Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NG22Nvhl_FXkcXt5XN70R1a14TU.roa
File: NG22Nvhl_FXkcXt5XN70R1a14TU.roa (raw, json)
Hash identifier: iFriGgIj07wJavwjhSlJUAcE8NEcAAfYt5M4ypWT38E=
Subject key identifier: 34:6D:B6:36:F8:65:FC:55:E4:71:7B:79:5C:DE:F4:47:56:B5:E1:35
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A2D9FB914766CEB1706902AF846CE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NG22Nvhl_FXkcXt5XN70R1a14TU.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47741
IP address blocks: 163.5.92.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2d:9f:b9:14:76:6c:eb:17:06:90:2a:f8:46:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=346db636f865fc55e4717b795cdef44756b5e135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:f0:72:12:b6:e0:4c:c2:38:0a:de:f3:ee:
30:0b:3f:95:ab:f0:c4:9a:0d:0e:ef:d6:09:cb:63:
74:19:0d:9f:76:eb:6d:d2:65:23:9a:7b:e9:47:c4:
2a:a2:24:8d:96:c9:ae:02:bc:11:30:e8:29:a7:ce:
17:c8:2b:37:1b:ed:b7:bd:e3:2a:6a:46:70:97:d7:
a3:4e:db:29:e6:e3:6d:71:74:8d:8c:5c:91:79:62:
db:09:ac:c9:2d:d8:da:ab:1b:2e:e9:dc:89:17:3e:
67:a6:8a:34:e2:69:dc:40:0e:cd:11:80:86:f3:4c:
ee:a0:01:05:47:63:00:85:11:a8:7a:22:2a:38:82:
b5:25:a8:cf:53:8e:8c:8e:14:a5:a9:fa:a6:da:91:
49:b0:aa:50:39:9b:d8:7d:ff:19:d6:e2:68:13:45:
77:b4:8b:cc:ac:96:a3:73:e7:48:74:e9:fb:01:f9:
4a:9f:c4:3e:22:ff:74:f0:ba:38:6e:29:95:f0:07:
77:77:14:34:0a:d6:2b:87:dc:5d:f6:d6:64:01:e6:
a0:76:43:a1:21:bf:27:19:11:ad:4b:24:fa:61:02:
75:23:82:56:4c:43:56:10:1d:19:53:bb:7c:1c:a1:
0d:3e:73:63:bb:6c:51:cd:60:0b:3f:90:cd:25:e7:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:B6:36:F8:65:FC:55:E4:71:7B:79:5C:DE:F4:47:56:B5:E1:35
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NG22Nvhl_FXkcXt5XN70R1a14TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.92.0/24
163.5.219.0/24
163.5.233.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:68:c2:69:55:d0:50:ae:db:5f:32:cc:c1:cf:c6:fb:99:2f:
f1:cf:03:77:4d:94:81:4f:85:af:be:e6:95:e2:78:e3:dc:25:
91:03:87:f6:17:7d:f7:07:bc:fc:21:95:8e:ee:63:03:2e:f9:
d6:8e:43:d6:ae:47:52:94:6c:f4:c0:ee:19:c4:04:68:90:b9:
03:58:88:26:80:f4:0d:4b:23:10:c4:8a:65:d2:01:db:4c:92:
fb:59:97:32:43:eb:d5:0b:24:8f:46:ee:d4:f8:7a:50:92:c7:
54:21:7c:d1:e6:17:72:50:55:49:07:00:dc:a4:b3:37:19:7a:
52:96:c3:fc:4f:a1:77:d5:ee:11:d7:1f:e4:18:bf:d5:60:4f:
a3:e3:e0:be:5e:2c:00:a0:7f:0c:d0:67:07:a2:39:c5:4f:0f:
02:73:73:ae:b4:c8:f5:9c:7a:16:cd:88:c4:7b:7c:fc:a1:84:
2d:5b:08:b6:1c:c5:bc:23:2c:2e:c6:54:ff:1e:14:49:82:9b:
7d:f4:82:ea:c4:f6:13:41:4c:6f:b7:29:d4:27:51:59:02:f1:
c0:58:3f:21:dd:dc:00:e9:43:aa:da:fa:9c:83:f4:b5:fb:9a:
bc:4c:b7:fb:8b:75:11:59:9f:13:ed:40:15:03:c2:65:ce:90:
24:f5:2a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:21 2025 by rpki-client