Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n5-TEyXGsZPZyKxGbjg44U8XwgE.roa
File: n5-TEyXGsZPZyKxGbjg44U8XwgE.roa (raw, json)
Hash identifier: hcQLWSbqE/ScjbQmFj7jKCs89zM9MDLUp3gBS1Pnf/4=
Subject key identifier: 9F:9F:93:13:25:C6:B1:93:D9:C8:AC:46:6E:38:38:E1:4F:17:C2:01
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193769EAB734C8FE1CFE9889B4007B3D158
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n5-TEyXGsZPZyKxGbjg44U8XwgE.roa
Signing time: Fri 29 Nov 2024 06:32:10 +0000
ROA not before: Fri 29 Nov 2024 06:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 163.5.209.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:9e:ab:73:4c:8f:e1:cf:e9:88:9b:40:07:b3:d1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 29 06:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f9f931325c6b193d9c8ac466e3838e14f17c201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:fc:1c:68:31:62:2e:10:6e:9b:e4:08:aa:
67:55:a1:b8:67:68:35:5a:86:ec:9f:41:15:94:2f:
5f:9a:b7:7a:7c:9d:3f:ce:54:e7:e3:88:4e:29:ec:
56:b3:4e:a0:83:ab:62:d5:49:71:44:ba:34:72:39:
70:e6:48:46:7b:17:0b:6b:07:c8:3b:a2:40:42:ae:
39:89:14:0a:95:ac:d8:eb:08:b2:0c:e4:c7:e4:6a:
d6:06:4a:e8:96:e9:2f:86:87:6a:2b:5a:8a:4d:7e:
cd:3d:a5:5b:e4:97:67:71:d7:21:72:60:55:f2:65:
d8:c6:07:9a:f4:bd:5a:6d:7d:df:8e:34:77:db:8f:
ce:3c:4a:ab:82:c7:22:36:23:34:d9:b0:9c:0e:e8:
0e:47:8f:f8:25:20:26:d4:15:3e:e0:91:24:ef:33:
45:06:31:b4:b0:9e:c0:b3:bb:89:9f:42:df:8c:08:
9e:c4:46:96:c2:ab:df:c7:9d:cd:c0:15:87:d8:25:
0a:ef:af:f1:92:a7:b6:fb:a7:2f:9c:40:a0:6a:f2:
54:53:c4:55:2e:e6:b4:13:90:79:45:51:83:b3:cf:
ca:55:1d:d1:d6:2c:59:c9:d0:12:55:68:e1:eb:ab:
1d:46:c4:97:b2:16:cc:de:77:d6:23:0f:c0:51:18:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9F:93:13:25:C6:B1:93:D9:C8:AC:46:6E:38:38:E1:4F:17:C2:01
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n5-TEyXGsZPZyKxGbjg44U8XwgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.209.0/24
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9d:8a:7d:07:2d:fd:e0:f5:fe:ec:6e:00:1c:70:98:16:c5:
8b:99:f9:fc:97:c9:d9:4a:62:c4:5b:c7:0e:21:d6:4c:9f:93:
03:ad:21:b5:8b:ba:5d:bc:1e:db:f5:b7:df:30:29:21:f7:34:
d4:2d:47:d2:ae:85:71:e1:7c:12:1d:2a:8a:89:c0:58:99:71:
89:bb:96:b0:d5:15:27:f0:ae:f8:ba:1e:55:91:55:7b:32:47:
0f:45:d7:4e:90:26:f1:25:bc:82:a5:fb:de:68:61:54:8c:72:
d0:62:63:2b:7d:58:80:7b:dd:bf:11:04:59:02:92:12:28:a3:
71:dc:9a:13:70:c6:b1:73:70:bd:bf:19:33:c9:2a:87:04:20:
52:f7:04:f3:e9:1e:fd:13:fa:da:fa:8f:d0:a0:ab:18:6a:ee:
78:8d:2c:cf:2d:0c:ad:2d:d3:06:e8:b6:42:6d:21:c6:bd:2f:
c5:d3:c1:14:06:95:1c:61:a2:96:8d:fd:e2:62:77:2f:67:2f:
47:71:60:54:76:fb:80:14:34:3b:fb:68:75:96:ae:98:fb:6d:
55:81:14:94:a9:cd:99:bf:f1:8b:7a:47:01:79:2f:e9:99:61:
ed:85:aa:ab:4a:c0:05:59:6d:9b:30:cb:72:4e:07:fd:3f:09:
6c:07:b4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:10 2025 by rpki-client