Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kUE_1i-Eon1CnnQbESz73kLqYzo.roa
File: kUE_1i-Eon1CnnQbESz73kLqYzo.roa (raw, json)
Hash identifier: mNpcUETrqLgVKxW1JUwmjqiJ4fZ2UAT0VA173KMbo3Q=
Subject key identifier: 91:41:3F:D6:2F:84:A2:7D:42:9E:74:1B:11:2C:FB:DE:42:EA:63:3A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01955C092E55D37F424E38A2E17ECCE33087
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kUE_1i-Eon1CnnQbESz73kLqYzo.roa
Signing time: Mon 03 Mar 2025 12:44:20 +0000
ROA not before: Mon 03 Mar 2025 12:44:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:09:2e:55:d3:7f:42:4e:38:a2:e1:7e:cc:e3:30:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 3 12:44:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91413fd62f84a27d429e741b112cfbde42ea633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:a5:86:06:72:55:cb:69:1a:ed:58:09:c5:
29:6f:eb:48:d3:fd:c3:67:25:b5:1b:42:7c:1e:b2:
3b:e8:1d:fc:ef:5c:64:76:2a:ca:d0:f8:97:d9:aa:
62:fd:5c:ec:85:5c:ab:14:10:9e:1a:30:5c:2c:69:
f6:77:d7:d8:3e:8f:1f:51:10:6e:d4:db:66:d4:f8:
2a:da:81:20:82:62:72:c5:49:27:66:47:af:1d:5a:
41:1b:eb:45:28:ea:94:be:40:21:70:05:97:f4:a9:
ee:41:df:e9:b0:ff:50:b7:11:c0:11:3a:1d:e9:ab:
92:3d:d8:3a:58:25:9f:39:b2:15:7c:a3:b6:61:64:
b9:1a:66:6f:12:68:83:88:98:3c:d2:1d:32:ee:de:
f0:d0:ea:6e:7f:81:7c:56:e7:cd:68:4a:1a:8f:7b:
c5:40:da:60:1c:7f:74:45:47:70:38:1d:58:15:79:
f4:bf:e1:ff:7e:d5:60:d8:d1:cc:34:08:5c:a7:38:
75:bb:40:0c:f0:40:c8:8a:70:be:6b:7a:83:d3:e7:
d4:c7:ac:88:39:66:b4:12:fc:46:4b:f7:9c:3b:c5:
f7:da:f7:83:d6:d7:6a:bc:28:10:27:56:96:96:01:
2d:df:1b:4f:07:2c:a3:59:21:fe:4e:06:c8:08:ac:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:41:3F:D6:2F:84:A2:7D:42:9E:74:1B:11:2C:FB:DE:42:EA:63:3A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kUE_1i-Eon1CnnQbESz73kLqYzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.199.0/24
163.5.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ca:97:8d:19:1a:04:68:46:54:d3:3f:05:fd:b1:e8:3d:25:
a0:2a:1b:c8:4e:6a:b2:1a:8d:da:18:4c:c7:52:f1:d7:0a:7b:
69:d5:57:c1:db:9f:64:1a:8b:a9:00:75:c6:1e:4a:a7:d5:bc:
fc:52:e7:8f:d5:a0:25:04:31:e9:ce:f2:bf:01:54:33:b5:c6:
97:6b:4a:4c:f2:43:de:7a:d4:bf:de:85:b8:50:17:ef:22:8b:
7d:b7:2c:6c:fd:ff:a8:3c:61:28:b3:da:35:5e:10:35:ff:3a:
33:90:ec:78:7d:7c:36:46:fd:d6:6d:76:8d:85:6b:e2:ab:8f:
63:11:cf:1b:f5:06:14:02:33:c1:4d:7f:ae:1a:04:3e:f1:a6:
c7:ea:b6:04:7b:80:b1:7b:9b:a4:d5:0d:4f:0d:d9:ea:dd:1d:
72:c6:27:e3:b2:ba:07:42:02:54:47:43:cb:30:d2:95:3f:47:
74:0c:0c:fd:b3:88:fe:ee:a6:25:22:7d:d3:a2:04:64:74:eb:
4b:27:bd:22:88:c8:12:ba:c2:65:dd:b7:7c:55:71:b6:a6:d2:
db:ea:18:b9:2e:c9:03:3b:29:01:fc:67:47:8a:c0:ff:0a:49:
0e:8b:97:63:87:1a:03:12:53:98:f8:1e:1c:e7:1d:56:62:1b:
33:b6:0d:c9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVcCS5V039CTjii4X7M4zCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMzAzMTI0NDIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTQxM2ZkNjJmODRhMjdkNDI5ZTc0MWIxMTJjZmJkZTQyZWE2MzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP+lhgZyVctpGu1YCcUpb+tI0/3D
ZyW1G0J8HrI76B3871xkdirK0PiX2api/VzshVyrFBCeGjBcLGn2d9fYPo8fURBu
1Ntm1Pgq2oEggmJyxUknZkevHVpBG+tFKOqUvkAhcAWX9KnuQd/psP9QtxHAETod
6auSPdg6WCWfObIVfKO2YWS5GmZvEmiDiJg80h0y7t7w0Opuf4F8VufNaEoaj3vF
QNpgHH90RUdwOB1YFXn0v+H/ftVg2NHMNAhcpzh1u0AM8EDIinC+a3qD0+fUx6yI
OWa0EvxGS/ecO8X32veD1tdqvCgQJ1aWlgEt3xtPByyjWSH+TgbICKzLbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJFBP9YvhKJ9Qp50GxEs+95C6mM6MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEva1VFXzFpLUVvbjFDbm5RYkVTejcza0xxWXpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowUeAwQA
owXHAwQAowXYMA0GCSqGSIb3DQEBCwUAA4IBAQCnypeNGRoEaEZU0z8F/bHoPSWg
KhvITmqyGo3aGEzHUvHXCntp1VfB259kGoupAHXGHkqn1bz8UueP1aAlBDHpzvK/
AVQztcaXa0pM8kPeetS/3oW4UBfvIot9tyxs/f+oPGEos9o1XhA1/zozkOx4fXw2
Rv3WbXaNhWviq49jEc8b9QYUAjPBTX+uGgQ+8abH6rYEe4Cxe5uk1Q1PDdnq3R1y
xifjsroHQgJUR0PLMNKVP0d0DAz9s4j+7qYlIn3TogRkdOtLJ70iiMgSusJl3bd8
VXG2ptLb6hi5LskDOykB/GdHisD/CkkOi5djhxoDElOY+B4c5x1WYhsztg3J
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:26 2025 by rpki-client