Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ouF2Mxy0vFvO2CSeGL4Mlt_Li8c.roa
File: ouF2Mxy0vFvO2CSeGL4Mlt_Li8c.roa (raw, json)
Hash identifier: Rkg6ZW/KC5CP2pevo4TP/PNAdwn65Ep9SLS5WRjMBrU=
Subject key identifier: A2:E1:76:33:1C:B4:BC:5B:CE:D8:24:9E:18:BE:0C:96:DF:CB:8B:C7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019078C55D83A569AB16C73E10C3222FF223
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ouF2Mxy0vFvO2CSeGL4Mlt_Li8c.roa
Signing time: Wed 03 Jul 2024 13:25:18 +0000
ROA not before: Wed 03 Jul 2024 13:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 163.5.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:c5:5d:83:a5:69:ab:16:c7:3e:10:c3:22:2f:f2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 3 13:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2e176331cb4bc5bced8249e18be0c96dfcb8bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:c7:95:dc:a1:02:5f:ce:62:28:fd:b2:4e:
7e:9f:3b:61:eb:36:5a:57:fb:fe:2c:57:0a:43:82:
06:f6:ab:3d:f1:35:89:85:d9:0a:14:10:c1:29:6d:
8c:ac:68:83:4e:38:92:0a:68:65:9e:e6:6e:c4:33:
5a:d3:c0:3c:c2:89:64:29:1e:a7:89:a5:43:85:f1:
d2:b1:c3:68:e7:60:18:0f:d9:d0:53:25:70:80:c6:
99:ef:ee:e2:d1:7c:72:d4:83:b7:2d:44:17:3f:26:
7a:78:19:2a:ef:9a:99:f9:bc:a6:8d:10:6a:78:f7:
d0:e3:d2:76:39:91:bf:3e:f4:1d:bc:c8:79:e5:f3:
6f:93:71:e9:da:4a:18:38:da:9b:85:f7:81:ff:57:
4e:e4:98:34:f5:4e:d9:d5:92:75:e3:c4:b5:0c:f3:
95:98:30:29:fe:44:f2:d1:f2:b0:55:73:03:be:eb:
cc:06:cb:c5:26:55:83:7e:f1:63:cd:db:56:0c:2d:
2f:67:4b:e6:1e:e8:f3:16:00:72:3a:0c:e9:d0:2c:
1a:f3:3b:8d:5c:31:78:9d:1c:d5:81:87:be:f5:f3:
f6:94:47:d2:37:4e:e8:5e:3b:ea:0a:40:f8:53:e1:
4c:a6:43:66:a9:f6:8d:1d:86:ca:a9:39:e3:26:0d:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E1:76:33:1C:B4:BC:5B:CE:D8:24:9E:18:BE:0C:96:DF:CB:8B:C7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ouF2Mxy0vFvO2CSeGL4Mlt_Li8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.212.0/24
Signature Algorithm: sha256WithRSAEncryption
35:00:61:6e:1b:91:64:96:56:85:f8:b5:b7:49:ec:a1:d7:08:
3e:74:c7:07:1c:5d:5c:c5:8a:8a:a5:75:59:ac:4f:6d:2f:99:
4a:bc:7e:1d:b9:5d:04:11:13:cf:8a:08:00:c8:b5:a8:f1:05:
36:a0:ed:c5:0c:54:43:cc:3d:0d:c6:08:99:0a:68:e5:36:e4:
d3:03:d6:d8:fc:18:15:fc:f0:6d:b2:66:fc:99:29:36:bf:c2:
bc:e2:e5:2a:51:29:db:b6:a7:63:a9:fd:a2:41:62:b4:39:93:
10:f4:fb:80:92:5d:0f:d5:c1:2b:93:31:1b:82:8d:fc:22:f7:
ea:52:fc:bc:41:eb:95:07:cc:6b:30:39:a8:c0:c6:69:37:c6:
d0:e1:df:71:d3:49:6b:9a:df:20:6b:05:e8:29:ba:ba:e2:3e:
b0:bb:86:d3:d1:c0:f1:b7:5a:0d:12:a6:49:3a:e7:b4:3b:2a:
d8:a9:76:4f:2d:2d:c6:4b:58:34:8b:33:5c:c7:b5:72:14:4c:
eb:f5:e6:9c:fd:a9:ea:63:d7:be:04:78:6d:01:73:15:47:89:
8b:42:76:0b:92:bd:8b:24:e0:b6:4d:54:26:df:06:c9:bf:3f:
5a:71:ba:90:08:f8:b8:3a:3c:85:32:10:bb:d5:bd:6a:ac:83:
62:39:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:40 2025 by rpki-client