Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ryNYVTPyxj6kqrJ2f2hDnzOHmDI.roa
File: ryNYVTPyxj6kqrJ2f2hDnzOHmDI.roa (raw, json)
Hash identifier: ytNpJVdjV7hRwiWQOi7tgrtZ+DDWlBW0Z2iHsXijIWc=
Subject key identifier: AF:23:58:55:33:F2:C6:3E:A4:AA:B2:76:7F:68:43:9F:33:87:98:32
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194DAF304A508D6065254888D39100B7B19
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ryNYVTPyxj6kqrJ2f2hDnzOHmDI.roa
Signing time: Thu 06 Feb 2025 11:09:06 +0000
ROA not before: Thu 06 Feb 2025 11:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59538
IP address blocks: 163.5.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:f3:04:a5:08:d6:06:52:54:88:8d:39:10:0b:7b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 6 11:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af23585533f2c63ea4aab2767f68439f33879832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:bf:4a:a5:d0:12:1c:2d:62:93:2f:a2:92:
20:41:64:f9:58:cb:3e:4f:d2:8c:69:05:5a:a9:77:
9a:55:14:40:56:2c:de:af:a0:d9:7e:34:2d:03:6b:
13:a1:01:ed:e4:0f:9a:f1:36:3e:a8:2c:4c:1c:97:
f1:4a:1d:42:88:7d:af:9e:cb:f8:a0:0c:44:6f:a9:
1c:c1:3a:a4:7f:e3:7e:15:1f:06:34:9f:75:7e:4b:
54:d6:c6:4a:8a:12:f2:ce:ed:c6:0f:10:68:76:24:
02:50:1e:cb:93:6f:53:c2:81:eb:25:bf:6d:02:65:
aa:f4:56:d3:fe:65:c8:da:0a:ac:c2:48:9e:bb:ec:
30:5d:e7:55:a2:d0:f7:bc:b1:0e:a5:30:e7:1e:2b:
e6:dd:66:b1:c8:45:57:93:3d:c2:2a:af:a1:74:64:
2b:59:3f:b6:c3:e5:ee:b0:40:91:0c:71:ee:b1:20:
cb:f5:10:85:05:92:e2:7e:b4:18:68:06:42:57:37:
43:52:dd:ba:8f:ed:7e:32:ac:6e:4a:70:80:23:7a:
3f:19:77:5a:9f:d0:05:22:74:bc:37:9a:5e:1f:22:
3e:6c:8d:01:c9:30:f2:1b:73:77:58:32:5b:fd:8c:
96:6a:e3:00:a4:52:d9:5b:84:d9:88:b3:31:c0:8c:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:23:58:55:33:F2:C6:3E:A4:AA:B2:76:7F:68:43:9F:33:87:98:32
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ryNYVTPyxj6kqrJ2f2hDnzOHmDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:91:13:4b:2b:20:7c:c4:9c:2e:12:9f:05:5a:ce:90:09:d0:
a1:99:f1:10:95:2b:0d:b8:45:71:8d:ac:b4:88:2a:0f:de:c4:
30:25:66:c9:ee:3a:18:fa:84:e4:fb:82:f4:51:a8:53:e3:44:
a9:8e:24:56:17:f4:67:2e:06:1f:ff:e9:03:03:3d:87:81:78:
d1:c2:65:3a:a9:0a:f1:10:04:41:b6:2b:dc:97:05:1e:70:60:
e8:2c:84:1c:e2:08:2c:bc:5f:cd:f7:82:e7:84:63:52:3d:f3:
6c:b5:93:e9:4d:19:b3:a7:78:05:1b:51:91:9a:5f:56:2a:28:
54:53:19:bf:6f:b5:06:c2:8b:cb:a4:33:38:de:f0:b8:18:8d:
d3:73:7f:e7:65:70:ca:6c:8c:a4:4d:a0:39:7f:e9:68:b6:57:
97:e0:bf:c4:a4:55:d1:d7:1d:b6:25:5c:ad:8a:7a:cf:94:d0:
5e:ce:67:2c:e4:a4:8a:b8:a7:76:df:af:67:b3:c7:79:d7:40:
20:6a:72:49:94:a6:b9:05:9c:0b:ad:21:5f:34:69:8b:97:64:
0c:29:19:f8:33:16:65:d5:2e:e6:41:44:97:ef:9c:e2:93:39:
7e:91:f3:5c:a4:5f:d4:86:79:b3:6c:14:9c:eb:99:b2:a7:2d:
f1:3b:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:40 2025 by rpki-client