Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0U8FKMnn3uMzZX9DNCo2o6bJQCA.roa
File: 0U8FKMnn3uMzZX9DNCo2o6bJQCA.roa (raw, json)
Hash identifier: mRAJ3g7r9WyIVpEFI/TavZonOcIi+C0Rw98JXdgr3M4=
Subject key identifier: D1:4F:05:28:C9:E7:DE:E3:33:65:7F:43:34:2A:36:A3:A6:C9:40:20
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01959A3C7D295F6DD2431EBDFC60A7DE7627
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0U8FKMnn3uMzZX9DNCo2o6bJQCA.roa
Signing time: Sat 15 Mar 2025 14:36:50 +0000
ROA not before: Sat 15 Mar 2025 14:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.38.0/23 maxlen: 23
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9a:3c:7d:29:5f:6d:d2:43:1e:bd:fc:60:a7:de:76:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 15 14:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d14f0528c9e7dee333657f43342a36a3a6c94020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:20:d8:37:4a:dc:76:71:ff:e8:e7:e4:02:ed:
37:d2:85:58:19:42:ed:e2:23:82:02:1d:45:d1:6b:
de:64:de:40:52:87:8d:7c:1e:d0:34:d8:14:87:72:
ec:ef:06:34:d3:98:0c:e2:17:f6:9f:c4:bb:e8:7b:
db:59:8e:53:b4:ae:dd:49:13:5b:a5:2e:e0:ba:70:
6d:d0:28:c5:f8:e5:6c:86:08:37:22:86:c6:d5:5a:
59:f2:51:0e:c5:36:89:1e:9c:40:24:1e:af:f5:5f:
e9:6e:a7:3f:31:08:f5:10:0b:d9:13:5c:1f:17:c3:
81:9c:65:c4:00:7e:df:27:7b:dc:ba:f1:b6:61:d8:
3d:5d:86:48:ca:9a:58:81:c2:e7:3b:0c:e4:e4:2a:
81:00:79:8a:8a:95:39:fe:6f:03:87:0c:6d:e9:0b:
4c:f9:31:ad:23:3a:0d:ad:a1:ad:f9:6f:13:19:2d:
c7:af:43:41:a3:e9:67:fc:c6:2d:3e:21:5e:08:13:
b1:71:34:be:16:d0:a3:18:49:0a:b9:88:85:a7:27:
85:a1:cc:99:c6:78:18:57:86:a2:97:23:cb:1b:86:
99:e1:d4:f8:9c:20:3a:f6:e5:71:83:37:61:17:1f:
a5:62:34:c8:b9:b6:02:a3:2f:64:e0:3a:4f:c0:3a:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4F:05:28:C9:E7:DE:E3:33:65:7F:43:34:2A:36:A3:A6:C9:40:20
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0U8FKMnn3uMzZX9DNCo2o6bJQCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.130.0/24
163.5.147.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.226.0-163.5.228.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
Signature Algorithm: sha256WithRSAEncryption
57:95:9a:a7:45:f1:cf:54:9c:de:cb:b1:c5:0e:1a:10:80:34:
4f:f1:7b:75:9a:a6:fa:10:30:1d:2b:87:d1:7f:4d:d3:38:90:
4d:fc:31:51:22:47:6a:70:b7:ce:b6:22:09:2c:71:4a:b4:85:
97:0d:6e:f1:14:df:f3:98:cc:4c:e8:b3:e4:2d:7b:93:56:12:
1c:bf:a3:7e:be:9c:ea:e4:fe:c3:7a:20:aa:a5:eb:cf:4b:00:
83:11:34:3f:ce:51:3c:2c:ac:8b:59:47:86:7f:26:6a:9b:51:
2f:87:c0:37:cb:3a:bf:00:80:7e:6a:7a:19:2b:90:2e:37:1d:
a7:42:46:cf:6f:84:fe:db:40:d4:ae:33:3f:39:bd:a4:4d:93:
f8:62:bf:10:3d:51:3e:9c:aa:df:12:5a:f6:6f:f9:80:4e:f0:
25:5b:cb:a0:67:60:22:2f:4e:b0:34:8b:f9:ba:9e:47:c7:a8:
63:e4:d3:87:14:38:4c:52:e3:3e:a0:11:c1:50:08:9c:3f:1a:
56:72:2e:fc:d4:e4:ee:67:da:cd:77:b6:68:31:5f:eb:2f:8a:
80:85:02:1c:28:0e:22:93:e0:3c:97:a3:75:f6:59:07:e6:7d:
2b:50:a5:f1:28:ee:54:f2:be:5d:0a:f2:b2:6e:0d:c2:c7:76:
68:bc:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:41 2025 by rpki-client