Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N-8lbVDDUjLQVxzAXMOEJjarPQ8.roa
File: N-8lbVDDUjLQVxzAXMOEJjarPQ8.roa (raw, json)
Hash identifier: Wr9WaLs1ygifmYO0CgVC9DQXuBcAYzKzgXBuvm2QsDc=
Subject key identifier: 37:EF:25:6D:50:C3:52:32:D0:57:1C:C0:5C:C3:84:26:36:AB:3D:0F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195712F9AAF221EA1B35E4A6B2572078AEB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N-8lbVDDUjLQVxzAXMOEJjarPQ8.roa
Signing time: Fri 07 Mar 2025 15:18:19 +0000
ROA not before: Fri 07 Mar 2025 15:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:2f:9a:af:22:1e:a1:b3:5e:4a:6b:25:72:07:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 7 15:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37ef256d50c35232d0571cc05cc3842636ab3d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:b7:50:21:9f:36:39:10:75:f5:c8:d1:3d:
44:77:d9:b3:b9:15:05:99:d0:a7:a1:99:48:6d:bb:
fd:7e:0a:5e:96:e5:fb:24:20:93:1b:8d:0f:16:88:
2e:10:3c:c7:50:29:30:87:6e:16:a6:95:4f:59:70:
de:74:ff:8c:42:95:ae:23:68:b0:76:62:25:10:06:
bb:3e:50:fb:85:c2:12:ef:5d:d5:95:f9:a8:51:55:
6d:1c:09:27:8f:60:7f:c1:d1:91:39:eb:1a:e1:a6:
cb:a1:3c:bd:c4:60:dd:b9:19:80:b7:0f:78:03:52:
21:0e:23:ec:04:44:ec:4c:90:0b:1b:80:34:7e:91:
c5:16:96:1a:a2:a8:30:5f:07:d7:9e:da:d4:4d:7e:
7d:c8:74:95:00:23:71:4d:4f:37:ef:bc:1a:61:80:
5d:c4:0f:8d:b0:6f:5f:d1:c1:25:8e:07:1b:64:13:
d4:f8:a7:c8:89:66:af:6e:73:7d:3a:d2:e1:c3:78:
e8:a5:ad:70:20:b6:3b:4e:65:38:c5:17:61:16:7d:
2b:2e:6f:2b:08:73:33:7b:1b:10:23:af:44:8f:d6:
7e:9e:e1:cd:fc:57:6b:09:6c:cc:2c:02:c0:33:96:
8d:25:f1:3a:00:f5:f5:54:ae:ac:08:ff:b1:c5:4a:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EF:25:6D:50:C3:52:32:D0:57:1C:C0:5C:C3:84:26:36:AB:3D:0F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N-8lbVDDUjLQVxzAXMOEJjarPQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.30.0/23
163.5.34.0/24
163.5.46.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.111.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.123.0/24
163.5.128.0/23
163.5.131.0/24
163.5.133.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.155.0-163.5.156.255
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.212.0/24
163.5.216.0/24
163.5.218.0/24
163.5.221.0/24
163.5.224.0/24
163.5.228.0/23
163.5.233.0/24
163.5.241.0-163.5.242.255
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0b:d6:f7:e9:16:2c:a2:9d:16:c4:bb:34:b2:ea:63:3c:da:
84:5d:00:3f:72:ae:b2:dd:d4:e1:ee:69:bc:f7:5c:f7:c5:ed:
5c:0b:0c:6a:f9:41:8b:dd:64:09:17:d0:e8:bf:89:34:ee:27:
78:89:7f:dd:18:96:91:aa:43:a4:4b:fb:87:4c:46:9e:83:b9:
63:4f:39:d3:3e:92:34:72:82:b7:0e:f3:f7:e7:45:8f:09:6b:
4c:63:8e:66:7c:27:07:f6:62:b4:55:5c:fa:71:c1:6b:7e:61:
d3:5d:03:50:48:78:3b:c0:d7:51:3a:92:5b:ed:00:37:4b:08:
ae:35:48:75:2f:a7:fa:58:e3:be:dc:fc:6b:3f:5c:63:3b:a9:
92:5b:eb:55:c2:30:a4:18:36:81:88:08:38:2f:55:1e:50:84:
98:74:3f:10:97:f6:c6:c4:bf:bd:6d:b8:e9:85:3e:40:68:d8:
cd:2d:1d:f5:6c:23:16:ae:56:b7:0a:08:f9:07:42:db:7a:e8:
cf:a0:ea:e2:88:85:4d:ce:2f:d1:6f:82:ea:b0:95:cc:3a:0d:
16:7f:8c:71:7a:99:0c:ad:70:36:74:ea:fc:d3:b4:75:dd:3a:
82:7a:97:82:00:99:a5:12:3d:05:31:a9:36:e3:08:13:78:bb:
87:f8:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:38 2025 by rpki-client