Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vJ4aa62elgfdrWeICNS-vZMGwWE.roa
File: vJ4aa62elgfdrWeICNS-vZMGwWE.roa (raw, json)
Hash identifier: X1qWX536tAYg5tyIFrwSPRpOVSt4BX0rUngy/rEgcek=
Subject key identifier: BC:9E:1A:6B:AD:9E:96:07:DD:AD:67:88:08:D4:BE:BD:93:06:C1:61
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193F38DED96B89312CC5CE9B6D49942A640
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vJ4aa62elgfdrWeICNS-vZMGwWE.roa
Signing time: Mon 23 Dec 2024 12:46:25 +0000
ROA not before: Mon 23 Dec 2024 12:46:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 163.5.1.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
163.5.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:8d:ed:96:b8:93:12:cc:5c:e9:b6:d4:99:42:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 23 12:46:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc9e1a6bad9e9607ddad678808d4bebd9306c161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:9c:57:8d:bc:64:b4:da:0b:db:4d:f9:53:
67:e7:b1:ff:57:87:92:78:03:b1:22:af:ce:96:d5:
b4:ce:62:92:41:77:3e:e7:ff:06:7c:46:25:58:42:
39:5e:4b:40:70:46:68:7f:49:aa:a3:00:58:af:d0:
f1:62:6f:ae:d7:89:b1:72:e4:6f:06:4e:5e:ae:1e:
22:ad:74:e7:13:de:97:2d:b3:e8:1b:87:03:14:89:
af:57:b5:f2:1e:50:e6:37:b1:f0:d7:09:5a:da:cf:
ce:25:75:64:9f:42:28:22:f7:3d:e1:15:30:68:a2:
1e:5a:6a:b0:53:48:a6:ef:85:e0:18:b4:9d:2b:ba:
b4:3a:4f:1a:b7:72:cc:5f:68:6f:1c:cd:f3:9e:e2:
75:29:c9:06:4b:7e:d7:36:98:dc:33:af:f2:f9:62:
4a:b3:a3:19:b1:02:ed:c2:8d:31:b9:2b:b0:94:cc:
7e:d9:a2:2e:10:a8:70:8d:80:39:2b:f6:c8:3a:3f:
fa:84:41:87:90:ec:f4:20:fe:c9:3d:58:34:1e:cc:
8b:c4:35:92:78:f1:89:7a:c8:50:ad:de:f7:d3:d0:
35:40:43:2f:47:50:f6:f2:7e:46:72:e3:ad:52:16:
e8:41:e0:89:93:15:0d:b9:66:f3:17:10:31:3c:4f:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9E:1A:6B:AD:9E:96:07:DD:AD:67:88:08:D4:BE:BD:93:06:C1:61
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vJ4aa62elgfdrWeICNS-vZMGwWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.1.0/24
163.5.4.0/24
163.5.6.0/24
163.5.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:de:7e:fa:3c:fe:1a:15:36:36:69:9b:24:d9:eb:9b:e5:9a:
1c:7c:e5:70:bd:5f:81:6a:db:21:aa:14:f4:0e:68:a4:2d:4c:
e3:ad:d8:d7:30:12:68:f7:09:ca:8f:0d:0b:67:fb:4a:06:76:
81:ec:96:90:66:5b:71:f4:bc:8e:fc:dc:b0:33:c0:dc:f3:1e:
ba:a4:0f:46:03:ac:61:25:15:b4:08:56:0e:17:a1:80:60:31:
6a:97:e9:fd:58:40:ef:61:d5:2d:69:6d:ac:f3:b2:e7:c1:96:
46:d1:a7:16:f5:10:6e:82:29:10:60:f6:7d:35:8f:5b:81:d9:
2f:9e:31:41:6a:af:c2:f1:69:c3:10:54:62:6f:c1:cb:e7:8f:
1c:00:5a:3a:46:03:2b:56:a0:64:bf:d2:fd:48:66:41:5a:56:
e7:b8:82:b9:1c:21:5b:58:fc:e9:37:04:85:5a:9e:a6:2a:35:
1d:50:60:48:c6:c2:c9:68:fc:26:6d:08:d1:7b:7d:39:16:2c:
46:6d:5c:17:b6:3f:93:a3:7f:de:19:2d:ba:ad:76:f5:f7:e2:
b3:dd:37:c1:5c:15:9d:3c:96:3f:f9:3d:f0:4f:76:05:4a:92:
4f:a4:a9:9a:41:b9:49:50:21:87:58:a3:e9:9f:b0:cb:e8:0a:
ef:49:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:32:17 2025 by rpki-client