Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1GedIktAD4tKr14uFQZSPCophaM.roa
File: 1GedIktAD4tKr14uFQZSPCophaM.roa (raw, json)
Hash identifier: PbXYitYDrZxd1RF9qIL3vopAGZlV1KH5qYOh3PxEFoo=
Subject key identifier: D4:67:9D:22:4B:40:0F:8B:4A:AF:5E:2E:15:06:52:3C:2A:29:85:A3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019571459340E96299BB84F794DBF236C99C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1GedIktAD4tKr14uFQZSPCophaM.roa
Signing time: Fri 07 Mar 2025 15:42:19 +0000
ROA not before: Fri 07 Mar 2025 15:42:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:45:93:40:e9:62:99:bb:84:f7:94:db:f2:36:c9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 7 15:42:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4679d224b400f8b4aaf5e2e1506523c2a2985a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2b:80:4e:9f:33:03:01:56:04:4a:5d:cf:93:
26:54:ac:38:c6:27:92:b3:36:c1:d7:e0:6c:86:ff:
c9:22:48:d4:82:4e:dd:15:10:3b:b0:7f:df:f9:e6:
ed:b5:89:76:e7:0a:d3:d7:80:8b:9b:4d:56:0d:26:
65:5e:76:dc:dd:3c:07:21:c4:27:3f:5c:d6:9f:23:
bd:40:22:cc:ee:18:bd:c7:8d:a2:7d:d9:9a:97:a3:
e4:ee:46:1d:ec:8f:a1:ea:27:7b:4d:1d:af:9d:dc:
b1:00:25:aa:b2:c2:21:6b:ed:48:7c:4b:79:5d:7f:
f6:16:4b:39:ec:9c:02:f9:f8:ab:18:ea:d6:1f:b6:
d6:fe:a8:da:e8:99:dc:3c:33:40:20:1a:fe:c5:6d:
10:18:7f:3e:a6:6d:f6:4f:26:33:be:0c:1a:61:d0:
4d:08:f2:b6:a2:21:88:b7:45:ab:82:6b:8d:71:c1:
1a:8f:eb:60:b8:90:ba:88:a4:df:65:32:24:84:32:
8a:c4:7a:43:02:f6:8e:d7:55:d8:9d:3d:e9:38:5c:
71:09:0d:3b:02:45:b0:9e:9e:32:5d:fd:49:37:6d:
f7:39:9e:5c:8b:59:72:14:70:94:f4:4b:21:2a:7f:
b7:60:39:84:34:05:a3:26:8b:49:90:13:1b:86:30:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:67:9D:22:4B:40:0F:8B:4A:AF:5E:2E:15:06:52:3C:2A:29:85:A3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1GedIktAD4tKr14uFQZSPCophaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.30.0/23
163.5.34.0/24
163.5.46.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.111.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.131.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.156.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.212.0/24
163.5.216.0/24
163.5.218.0/24
163.5.221.0/24
163.5.224.0/24
163.5.228.0/23
163.5.233.0/24
163.5.241.0-163.5.242.255
163.5.246.0/23
Signature Algorithm: sha256WithRSAEncryption
06:69:71:87:e1:f7:1d:97:72:df:ed:49:d4:1d:46:b7:9f:be:
b2:4c:e1:b3:f8:a0:a1:84:66:28:75:bd:7b:7d:c3:cb:ec:34:
