R+SxKBpC09zFItZZdtS5PihjJX4h
iKW+TdW32Rf5Z9vCJyEAF9m2Y5aq313+oyPdWEC2r2Al
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:33 2025 by rpki-client