Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/boH4MCGS6fRiko_to5mt1SGTaUY.roa
File: boH4MCGS6fRiko_to5mt1SGTaUY.roa (raw, json)
Hash identifier: pow/9l9+ii2lKkKs6Rxv9TQsxGXjcz4H1ZybcTBgPnc=
Subject key identifier: 6E:81:F8:30:21:92:E9:F4:62:92:8F:ED:A3:99:AD:D5:21:93:69:46
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196237FFBE3AC5311F2BF54729E2AF9F938
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/boH4MCGS6fRiko_to5mt1SGTaUY.roa
Signing time: Fri 11 Apr 2025 06:18:32 +0000
ROA not before: Fri 11 Apr 2025 06:18:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 163.5.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:7f:fb:e3:ac:53:11:f2:bf:54:72:9e:2a:f9:f9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 11 06:18:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e81f8302192e9f462928feda399add521936946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:54:81:0a:d2:c3:98:c4:64:ed:c8:20:25:
93:bc:34:2c:86:19:f9:71:69:07:c9:db:54:28:0d:
cf:45:15:a2:af:23:16:29:87:4f:21:dd:db:d5:e6:
64:6c:81:77:b4:17:cf:42:e3:c7:0b:06:08:f0:a2:
6c:08:86:b0:e9:c3:13:58:12:91:91:ba:32:60:f9:
ba:e1:fb:bf:46:e4:b2:6f:1d:43:74:51:fd:d3:75:
cf:90:3d:78:24:2a:b9:c0:0b:17:95:27:43:bb:0b:
5c:37:06:35:6f:bd:04:9b:82:65:5d:27:b2:9d:44:
94:57:bd:e2:ad:9f:3c:2b:b8:3b:bb:4b:64:95:9d:
f1:20:bc:b0:14:eb:5b:26:96:b2:3b:6b:ac:b0:00:
8e:01:54:34:9c:49:a4:43:6a:b7:99:c1:46:93:33:
fa:5c:5f:ae:32:83:7e:d5:03:80:b9:33:9d:41:6f:
6c:c7:66:a2:a6:96:26:62:63:45:67:4f:45:2b:ad:
66:49:79:82:19:b1:77:4a:87:03:61:01:52:3e:3f:
58:71:56:0f:af:ba:3b:98:3f:e9:42:32:6e:cf:99:
0d:30:24:7e:01:67:b4:38:b7:8b:64:bd:62:a8:1a:
a9:61:4e:4a:ef:9f:c8:b9:0e:8b:e5:46:b4:a4:b8:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:F8:30:21:92:E9:F4:62:92:8F:ED:A3:99:AD:D5:21:93:69:46
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/boH4MCGS6fRiko_to5mt1SGTaUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.221.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a0:32:e8:b6:3d:bb:61:01:26:d7:3d:92:4a:ea:45:c0:7e:
af:d0:68:48:cd:10:78:0b:19:ac:17:fe:fe:97:d2:8f:8c:17:
ee:2d:94:2d:06:fa:2e:bd:a2:3b:4e:67:27:ff:0d:a3:c7:36:
6e:d8:36:0d:e5:13:d5:c7:90:70:95:7b:db:8b:91:35:0b:13:
3d:18:f1:e8:46:fa:8d:94:b8:f5:2f:0c:bd:05:46:00:56:7a:
90:17:1f:23:48:55:32:fe:f9:68:f2:25:ce:60:60:60:57:8b:
85:ed:37:6a:cd:ae:93:d7:1b:ba:d8:f1:42:0d:46:fc:37:e4:
f5:f3:7a:54:a4:a2:da:9c:43:0d:c4:c4:13:dd:88:70:b2:cb:
0f:e5:4c:14:dc:3f:06:e3:0a:9b:bc:dd:8f:be:21:73:2a:5e:
1c:9c:41:b2:b2:8a:2c:59:75:a2:fe:1e:20:0e:2a:c6:4a:c3:
cb:74:59:86:5b:88:06:be:b0:21:d6:fb:7e:fa:d8:6a:36:a9:
0a:c1:80:da:c0:bc:df:29:dd:94:25:90:4c:a8:b2:08:ff:f8:
96:52:a7:cf:cf:f7:d7:20:87:0b:19:a7:2d:7a:73:09:a5:fe:
7a:f0:e7:2d:ba:89:39:7f:d6:e4:64:12:d3:5d:e8:f5:60:33:
83:ba:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:03 2025 by rpki-client on console.sobornost.net