Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AhOdSOKjkLI20hJ-WW0-uOjUIrk.roa
File: AhOdSOKjkLI20hJ-WW0-uOjUIrk.roa (raw, json)
Hash identifier: 5BoDNByfiL7r/2ynNbhRTMIH8pyGYe6OpeWaIQURYBg=
Subject key identifier: 02:13:9D:48:E2:A3:90:B2:36:D2:12:7E:59:6D:3E:B8:E8:D4:22:B9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01957136EDF1FAD65F91358C0D3AAA14A028
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AhOdSOKjkLI20hJ-WW0-uOjUIrk.roa
Signing time: Fri 07 Mar 2025 15:26:20 +0000
ROA not before: Fri 07 Mar 2025 15:26:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.38.0/23 maxlen: 23
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:36:ed:f1:fa:d6:5f:91:35:8c:0d:3a:aa:14:a0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 7 15:26:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02139d48e2a390b236d2127e596d3eb8e8d422b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a7:7c:ba:ec:9f:3f:11:d7:83:4c:5f:70:70:
81:2a:81:1f:bc:c4:62:be:3c:12:b6:ff:e0:8f:c5:
14:c8:48:90:b4:d8:c1:a3:e0:7d:32:67:9f:a9:cd:
50:40:90:fb:d0:fb:1c:33:bd:d6:12:3c:d6:7e:19:
8f:cb:1e:3d:ef:c8:73:17:f4:5b:53:6b:ce:b2:89:
ff:a8:c6:2c:7d:7b:ec:1e:f7:4b:84:0f:5c:d1:4a:
5e:39:b0:30:55:29:ec:c8:cc:50:d8:cf:70:0a:9f:
ab:59:f2:4e:7b:bc:07:2e:15:a8:79:a8:08:c1:44:
f5:c9:0b:39:36:c7:ae:3d:86:f9:97:a5:d9:cb:5b:
24:2a:3f:91:71:4f:84:0d:95:2d:4a:9b:36:a8:ab:
ca:f5:96:69:3f:9a:72:0a:c2:81:d7:de:ef:db:75:
b8:f1:75:f1:96:09:d1:e5:8e:c0:33:ef:9f:70:70:
e0:27:2d:1d:77:9a:e1:21:ad:a6:0d:b4:dc:f0:f6:
ed:59:64:31:c7:d8:75:c6:91:26:91:d2:cb:fe:da:
10:04:6e:7c:09:18:b6:f9:76:f5:4f:ec:22:b2:e0:
c8:e6:72:ab:20:b7:89:6d:2b:38:fa:d3:8b:aa:01:
30:96:96:9f:fa:9d:b8:ef:f8:32:94:b2:25:4e:ca:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:13:9D:48:E2:A3:90:B2:36:D2:12:7E:59:6D:3E:B8:E8:D4:22:B9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AhOdSOKjkLI20hJ-WW0-uOjUIrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.130.0/24
163.5.147.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.228.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5e:21:0d:d1:ff:f8:c3:f5:41:5e:0a:fe:79:57:bb:ab:01:
40:e7:d5:05:02:a6:0d:87:a7:50:87:e4:9d:9e:e5:8d:be:21:
98:28:46:42:19:86:8d:d9:37:e9:ca:ac:4d:55:20:bb:e6:8c:
92:ae:ae:ea:c5:3e:ae:5f:67:b6:7d:fc:05:13:ab:8f:7d:22:
e6:d1:c7:a2:f8:71:c2:04:e2:a0:10:10:58:89:f6:02:91:b8:
bd:9d:32:b5:81:48:96:c5:ae:4f:0a:b0:2f:09:c9:87:1d:23:
a2:ad:e6:a3:48:c3:e7:df:bf:d2:3f:46:e2:bc:c6:4d:66:69:
7e:3b:14:09:1b:fa:95:d8:be:31:ea:91:30:5a:9d:24:4d:08:
21:13:61:d1:6f:21:95:a5:39:f5:a1:65:d9:a8:a1:09:51:45:
08:e2:89:b9:dd:95:19:d6:9e:49:5f:f3:e9:a5:9e:e9:9d:21:
af:f5:67:61:95:f2:20:4b:ae:1f:61:ab:eb:38:8d:69:cb:7e:
51:ad:f8:d6:be:b0:18:63:80:25:e7:fa:8e:50:d6:be:0f:c4:
a1:e2:6c:5e:79:38:f2:b7:fe:87:0f:ee:90:09:01:df:a8:09:
7f:b6:f3:b8:44:92:a8:42:cd:4e:18:0c:74:75:05:ef:20:ab:
a8:28:74:5f
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZVxNu3x+tZfkTWMDTqqFKAoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMzA3MTUyNjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjEzOWQ0OGUyYTM5MGIyMzZkMjEyN2U1OTZkM2ViOGU4ZDQyMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06d8uuyfPxHXg0xfcHCBKoEfvMRi
vjwStv/gj8UUyEiQtNjBo+B9Mmefqc1QQJD70PscM73WEjzWfhmPyx4978hzF/Rb
U2vOson/qMYsfXvsHvdLhA9c0UpeObAwVSnsyMxQ2M9wCp+rWfJOe7wHLhWoeagI
wUT1yQs5NseuPYb5l6XZy1skKj+RcU+EDZUtSps2qKvK9ZZpP5pyCsKB197v23W4
8XXxlgnR5Y7AM++fcHDgJy0dd5rhIa2mDbTc8PbtWWQxx9h1xpEmkdLL/toQBG58
CRi2+Xb1T+wisuDI5nKrILeJbSs4+tOLqgEwlpaf+p247/gylLIlTso4OwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFAITnUjio5CyNtISflltPrjo1CK5MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQWhPZFNPS2prTEkyMGhKLVdXMC11T2pVSXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBAGj
BSYDBACjBTwDBACjBT8DBACjBVgDBACjBVoDBACjBV0wDAMEAqMFZAMEAKMFZgME
AaMFbAMEAKMFcgMEAaMFdAMEAKMFggMEAKMFkwMEAKMFrgMEAKMFvQMEAKMFwDAM
AwQAowXhAwQAowXkAwQAowXuAwQAowXwAwQAowXzMA0GCSqGSIb3DQEBCwUAA4IB
AQAgXiEN0f/4w/VBXgr+eVe7qwFA59UFAqYNh6dQh+SdnuWNviGYKEZCGYaN2Tfp
yqxNVSC75oySrq7qxT6uX2e2ffwFE6uPfSLm0cei+HHCBOKgEBBYifYCkbi9nTK1
gUiWxa5PCrAvCcmHHSOireajSMPn37/SP0bivMZNZml+OxQJG/qV2L4x6pEwWp0k
TQghE2HRbyGVpTn1oWXZqKEJUUUI4om53ZUZ1p5JX/PppZ7pnSGv9WdhlfIgS64f
YavrOI1py35RrfjWvrAYY4Al5/qOUNa+D8Sh4mxeeTjyt/6HD+6QCQHfqAl/tvO4
RJKoQs1OGAx0dQXvIKuoKHRf
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:35:44 2025 by rpki-client