Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/G9-a7Y_bL9aaApE-c7b6qeDnV9E.roa
File: G9-a7Y_bL9aaApE-c7b6qeDnV9E.roa (raw, json)
Hash identifier: 5YidkZHRSRhVi2St9rUMN132bNFIOSWlwYzcIfqZU5U=
Subject key identifier: 1B:DF:9A:ED:8F:DB:2F:D6:9A:02:91:3E:73:B6:FA:A9:E0:E7:57:D1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01951F8BAEC4F7B05709B191A51403F83AA4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/G9-a7Y_bL9aaApE-c7b6qeDnV9E.roa
Signing time: Wed 19 Feb 2025 18:50:02 +0000
ROA not before: Wed 19 Feb 2025 18:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:8b:ae:c4:f7:b0:57:09:b1:91:a5:14:03:f8:3a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 19 18:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bdf9aed8fdb2fd69a02913e73b6faa9e0e757d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:68:24:4c:ab:b2:3b:db:94:0e:f6:83:3a:
3c:3b:01:f6:02:0d:ef:e3:dd:d2:d9:79:83:6e:82:
8e:a7:0c:c9:c2:73:76:cc:4d:cc:83:01:03:0f:e2:
14:df:9d:fe:b6:ab:35:75:d8:13:da:bf:4c:54:ef:
46:5d:18:ae:35:85:4d:26:84:05:ad:01:d5:af:8a:
11:75:12:f3:62:6f:27:7a:06:13:f1:22:63:4e:7d:
b3:f8:f2:22:91:15:d2:41:71:b6:5c:6f:e0:2c:c0:
9a:66:19:ef:87:c1:58:6d:bf:e2:62:b7:ce:42:56:
91:e8:7e:d1:25:18:45:ea:35:f9:23:05:97:b1:59:
c7:5d:ab:00:7d:de:37:c7:c5:8f:78:6d:ef:fe:42:
9c:f1:9b:99:e0:29:98:ca:97:54:01:8a:c7:e1:fb:
de:0b:bc:0a:65:03:6e:10:89:57:41:46:4d:e5:75:
a3:a2:ca:25:92:7f:27:13:55:fb:30:a7:1f:54:1e:
73:2f:9c:9f:81:33:c0:bf:79:9f:8d:dd:8a:0c:0c:
f8:6c:b8:91:33:cc:13:f2:53:e5:e0:da:70:43:cf:
e8:df:f0:7c:2d:66:09:01:9d:7f:ad:e7:f2:68:08:
5c:7e:18:ea:1b:4f:e4:fc:c8:41:02:59:94:07:85:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DF:9A:ED:8F:DB:2F:D6:9A:02:91:3E:73:B6:FA:A9:E0:E7:57:D1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/G9-a7Y_bL9aaApE-c7b6qeDnV9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.30.0/23
163.5.34.0/24
163.5.46.0/24
163.5.59.0/24
163.5.73.0/24
163.5.111.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.131.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.212.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0-163.5.242.255
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:32:33:7d:86:7a:c8:1e:cf:03:f7:f3:fd:24:39:4b:29:ac:
2b:f2:df:d3:a3:cf:77:ae:dd:ee:7e:7a:da:59:47:e9:42:98:
14:72:0c:f3:fa:e9:2d:38:08:cc:07:23:93:d0:e6:94:cf:a4:
9a:7b:13:31:d4:48:cf:5e:2e:61:8c:98:4a:d1:0e:ad:d5:d5:
75:f3:fa:d1:7f:84:b7:d3:1c:db:d2:7a:aa:f6:47:51:fc:0c:
d9:04:3a:0a:00:be:8a:54:2d:54:78:bf:9c:21:d9:a2:59:ff:
55:fd:cf:33:47:61:37:2e:9b:df:e2:14:d0:b8:aa:17:59:85:
71:7b:c6:ab:20:73:5d:da:12:9d:a1:0c:b7:8d:ce:b5:e2:f2:
9f:b5:a1:50:0f:74:f3:44:a7:32:f1:81:83:94:41:0b:55:c6:
15:24:b0:ec:4f:b7:82:ac:c7:b7:16:9a:84:61:7a:6f:ec:27:
aa:41:87:fc:da:e1:37:1d:16:cd:56:9f:2a:ce:50:b5:c3:58:
6d:8d:7a:c3:52:49:68:34:de:b4:5c:d9:0d:43:f5:4e:bb:c5:
d5:9c:16:0f:96:d1:ed:b2:cf:0c:3b:ee:b0:d8:f5:c8:61:6b:
15:56:d1:64:ec:02:68:98:c5:7c:7e:58:e2:0b:1f:f1:39:49:
d3:f2:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:44 2025 by rpki-client