Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LApo5HYFLS_SFZ1FmnxOllFJ120.roa
File: LApo5HYFLS_SFZ1FmnxOllFJ120.roa (raw, json)
Hash identifier: zsCNfnoiwV8TRDGa1NqIG16UCS7A/h1iwVcdWfbWWMI=
Subject key identifier: 2C:0A:68:E4:76:05:2D:2F:D2:15:9D:45:9A:7C:4E:96:51:49:D7:6D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194CBEA234E4C485FC0EC61C0DAABA95235
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LApo5HYFLS_SFZ1FmnxOllFJ120.roa
Signing time: Mon 03 Feb 2025 13:05:06 +0000
ROA not before: Mon 03 Feb 2025 13:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:ea:23:4e:4c:48:5f:c0:ec:61:c0:da:ab:a9:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 3 13:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c0a68e476052d2fd2159d459a7c4e965149d76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:d8:48:de:eb:f6:54:d2:e7:38:5f:35:c1:
36:5d:36:44:ff:8b:0a:2d:f4:75:86:2d:b2:33:17:
66:7d:2c:7c:49:f2:f0:62:67:ea:3a:d3:c5:b1:86:
17:c5:0d:54:53:35:40:28:4e:69:2d:f8:69:c9:4b:
63:da:14:71:86:80:bb:7c:e7:fc:21:bb:17:d0:a7:
e9:f2:bb:92:e6:8e:fc:f4:42:39:2f:5d:32:6c:34:
8b:19:8c:fb:37:b0:67:0f:a7:21:bf:58:76:d7:f9:
da:8a:e4:8c:ee:75:dd:dd:cd:c8:74:8e:9a:a9:00:
29:a2:45:20:f8:58:66:00:bf:fb:f1:0c:e6:44:0a:
30:04:fb:59:83:1b:a5:f1:d7:5a:5c:ff:46:2e:b3:
4c:ea:5c:fa:57:9a:68:d7:ea:ef:57:6b:7a:53:a8:
ae:f9:ab:6f:a2:0a:e1:99:7b:46:ea:19:ae:34:40:
38:57:00:1f:9a:6d:57:1a:bf:b4:b0:c0:d0:ae:82:
c2:13:39:c0:ce:3c:76:04:ec:76:b8:72:79:5b:54:
7c:67:7d:7e:65:58:20:be:0d:b3:3d:7a:23:11:a6:
7d:9d:66:fe:db:69:78:03:af:bb:10:72:ed:1f:f2:
4f:3e:83:00:be:2e:3d:1b:82:6a:6b:9f:30:a4:03:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0A:68:E4:76:05:2D:2F:D2:15:9D:45:9A:7C:4E:96:51:49:D7:6D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LApo5HYFLS_SFZ1FmnxOllFJ120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.111.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.212.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0-163.5.242.255
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e4:d7:8e:42:e3:91:82:57:de:d0:fd:d8:60:fc:bf:5d:aa:
02:8a:9c:c9:ae:3e:63:21:b5:5b:3c:32:42:f6:a2:6f:4e:46:
5e:6e:2e:e3:ad:a3:e4:d1:c6:fe:aa:e9:61:fe:11:f2:f5:29:
ea:40:5a:2b:87:4f:42:a5:c6:1d:f0:ae:aa:ce:c5:55:19:0e:
a9:f3:b8:5e:e7:ca:0f:dc:a9:10:64:88:24:31:36:d6:cf:b2:
02:a8:5a:00:27:d4:89:e1:e9:38:29:9c:b9:5a:1e:4a:8c:f7:
eb:59:4b:19:f9:f5:c7:e5:52:60:21:14:0e:14:21:50:8a:0f:
d1:ef:c8:67:7b:a9:0f:7f:c9:77:31:88:7c:6c:bc:41:83:47:
6b:e9:6d:b0:7e:26:33:da:61:6d:d8:da:d4:34:10:05:2e:f7:
2c:10:ac:d5:30:33:9c:9d:5f:1b:ef:d4:5a:d3:df:f3:4e:71:
c4:3b:5b:de:29:03:b6:dc:ce:44:db:8a:46:d7:90:22:b3:f0:
60:42:a0:ae:21:9d:f9:29:cc:cc:82:fc:52:7f:12:3c:b2:89:
3c:39:80:9f:79:69:5f:c2:7f:78:7c:4d:c6:76:c6:cd:9a:fd:
db:9d:a3:f5:b3:cf:03:a2:c2:71:07:fc:ee:40:13:a8:ac:f6:
f3:b2:54:65
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAZTL6iNOTEhfwOxhwNqrqVI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMjAzMTMwNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzBhNjhlNDc2MDUyZDJmZDIxNTlkNDU5YTdjNGU5NjUxNDlkNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA033YSN7r9lTS5zhfNcE2XTZE/4sK
LfR1hi2yMxdmfSx8SfLwYmfqOtPFsYYXxQ1UUzVAKE5pLfhpyUtj2hRxhoC7fOf8
IbsX0Kfp8ruS5o789EI5L10ybDSLGYz7N7BnD6chv1h21/naiuSM7nXd3c3IdI6a
qQApokUg+FhmAL/78QzmRAowBPtZgxul8ddaXP9GLrNM6lz6V5po1+rvV2t6U6iu
+atvogrhmXtG6hmuNEA4VwAfmm1XGr+0sMDQroLCEznAzjx2BOx2uHJ5W1R8Z31+
ZVggvg2zPXojEaZ9nWb+22l4A6+7EHLtH/JPPoMAvi49G4Jqa58wpAMUxwIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFCwKaOR2BS0v0hWdRZp8TpZRSddtMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTEFwbzVIWUZMU19TRloxRm1ueE9sbEZKMTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBACj
BRYDBACjBR4DBACjBTsDBACjBUkwDAMEAKMFbwMEAaMFcAMEAaMFdgMEAKMFeQME
AaMFgAMEAaMFijAMAwQBowWOAwQAowWQAwQAowWSAwQAowWXAwQAowWeAwQAowWg
AwQAowWiAwQAowWnAwQAowWqAwQAowWtAwQAowWvAwQBowWyAwQAowW2AwQAowW9
AwQAowW/AwQBowXIMAwDBACjBcsDBACjBc4DBACjBdEDBACjBdQDBACjBdoDBACj
BeADBACjBeQwDAMEAKMF8QMEAKMF8gMEAKMF9zANBgkqhkiG9w0BAQsFAAOCAQEA
R+TXjkLjkYJX3tD92GD8v12qAoqcya4+YyG1WzwyQvaib05GXm4u462j5NHG/qrp
Yf4R8vUp6kBaK4dPQqXGHfCuqs7FVRkOqfO4XufKD9ypEGSIJDE21s+yAqhaACfU
ieHpOCmcuVoeSoz361lLGfn1x+VSYCEUDhQhUIoP0e/IZ3upD3/JdzGIfGy8QYNH
a+ltsH4mM9phbdja1DQQBS73LBCs1TAznJ1fG+/UWtPf805xxDtb3ikDttzORNuK
RteQIrPwYEKgriGd+SnMzIL8Un8SPLKJPDmAn3lpX8J/eHxNxnbGzZr9252j9bPP
A6LCcQf87kATqKz287JUZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:10:36 2025 by rpki-client