Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TTkbXPMYmFOJRQMnbwmHKaIJ_0g.roa
File: TTkbXPMYmFOJRQMnbwmHKaIJ_0g.roa (raw, json)
Hash identifier: 9P/0jsqP/aHuIvUxOeIbAFyO0lgMgPuxyHu2NzBVsiQ=
Subject key identifier: 4D:39:1B:5C:F3:18:98:53:89:45:03:27:6F:09:87:29:A2:09:FF:48
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193C1F9EEE0824AF76177D56AEDFCABFF98
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TTkbXPMYmFOJRQMnbwmHKaIJ_0g.roa
Signing time: Fri 13 Dec 2024 21:43:22 +0000
ROA not before: Fri 13 Dec 2024 21:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 163.5.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c1:f9:ee:e0:82:4a:f7:61:77:d5:6a:ed:fc:ab:ff:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 13 21:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d391b5cf3189853894503276f098729a209ff48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:b6:9c:fb:4e:cd:a3:88:44:47:f8:52:94:
49:9b:5b:a2:de:ce:3d:4c:ca:f2:70:0f:d2:37:1d:
fb:16:90:f6:d2:7b:f0:4a:19:a7:5a:66:5d:42:bf:
92:fa:49:08:83:b5:67:77:9b:49:33:15:53:db:b6:
92:f2:25:48:5b:e9:8b:c9:7b:3d:ce:69:47:5f:35:
f0:30:43:f0:55:a6:7e:0c:c9:0c:c9:a0:b8:3b:30:
f9:89:99:4c:3e:7a:c6:ac:c1:fb:01:6d:c6:51:2e:
1b:74:40:c0:35:46:1d:43:36:19:09:1e:88:c1:3b:
4e:b5:5f:8b:77:c3:22:2a:d8:0c:ff:c5:eb:a9:f4:
fb:66:ae:49:71:14:d3:a5:6d:eb:e7:2f:7a:dd:b1:
1a:1e:0e:4e:8d:a0:48:03:22:7c:31:3b:b2:77:39:
7b:42:a9:19:48:cb:6d:f6:cc:52:7e:54:76:ed:15:
ca:40:75:e2:1f:71:16:1d:b8:82:9e:15:c3:66:4a:
65:33:93:ca:7a:38:93:d1:2e:f2:b4:e7:43:e1:f2:
50:92:a2:36:6b:04:a7:c7:9d:1c:7c:78:8a:78:26:
61:29:e8:d6:5a:98:69:93:e3:7d:99:df:6f:f7:45:
dc:8e:43:0a:29:9a:9c:19:9f:74:ea:b3:fc:83:0d:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:39:1B:5C:F3:18:98:53:89:45:03:27:6F:09:87:29:A2:09:FF:48
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TTkbXPMYmFOJRQMnbwmHKaIJ_0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.47.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1e:d1:e1:8b:fc:79:d6:d7:05:a8:77:dd:d7:e8:ef:2a:15:
15:38:72:6e:ee:bb:8c:14:e9:52:ed:90:b1:29:e4:a8:67:82:
e0:4e:be:0d:6f:0d:c7:ef:9e:be:ae:ea:f4:42:01:de:8a:7a:
16:df:dc:0a:92:8f:40:00:c2:1a:8e:d0:77:8c:9c:af:9c:08:
dd:61:4b:02:da:1b:39:55:29:e2:68:d4:62:3d:de:07:81:bd:
cb:e0:a2:04:21:45:d5:df:16:94:30:49:9e:88:f7:6e:82:29:
66:99:23:23:17:7b:1a:de:62:0f:e7:fc:3d:eb:ba:d9:12:7b:
4e:92:47:de:83:87:30:e4:c7:3f:c0:70:5c:e1:d7:5a:21:1e:
1d:d1:2d:15:bc:d6:1f:08:60:c8:8f:47:09:63:ce:1f:c1:39:
9c:5d:a4:0c:aa:58:65:98:b8:9e:ff:38:4f:0e:60:ab:a1:6f:
dc:ae:98:76:c0:9a:9f:a7:3a:d5:54:21:de:6d:00:da:c6:0e:
a2:de:2a:cd:9c:ca:46:23:5a:8e:11:b6:14:09:bb:e3:07:68:
02:43:5f:a9:20:e2:66:67:45:1d:1f:eb:65:00:54:ca:eb:c3:
34:c6:02:41:21:48:ea:a7:04:c8:66:c5:3e:35:94:ee:c3:ac:
b9:ee:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:42:36 2025 by rpki-client