Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1JH6ZHxJMx-jnlh9ioabc-gQ-TY.roa
File: 1JH6ZHxJMx-jnlh9ioabc-gQ-TY.roa (raw, json)
Hash identifier: oWns9cEoOVdbYQWt5CRgNQQLyzybVQa6Jt0j4SVVWo4=
Subject key identifier: D4:91:FA:64:7C:49:33:1F:A3:9E:58:7D:8A:86:9B:73:E8:10:F9:36
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EC2EA1AFA0845C53AC6C6B9AC2410DF2D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1JH6ZHxJMx-jnlh9ioabc-gQ-TY.roa
Signing time: Tue 09 Apr 2024 12:51:45 +0000
ROA not before: Tue 09 Apr 2024 12:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:ea:1a:fa:08:45:c5:3a:c6:c6:b9:ac:24:10:df:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 9 12:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d491fa647c49331fa39e587d8a869b73e810f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:5e:f8:44:a2:3b:0d:a5:35:e1:e7:32:fe:
2c:ea:1b:78:d1:e4:e6:46:a9:5a:74:dc:1f:01:38:
b6:8f:ea:46:97:e7:57:41:d7:63:a6:4a:58:e9:d8:
c5:26:81:b8:c3:fe:e2:11:7c:6f:cf:95:ef:bf:dd:
5d:21:6d:13:97:e5:25:c3:33:b2:aa:d5:aa:a9:bf:
36:77:8c:44:ea:27:d2:bc:06:c8:9d:17:5c:51:24:
c7:2c:7d:09:97:15:c6:36:b9:14:bd:71:6e:d7:25:
54:4a:d4:fc:8e:5d:2b:1c:e8:55:8c:43:84:a2:20:
2f:50:6e:ca:07:83:df:f6:d3:60:c1:1d:aa:58:4e:
ee:be:bf:b4:c4:19:ff:a4:de:a9:15:52:cd:62:7a:
dc:dd:7f:c9:06:0a:74:53:2a:3f:45:2c:48:d4:8d:
52:98:eb:fc:cc:f7:19:11:40:a0:47:1b:dc:30:0a:
89:78:84:05:0a:75:5f:ff:bb:8c:f1:e5:cc:83:9e:
13:65:50:2f:e2:4e:f8:04:83:98:e5:81:10:a5:6f:
e0:69:dc:06:0f:34:79:a9:8b:00:cd:0b:48:5c:54:
2a:b6:0d:cc:bf:b0:d5:a1:bf:2f:72:d0:47:ee:24:
8d:68:4f:46:48:f8:5b:60:b4:39:8c:5f:0d:76:fe:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:91:FA:64:7C:49:33:1F:A3:9E:58:7D:8A:86:9B:73:E8:10:F9:36
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1JH6ZHxJMx-jnlh9ioabc-gQ-TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.124.0/24
163.5.126.0/24
163.5.128.0/23
163.5.134.0/24
163.5.139.0-163.5.140.255
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/23
163.5.167.0/24
163.5.171.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ce:a8:91:57:97:a4:dc:7a:c5:c8:98:bf:60:aa:e7:c1:77:
1e:9f:e3:d2:58:7a:c6:4e:2e:df:5f:06:2d:ff:e9:3f:28:c0:
21:9b:a5:c5:2c:a9:52:1a:54:36:11:3a:df:85:22:f2:ae:c8:
25:56:f6:f6:81:ae:80:39:03:4b:ce:7e:14:92:0d:9a:34:88:
e4:cd:17:64:12:36:d1:77:1b:8f:89:76:d9:91:79:71:98:3c:
db:34:c9:4d:0f:16:1d:5b:e2:ba:1b:2d:1b:6b:5b:2b:29:da:
4e:fa:84:96:06:6a:b5:1a:83:17:46:cd:60:3b:00:1e:8b:d0:
bf:c3:b9:92:2e:d7:84:59:fa:ee:77:0c:46:71:c6:94:79:b9:
ff:ef:fd:63:57:82:3d:93:42:de:43:e4:7b:96:60:ee:98:5b:
05:8c:90:0e:5c:e8:27:f3:34:5f:cb:b4:51:91:ce:d7:f7:d6:
66:18:99:8b:be:9f:1f:3f:64:b1:84:39:13:71:e8:c6:b8:d4:
25:47:44:c5:e2:ad:0c:37:97:06:ca:a0:d1:35:f1:1b:9b:8e:
9d:a2:75:0b:2a:46:ed:1f:e5:fa:cc:8a:8c:9d:a3:3c:fc:48:
e0:d5:5a:68:ac:39:e7:df:ed:9a:9c:92:fb:4c:bf:56:cc:61:
a6:68:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:01 2025 by rpki-client