13:e9:fa:37:0a:69:07:e7:34:e2:2f:1c:eb:ca:ae:9c:90:94:
25:b0:14:48:59:49:59:f8:86:14:bb:3a:5d:5f:66:95:1e:bd:
9c:bf:40:e7:67:14:06:d7:18:0c:5b:1a:55:9d:c7:60:58:60:
92:97:bd:b3:06:cb:23:26:b3:e9:5a:8d:47:83:d0:3c:0f:c5:
81:23:65:7d:1e:9d:2c:70:b5:89:81:2e:63:26:84:51:c4:ac:
7f:c7:eb:5c:4f:8a:c4:f4:8c:f0:58:f8:c2:18:0e:ed:92:a6:
a3:df:24:c8:02:c9:23:d3:fe:84:4e:ce:8b:1a:89:82:0d:4b:
85:ad:23:58:ce:bc:16:38:e3:ae:25:dd:f9:c2:77:ef:d0:dd:
d3:d0:a6:86:b0:39:da:6f:46:b5:5a:4d:48:24:9c:7f:60:cc:
78:75:a5:1b:30:5d:09:96:36:39:ec:cd:99:43:5f:38:6f:28:
ce:37:05:0f:6f:22:3f:bf:32:d7:b1:7a:b7:34:31:54:1a:fa:
0c:ff:a8:77:ed:58:fc:d2:f4:8f:e2:87:b1:01:d8:eb:7f:53:
a7:f7:d1:86
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgISAZVxRZNA6WKZu4T3lNvyNsmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMzA3MTU0MjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDY3OWQyMjRiNDAwZjhiNGFhZjVlMmUxNTA2NTIzYzJhMjk4NWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyuATp8zAwFWBEpdz5MmVKw4xieS
szbB1+Bshv/JIkjUgk7dFRA7sH/f+ebttYl25wrT14CLm01WDSZlXnbc3TwHIcQn
P1zWnyO9QCLM7hi9x42ifdmal6Pk7kYd7I+h6id7TR2vndyxACWqssIha+1IfEt5
XX/2Fks57JwC+firGOrWH7bW/qja6JncPDNAIBr+xW0QGH8+pm32TyYzvgwaYdBN
CPK2oiGIt0WrgmuNccEaj+tguJC6iKTfZTIkhDKKxHpDAvaO11XYnT3pOFxxCQ07
AkWwnp4yXf1JN233OZ5ci1lyFHCU9EshKn+3YDmENAWjJotJkBMbhjCDOQIDAQAB
o4IDKTCCAyUwHQYDVR0OBBYEFNRnnSJLQA+LSq9eLhUGUjwqKYWjMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMUdlZElrdEFENHRLcjE0dUZRWlNQQ29waGFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPQYIKwYBBQUHAQcBAf8EggEsMIIBKDCCASQEAgABMIIB
HAMEAKMFFgMEAaMFHgMEAKMFIgMEAKMFLgMEAKMFOwMEAKMFQgMEAKMFSTAMAwQA
owVvAwQBowVwAwQBowV2AwQAowV5AwQBowWAAwQAowWDAwQBowWKMAwDBAGjBY4D
BACjBZADBACjBZIDBACjBZcDBACjBZwDBACjBZ4DBACjBaADBACjBaIDBACjBaQD
BACjBacDBACjBaoDBACjBa0DBACjBa8DBAGjBbIDBACjBbYDBACjBboDBACjBb0D
BACjBb8DBAGjBcgwDAMEAKMFywMEAKMFzgMEAKMF0QMEAKMF1AMEAKMF2AMEAKMF
2gMEAKMF3QMEAKMF4AMEAaMF5AMEAKMF6TAMAwQAowXxAwQAowXyAwQBowX2MA0G
CSqGSIb3DQEBCwUAA4IBAQAGaXGH4fcdl3Lf7UnUHUa3n76yTOGz+KChhGYodb17
fcPL7DQT6fo3CmkH5zTiLxzryq6ckJQlsBRIWUlZ+IYUuzpdX2aVHr2cv0DnZxQG
1xgMWxpVncdgWGCSl72zBssjJrPpWo1Hg9A8D8WBI2V9Hp0scLWJgS5jJoRRxKx/
x+tcT4rE9IzwWPjCGA7tkqaj3yTIAskj0/6ETs6LGomCDUuFrSNYzrwWOOOuJd35
wnfv0N3T0KaGsDnab0a1Wk1IJJx/YMx4daUbMF0JljY57M2ZQ184byjONwUPbyI/
vzLXsXq3NDFUGvoM/6h37Vj80vSP4oexAdjrf1On99GG
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:07 2025 by rpki-client