Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RDdXh-cYGJVlkkkesmjIHnnpIFM.roa
File: RDdXh-cYGJVlkkkesmjIHnnpIFM.roa (raw, json)
Hash identifier: Ag3P4Y+qYLn4VCI+aJu5UhUHdSg1PY8NOD6HfP8KUYY=
Subject key identifier: 44:37:57:87:E7:18:18:95:65:92:49:1E:B2:68:C8:1E:79:E9:20:53
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193F98A6E246AA96E54E9D48D9C5CA1BA98
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RDdXh-cYGJVlkkkesmjIHnnpIFM.roa
Signing time: Tue 24 Dec 2024 16:40:19 +0000
ROA not before: Tue 24 Dec 2024 16:40:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 163.5.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:8a:6e:24:6a:a9:6e:54:e9:d4:8d:9c:5c:a1:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 24 16:40:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44375787e71818956592491eb268c81e79e92053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:e5:ea:ec:2e:7c:75:12:75:bb:db:76:ae:
3b:6f:ad:8c:35:eb:ed:46:bf:53:b7:e3:48:f1:7d:
0e:c2:ee:57:d5:8d:54:90:4b:8a:67:5b:b7:be:2d:
5a:9b:c0:0d:57:03:35:2f:aa:9e:c9:19:88:51:41:
f6:39:2a:b4:03:99:84:8e:ce:7a:dc:5a:77:1f:fb:
ca:4f:88:c9:24:ba:85:26:3b:95:86:60:8c:76:1f:
f2:c6:55:93:6a:cb:e8:89:d7:34:7a:27:77:c7:e3:
4f:f4:f6:6d:d2:20:8a:a5:c7:d3:3e:0b:dd:ce:42:
60:5e:c3:6b:41:7d:61:60:03:02:f8:36:d9:b3:19:
62:7b:71:8d:23:35:8d:9b:a1:5f:ff:fc:3a:03:ee:
3a:f0:de:2d:2f:85:2e:33:64:d9:91:9e:be:fe:be:
bd:3b:dc:1b:61:e2:82:b1:32:1c:7f:23:67:b6:c4:
6d:c2:97:b5:36:30:62:25:aa:bb:cd:d7:52:b2:fd:
a6:38:90:a6:c0:bb:44:a8:0c:c1:8c:c5:8e:ed:0a:
21:30:80:f8:58:33:50:07:e8:bf:4b:01:3c:41:54:
1e:de:65:01:2b:2c:70:36:09:d7:c9:2f:4b:60:11:
d3:5d:05:6e:50:ed:74:d7:fc:19:93:18:01:9a:d1:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:37:57:87:E7:18:18:95:65:92:49:1E:B2:68:C8:1E:79:E9:20:53
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RDdXh-cYGJVlkkkesmjIHnnpIFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:32:ac:82:95:79:3f:a9:58:09:1d:5a:cc:de:38:72:1b:c2:
f6:f0:a6:db:4c:b8:89:53:7e:cd:21:47:36:34:85:1b:d5:ed:
ea:56:3d:d9:a1:bb:b3:67:ab:93:91:b3:38:43:71:6a:2b:31:
84:0f:41:be:a5:65:de:26:02:a4:fd:5e:51:49:d1:0b:9d:21:
9b:44:29:f4:37:3c:43:2f:04:b5:96:83:ce:e0:b1:67:6c:0e:
cd:79:95:e1:24:3f:f7:75:bb:94:70:71:91:7e:a9:3c:ff:94:
e4:4b:60:5d:7e:ea:79:72:4e:10:9c:cb:b8:e3:dd:c3:ac:0f:
3c:76:b5:2b:c3:bc:31:52:bb:1e:6e:11:b6:45:a0:14:fd:d2:
9a:b7:b6:33:e8:1e:d8:30:61:06:9b:36:60:32:57:6f:e7:ce:
5e:98:5d:68:85:66:e7:e2:e8:84:c4:2c:b6:34:68:26:21:2f:
3a:68:4b:9e:87:d4:98:44:cf:9f:d8:6c:3e:3a:5a:42:bb:78:
3c:4b:ba:bf:eb:4f:05:c8:15:7d:39:78:02:14:07:e0:cd:82:
6e:af:c2:f7:54:18:46:44:19:05:b8:c8:85:32:52:21:12:3b:
12:71:55:bd:3e:5d:e0:18:15:da:05:89:9f:18:cb:03:30:93:
7f:41:6a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:51 2025 by rpki-client