Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RLPZ9RrbsSZOJDzeRcl563bF8iE.roa
File: RLPZ9RrbsSZOJDzeRcl563bF8iE.roa (raw, json)
Hash identifier: dCmSI7pB6tDxOyzfyjDAIcK6UaG0mPBN05u572k8drc=
Subject key identifier: 44:B3:D9:F5:1A:DB:B1:26:4E:24:3C:DE:45:C9:79:EB:76:C5:F2:21
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188F1710773B291C066775E2734518366A2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RLPZ9RrbsSZOJDzeRcl563bF8iE.roa
Signing time: Sun 25 Jun 2023 07:24:56 +0000
ROA not before: Sun 25 Jun 2023 07:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 163.5.177.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f1:71:07:73:b2:91:c0:66:77:5e:27:34:51:83:66:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 25 07:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44b3d9f51adbb1264e243cde45c979eb76c5f221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:ac:6f:f8:85:7b:26:cb:88:e3:e9:c9:64:
ae:86:30:be:87:f7:d4:d6:88:f2:da:6c:10:44:68:
77:6c:dc:6a:a7:35:6e:a8:86:a3:cf:24:f4:e7:6c:
da:fc:97:bb:10:d4:09:db:68:9e:aa:15:73:b6:f1:
ad:00:0b:b8:ba:f9:bc:ac:8d:46:0d:f5:48:8d:86:
ad:b2:16:33:af:af:0c:af:c1:fc:cd:21:04:e5:34:
0e:0f:20:c5:3f:cf:cc:97:98:8a:8d:d7:1a:24:be:
8c:b4:7e:6b:9e:a7:73:5b:51:d9:f5:8e:43:f8:f6:
4f:9d:05:c4:c5:03:38:08:d6:b6:8d:fd:16:dc:b2:
32:29:42:ce:10:9a:d1:25:50:c5:dc:f9:ae:9c:f8:
ac:dd:7b:e8:6c:43:36:96:a5:19:77:98:4e:5c:e8:
da:6f:68:3d:4d:0c:d9:ad:74:03:3a:fa:60:d1:12:
33:06:f4:bc:59:0b:eb:a3:20:7e:9b:66:18:c4:bd:
ae:d3:14:00:0e:2d:b3:06:57:77:c4:b8:f0:98:9c:
7c:48:7b:0f:1d:2e:63:ed:a0:15:17:fd:0a:98:34:
8f:55:72:98:f0:4e:64:48:68:cf:86:1b:29:d1:e2:
ab:dd:13:28:8c:7b:bb:68:11:7f:35:bd:71:a7:24:
f8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B3:D9:F5:1A:DB:B1:26:4E:24:3C:DE:45:C9:79:EB:76:C5:F2:21
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RLPZ9RrbsSZOJDzeRcl563bF8iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.96.0/24
163.5.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:8c:94:a4:a9:5a:1b:2a:06:b5:3f:8b:43:91:13:e2:af:31:
9f:05:d6:da:b8:25:c3:5a:6d:c6:6d:87:d4:78:75:98:df:b8:
44:d8:a9:04:28:50:78:21:ad:f4:fc:18:87:cb:ef:8c:07:d9:
82:2b:34:cb:bb:c3:f1:e6:dd:bc:99:68:ef:07:d6:18:54:01:
34:4a:6e:97:61:18:e3:97:a7:c6:b1:e9:ee:3b:89:37:1a:ad:
2c:21:e2:93:5f:82:4e:ad:f8:c9:a4:09:78:98:8b:2c:1c:00:
53:c6:96:d5:dc:45:8b:97:65:42:d1:c6:5a:ec:ee:06:4f:bc:
6c:e4:aa:a2:b2:2e:02:35:b4:17:52:aa:be:57:e2:d4:2f:de:
2c:3e:86:64:94:7f:20:4f:64:ec:ed:79:41:2b:e6:35:c4:04:
a1:59:d1:b0:7c:81:bf:2a:9a:c9:23:29:7d:81:ec:27:0b:c3:
0a:85:44:b9:90:ce:ad:ad:f2:95:ad:38:3c:aa:a2:cf:71:3d:
21:fd:d5:0f:1c:5b:1b:9b:62:e7:67:7e:4f:57:dc:ef:1c:a7:
be:6d:86:f1:af:0b:6c:fb:00:95:b5:12:2e:61:6d:c0:f6:fc:
37:18:8e:f3:43:95:83:00:08:66:a6:bf:1d:2f:e8:37:43:68:
7e:4e:c1:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjxcQdzspHAZndeJzRRg2aiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjI1MDcyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGIzZDlmNTFhZGJiMTI2NGUyNDNjZGU0NWM5NzllYjc2YzVmMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Wsb/iFeybLiOPpyWSuhjC+h/fU
1ojy2mwQRGh3bNxqpzVuqIajzyT052za/Je7ENQJ22ieqhVztvGtAAu4uvm8rI1G
DfVIjYatshYzr68Mr8H8zSEE5TQODyDFP8/Ml5iKjdcaJL6MtH5rnqdzW1HZ9Y5D
+PZPnQXExQM4CNa2jf0W3LIyKULOEJrRJVDF3PmunPis3XvobEM2lqUZd5hOXOja
b2g9TQzZrXQDOvpg0RIzBvS8WQvroyB+m2YYxL2u0xQADi2zBld3xLjwmJx8SHsP
HS5j7aAVF/0KmDSPVXKY8E5kSGjPhhsp0eKr3RMojHu7aBF/Nb1xpyT42wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFESz2fUa27EmTiQ83kXJeet2xfIhMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvUkxQWjlScmJzU1pPSkR6ZVJjbDU2M2JGOGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowVgAwQA
owWxMA0GCSqGSIb3DQEBCwUAA4IBAQB/jJSkqVobKga1P4tDkRPirzGfBdbauCXD
Wm3GbYfUeHWY37hE2KkEKFB4Ia30/BiHy++MB9mCKzTLu8Px5t28mWjvB9YYVAE0
Sm6XYRjjl6fGsenuO4k3Gq0sIeKTX4JOrfjJpAl4mIssHABTxpbV3EWLl2VC0cZa
7O4GT7xs5Kqisi4CNbQXUqq+V+LUL94sPoZklH8gT2Ts7XlBK+Y1xAShWdGwfIG/
KprJIyl9gewnC8MKhUS5kM6trfKVrTg8qqLPcT0h/dUPHFsbm2LnZ35PV9zvHKe+
bYbxrwts+wCVtRIuYW3A9vw3GI7zQ5WDAAhmpr8dL+g3Q2h+TsE6
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:16 2025 by rpki-client