Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/en7qx47qonCxkbn3VAvPT9XZgkQ.roa
File: en7qx47qonCxkbn3VAvPT9XZgkQ.roa (raw, json)
Hash identifier: GcEhxx25tHkQxFIMuBIC1rLrb7S65OJogRtewM/xHyg=
Subject key identifier: 7A:7E:EA:C7:8E:EA:A2:70:B1:91:B9:F7:54:0B:CF:4F:D5:D9:82:44
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A51100EEBA10143463FA06F98740E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/en7qx47qonCxkbn3VAvPT9XZgkQ.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396026
IP address blocks: 163.5.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:51:10:0e:eb:a1:01:43:46:3f:a0:6f:98:74:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a7eeac78eeaa270b191b9f7540bcf4fd5d98244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:f6:44:c6:c5:83:13:3b:05:59:a5:37:1d:
1e:03:74:72:a3:ca:3c:00:a4:14:05:62:bd:35:ca:
06:cf:a7:21:4b:54:70:8a:1a:33:d7:b2:7b:a4:e0:
99:79:25:9b:7d:36:41:aa:0e:37:e3:6d:a1:1e:6f:
6b:6d:7d:12:8d:e8:e2:e3:ef:36:84:02:39:25:9f:
01:d2:e0:7e:47:df:b4:56:c0:63:25:1f:2d:ee:d7:
83:38:83:5f:be:0e:85:a1:02:15:b4:1a:d3:cd:62:
81:29:2e:5c:7e:9b:9e:da:44:95:20:b8:08:ed:cc:
8c:ea:66:b1:01:9b:bf:b7:5a:de:ba:7b:41:84:49:
12:cb:1c:69:64:1a:ba:4e:dc:d6:2b:cd:23:71:38:
9c:35:62:4c:76:b8:4a:15:8b:b7:b3:c9:6b:c3:38:
9d:0f:f2:fc:5a:07:5e:79:07:ba:0f:14:5f:12:cb:
a8:37:df:3d:ac:e4:e9:80:e7:c3:fb:98:6d:c7:99:
9e:56:63:14:ff:93:45:3b:61:84:7d:3f:87:d3:2a:
ac:20:27:d0:07:8c:d5:5e:c0:26:92:13:59:ff:95:
e1:6a:e3:13:0e:4d:90:6e:1f:a3:3c:82:a9:44:3d:
86:62:33:aa:a0:9a:16:a8:74:0e:23:d0:00:b1:12:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7E:EA:C7:8E:EA:A2:70:B1:91:B9:F7:54:0B:CF:4F:D5:D9:82:44
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/en7qx47qonCxkbn3VAvPT9XZgkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9a:eb:45:be:cb:2d:12:1c:27:c7:28:b2:22:8a:83:9d:0b:
76:a0:e7:98:68:12:2c:45:cc:d7:ad:5a:06:e3:3f:a1:7e:d5:
3c:ae:fa:71:f1:74:d7:af:21:5d:ac:56:dc:33:05:30:17:56:
ec:cb:a1:52:82:2b:7e:67:62:87:65:6f:6d:74:58:86:2c:4d:
40:ad:2b:70:ce:64:dc:eb:52:c7:32:96:2f:e1:44:0e:c0:46:
a6:93:4a:07:bc:d9:1d:fc:c1:2e:4d:ac:98:16:91:0e:cf:52:
b4:19:d7:a1:f1:87:77:dd:63:53:e6:04:3a:ab:cf:98:d0:16:
03:ac:c3:88:4a:dc:03:85:ad:5f:a6:df:37:f9:40:22:a3:fe:
35:55:7a:57:c4:3b:26:d4:54:0b:30:3b:f0:19:a4:09:46:01:
5f:b0:84:30:3e:96:13:f4:83:4b:d8:1b:a0:6a:73:37:ee:08:
3e:73:65:ae:8a:aa:20:13:95:c0:5a:3d:87:86:9d:8e:74:c5:
7e:ea:e5:fc:8c:24:e4:5a:64:a5:ef:7d:c4:80:48:a4:08:26:
a1:13:42:65:50:da:72:11:7b:6e:ad:b1:23:2b:21:a3:ae:bc:
15:ad:16:14:01:0b:4b:d2:93:22:ea:1e:c4:84:28:21:c4:ea:
9a:2b:25:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjalEQDuuhAUNGP6BvmHQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMTAxMTk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdlZWFjNzhlZWFhMjcwYjE5MWI5Zjc1NDBiY2Y0ZmQ1ZDk4MjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPf2RMbFgxM7BVmlNx0eA3Ryo8o8
AKQUBWK9NcoGz6chS1Rwihoz17J7pOCZeSWbfTZBqg43422hHm9rbX0Sjeji4+82
hAI5JZ8B0uB+R9+0VsBjJR8t7teDOINfvg6FoQIVtBrTzWKBKS5cfpue2kSVILgI
7cyM6maxAZu/t1reuntBhEkSyxxpZBq6TtzWK80jcTicNWJMdrhKFYu3s8lrwzid
D/L8WgdeeQe6DxRfEsuoN989rOTpgOfD+5htx5meVmMU/5NFO2GEfT+H0yqsICfQ
B4zVXsAmkhNZ/5XhauMTDk2Qbh+jPIKpRD2GYjOqoJoWqHQOI9AAsRIdZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHp+6seO6qJwsZG591QLz0/V2YJEMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvZW43cXg0N3FvbkN4a2JuM1ZBdlBUOVhaZ2tRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXnMA0G
CSqGSIb3DQEBCwUAA4IBAQBcmutFvsstEhwnxyiyIoqDnQt2oOeYaBIsRczXrVoG
4z+hftU8rvpx8XTXryFdrFbcMwUwF1bsy6FSgit+Z2KHZW9tdFiGLE1ArStwzmTc
61LHMpYv4UQOwEamk0oHvNkd/MEuTayYFpEOz1K0Gdeh8Yd33WNT5gQ6q8+Y0BYD
rMOIStwDha1fpt83+UAio/41VXpXxDsm1FQLMDvwGaQJRgFfsIQwPpYT9INL2Bug
anM37gg+c2WuiqogE5XAWj2Hhp2OdMV+6uX8jCTkWmSl733EgEikCCahE0JlUNpy
EXturbEjKyGjrrwVrRYUAQtL0pMi6h7EhCghxOqaKyWe
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:25 2025 by rpki-client