Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EO8W8K7ZqH1E0OGrpy5jyNPSyYQ.roa
File: EO8W8K7ZqH1E0OGrpy5jyNPSyYQ.roa (raw, json)
Hash identifier: TF+dfdvrE3zqYynzJ6ZVVZJpxHr6uJeFhZql/Q4IODk=
Subject key identifier: 10:EF:16:F0:AE:D9:A8:7D:44:D0:E1:AB:A7:2E:63:C8:D3:D2:C9:84
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01951F7DF3C91D8EB4E7E8D12949E83CFD05
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EO8W8K7ZqH1E0OGrpy5jyNPSyYQ.roa
Signing time: Wed 19 Feb 2025 18:35:02 +0000
ROA not before: Wed 19 Feb 2025 18:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47741
IP address blocks: 163.5.92.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:7d:f3:c9:1d:8e:b4:e7:e8:d1:29:49:e8:3c:fd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 19 18:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10ef16f0aed9a87d44d0e1aba72e63c8d3d2c984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:bd:86:74:6e:5d:ec:47:f7:64:a2:54:c5:
12:41:6b:40:e7:62:09:bb:26:b2:a9:3e:c3:19:42:
92:08:66:ce:02:a0:9b:86:dc:76:a9:67:bd:fe:fc:
60:cf:3c:f7:99:8e:cd:af:5a:35:c9:a3:42:50:07:
bc:fd:8c:84:32:53:5f:32:b9:07:91:46:9d:ee:44:
5c:1b:4f:cf:6b:ee:23:6f:1c:65:6e:d8:01:a2:09:
45:8c:45:02:8d:7f:d6:b3:43:b1:97:8d:77:a4:a2:
48:70:d3:6a:e6:fb:7c:37:8c:9a:77:d2:94:52:71:
9f:d8:b1:2e:04:8b:97:ad:42:6e:61:45:b3:0f:1c:
6d:d9:92:8e:79:51:20:42:26:51:95:3a:1a:c0:16:
4c:9e:3d:a6:60:90:47:fc:67:ea:86:69:76:0f:36:
38:da:ca:51:d7:c2:9f:e2:0d:b7:94:16:0e:95:29:
05:12:18:1a:e9:8a:d0:f6:66:9b:ec:3c:cb:7a:52:
9d:99:69:86:b8:e3:4d:b3:bb:35:80:25:b8:0b:55:
61:6a:b6:72:41:26:cf:f4:17:ae:35:25:7d:cd:a6:
ef:82:31:3f:f4:b0:92:4f:49:ed:98:66:e4:83:28:
f3:1f:4c:cd:34:1e:22:41:8f:32:fe:f1:75:7d:16:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EF:16:F0:AE:D9:A8:7D:44:D0:E1:AB:A7:2E:63:C8:D3:D2:C9:84
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EO8W8K7ZqH1E0OGrpy5jyNPSyYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.92.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fa:ae:64:f0:2d:af:58:5a:d8:7b:90:fa:15:5e:af:46:b9:
fe:ed:8d:65:1b:13:1e:14:c0:b0:c8:c9:57:60:5f:38:42:a2:
08:b2:5d:19:f9:af:f1:87:60:07:7d:9f:92:2e:2e:9e:3a:56:
ba:cd:ca:10:02:7c:62:dd:12:52:e6:c6:08:ee:12:af:9b:e0:
4f:92:5f:89:b5:7d:82:16:0c:47:43:e4:81:47:11:48:ef:a9:
04:6b:63:8c:22:8c:8e:27:eb:69:39:b9:01:e7:95:76:b3:7c:
39:61:23:a0:9b:b0:d4:a5:97:e3:b6:93:53:11:74:41:1c:f4:
ca:6e:2c:28:6e:93:9c:f2:d9:ab:1a:80:13:6f:f8:6d:46:3d:
31:cf:61:d3:d6:89:8c:15:5a:e5:93:84:40:63:47:8c:d4:12:
7a:24:f3:e1:bd:a7:78:0a:d8:89:66:55:47:29:9c:1d:06:d1:
ed:df:cf:c7:b2:5b:e8:c3:29:ec:55:50:7c:c2:ca:49:e7:a2:
9a:0a:c1:a3:a4:89:d6:f5:df:88:01:1e:04:1a:d4:d4:50:b5:
f8:b5:0b:d3:82:af:5d:56:80:94:1f:11:86:9c:20:29:84:2f:
52:24:e2:c3:8c:03:e9:5d:aa:5c:16:23:78:12:d2:76:47:42:
af:b5:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:10:36 2025 by rpki-client