Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wI4xfw46q5C8c_O_EUCQO69n70E.roa
File: wI4xfw46q5C8c_O_EUCQO69n70E.roa (raw, json)
Hash identifier: B3WGMGaTYDdDQBZwBYpOF5rKwfP1UGFf8TXuqmjV6Lg=
Subject key identifier: C0:8E:31:7F:0E:3A:AB:90:BC:73:F3:BF:11:40:90:3B:AF:67:EF:41
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01949C6BF0162B45B7ECF196A22A829B6C58
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wI4xfw46q5C8c_O_EUCQO69n70E.roa
Signing time: Sat 25 Jan 2025 07:45:07 +0000
ROA not before: Sat 25 Jan 2025 07:45:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 163.5.219.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9c:6b:f0:16:2b:45:b7:ec:f1:96:a2:2a:82:9b:6c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 25 07:45:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c08e317f0e3aab90bc73f3bf1140903baf67ef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:44:8b:b6:47:57:dd:94:09:11:97:fb:85:
03:80:5b:9c:8b:e1:0c:06:52:06:bc:0e:28:21:34:
f6:0c:99:22:e9:23:61:ea:b8:4b:47:03:94:43:dc:
6c:c4:eb:15:f0:67:eb:f8:c1:6b:45:8d:c8:f1:8e:
d4:1d:a6:42:20:14:4d:60:4b:bc:b2:b1:a3:a1:57:
02:89:60:fe:e2:25:4c:f9:13:bd:96:53:a1:98:06:
94:93:7e:f4:ec:1b:45:44:ad:52:61:16:99:a7:c8:
80:16:29:a6:31:24:14:7b:c5:26:bc:3c:bb:a9:d9:
52:d6:f3:36:f3:74:40:12:bd:34:a6:59:10:46:79:
3f:94:18:c7:cb:13:bc:48:a9:de:d5:42:15:12:57:
05:04:9d:a1:4c:dd:63:21:0f:57:be:c6:90:57:a3:
35:8c:c0:df:3d:5f:09:94:8a:4e:8a:0d:63:68:85:
fe:86:15:c4:b6:e9:ff:b4:73:1b:94:c2:0c:2e:94:
d5:93:03:db:48:06:ef:b6:2e:c7:2b:07:2f:7a:83:
ad:71:0f:91:8c:7a:03:2c:7c:3d:ee:75:32:22:40:
44:c0:b0:3c:3a:19:75:6b:e6:57:b6:ea:ae:7f:29:
d5:97:05:c6:b3:82:f1:62:38:c6:03:30:b6:32:13:
c7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:31:7F:0E:3A:AB:90:BC:73:F3:BF:11:40:90:3B:AF:67:EF:41
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wI4xfw46q5C8c_O_EUCQO69n70E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.219.0/24
163.5.230.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3a:d2:47:a4:53:14:08:06:93:46:a8:dc:52:83:26:95:44:
c9:4c:b9:48:5e:92:24:92:0b:d3:9c:d9:cd:ca:86:92:6f:1c:
b0:d8:fe:d0:01:71:29:58:f0:b8:49:05:63:3c:55:f0:c2:7f:
da:7f:32:0e:2c:3c:5e:fd:f6:e4:43:aa:c4:7c:f0:55:3d:87:
04:8a:29:5e:be:a2:54:4c:e4:25:b9:37:a5:fd:55:f1:4d:4e:
04:49:b9:cd:08:6e:ac:81:c7:be:65:de:e7:cb:59:10:fe:f9:
5a:d5:97:74:f7:ae:6b:b4:51:58:e8:bd:5d:ae:94:d9:14:56:
88:d8:20:d7:07:68:47:b8:60:25:2a:8e:1a:54:f0:ff:5d:b6:
f9:a7:f3:a3:86:21:fe:bc:67:dc:72:35:ab:73:5c:c2:0f:36:
8a:7b:75:87:a7:aa:3a:77:7c:55:29:36:93:35:d5:57:6c:b8:
4e:d8:4b:a4:e6:cf:9b:5c:58:96:35:22:de:49:42:88:21:ce:
37:5b:8b:99:9b:28:71:29:88:df:82:59:45:fa:11:39:18:cd:
c9:f1:7b:a7:2d:00:3c:ac:93:11:bc:67:d7:17:c3:d8:3e:33:
4f:28:56:2f:51:8e:76:bd:15:2c:b3:8e:d3:8a:19:05:79:bd:
34:6f:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:47 2025 by rpki-client