Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OmAutt3u96MYBX9FGs0rUmfdNgA.roa
File: OmAutt3u96MYBX9FGs0rUmfdNgA.roa (raw, json)
Hash identifier: BFN08OwW200MvihMvZmbAq8GkDZ0meV6hRbF8IZXDrc=
Subject key identifier: 3A:60:2E:B6:DD:EE:F7:A3:18:05:7F:45:1A:CD:2B:52:67:DD:36:00
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019376A080B31368F0A9793DFC097C67FC03
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OmAutt3u96MYBX9FGs0rUmfdNgA.roa
Signing time: Fri 29 Nov 2024 06:34:10 +0000
ROA not before: Fri 29 Nov 2024 06:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:a0:80:b3:13:68:f0:a9:79:3d:fc:09:7c:67:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 29 06:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a602eb6ddeef7a318057f451acd2b5267dd3600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:ea:32:b8:10:17:00:38:84:9a:93:51:c9:
5b:c8:e3:ea:22:30:fd:94:3f:61:7c:27:ea:c9:8f:
3f:84:fe:64:46:75:cf:e0:1b:c2:bb:e4:e9:a9:1c:
a2:b7:22:f2:3e:76:38:ae:69:3d:8c:8f:4a:a2:fe:
6c:1a:5b:76:cc:84:65:32:f9:1e:33:00:44:f1:c8:
54:86:2b:40:15:8b:97:fa:1a:72:34:30:83:1b:b9:
b9:7a:22:1e:a5:d3:64:d6:da:00:5f:3d:c5:8b:c2:
a0:c2:c5:ec:f5:9b:02:b3:8c:d2:c1:cc:c9:ba:54:
15:df:36:75:db:92:24:b1:e8:ec:8b:f9:bb:50:86:
84:8f:a0:a4:db:4b:78:13:4e:3b:07:f3:92:1a:5e:
3e:d1:8b:28:9a:bb:fa:c8:17:dd:67:aa:ec:ad:ee:
6f:e9:8b:75:21:cd:4c:fc:71:40:08:5a:88:36:ae:
3e:53:6b:eb:b5:41:ca:79:04:81:27:46:8d:7d:05:
48:af:bc:2c:9e:bc:17:0e:fc:21:c1:93:fd:92:d2:
b9:7c:23:09:bc:55:80:6e:63:44:8a:eb:c1:28:9f:
2e:a8:38:dc:ec:90:aa:e5:51:04:36:57:53:93:be:
a8:57:41:ff:f0:10:9d:20:96:8b:ab:59:32:4c:ea:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:60:2E:B6:DD:EE:F7:A3:18:05:7F:45:1A:CD:2B:52:67:DD:36:00
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OmAutt3u96MYBX9FGs0rUmfdNgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.157.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/23
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c6:91:7d:74:9e:5c:a7:b9:ea:2e:d0:f4:e9:ac:e6:1d:17:
05:ce:43:4e:3a:72:94:d0:47:2f:91:0e:50:c1:dc:17:8e:6b:
00:96:88:ef:30:c1:62:03:e2:af:fb:7e:af:f9:19:87:11:57:
8f:d7:aa:1f:56:1e:6c:ec:dc:16:b7:18:d6:e2:a6:dc:c0:4b:
e0:c8:55:ea:17:5e:0b:6d:f2:5d:16:50:df:19:dd:b6:97:9a:
18:fd:45:97:d5:47:07:cf:cd:cf:7a:53:74:71:9e:ac:f5:fc:
79:30:54:5c:71:c8:da:91:63:80:8f:f6:99:bf:de:1d:5c:61:
f0:5e:e0:a6:53:ae:96:71:b7:5d:9c:01:81:a1:b7:62:b4:01:
d2:7f:3c:5c:3f:6f:b8:3a:d7:66:82:54:2f:76:c7:f3:57:0c:
1b:16:db:83:63:cb:8f:81:af:01:93:33:70:17:22:55:54:05:
71:6d:bf:42:d5:92:af:52:6d:cc:dd:8b:f4:07:73:db:95:c9:
7d:47:26:f6:84:df:1c:86:72:e5:03:b5:d0:4b:a2:82:0a:d8:
c3:9e:82:ac:d0:7f:a6:1c:e0:64:20:a4:84:56:0d:a6:cb:2b:
9a:e4:37:06:96:a8:3b:bd:5a:83:33:58:14:70:12:08:bf:f3:
31:ef:f4:1d
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAZN2oICzE2jwqXk9/Al8Z/wDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMTI5MDYzNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTYwMmViNmRkZWVmN2EzMTgwNTdmNDUxYWNkMmI1MjY3ZGQzNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl3qMrgQFwA4hJqTUclbyOPqIjD9
lD9hfCfqyY8/hP5kRnXP4BvCu+TpqRyityLyPnY4rmk9jI9Kov5sGlt2zIRlMvke
MwBE8chUhitAFYuX+hpyNDCDG7m5eiIepdNk1toAXz3Fi8KgwsXs9ZsCs4zSwczJ
ulQV3zZ125Iksejsi/m7UIaEj6Ck20t4E047B/OSGl4+0Ysomrv6yBfdZ6rsre5v
6Yt1Ic1M/HFACFqINq4+U2vrtUHKeQSBJ0aNfQVIr7wsnrwXDvwhwZP9ktK5fCMJ
vFWAbmNEiuvBKJ8uqDjc7JCq5VEENldTk76oV0H/8BCdIJaLq1kyTOr2AwIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFDpgLrbd7vejGAV/RRrNK1Jn3TYAMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvT21BdXR0M3U5Nk1ZQlg5RkdzMHJVbWZkTmdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHVBggrBgEFBQcBBwEB/wSBxTCBwjCBvwQCAAEwgbgDBACj
BR4DBACjBTsDBACjBUkDBACjBVkDBACjBVwwDAMEAaMFbgMEAaMFcAMEAKMFeQME
AKMFfgMEAaMFgAMEAaMFigMEAKMFjwMEAKMFkgMEAKMFlwMEAKMFnQMEAKMFoAME
AKMFpwMEAKMFsgMEAKMFtgMEAaMFvAMEAKMFvwMEAaMFyDAMAwQAowXLAwQAowXO
AwQBowXaAwQAowXgAwQAowXkAwQAowXxAwQAowX6AwQAowX9MA0GCSqGSIb3DQEB
CwUAA4IBAQCZxpF9dJ5cp7nqLtD06azmHRcFzkNOOnKU0EcvkQ5QwdwXjmsAlojv
MMFiA+Kv+36v+RmHEVeP16ofVh5s7NwWtxjW4qbcwEvgyFXqF14LbfJdFlDfGd22
l5oY/UWX1UcHz83PelN0cZ6s9fx5MFRcccjakWOAj/aZv94dXGHwXuCmU66Wcbdd
nAGBobditAHSfzxcP2+4OtdmglQvdsfzVwwbFtuDY8uPga8BkzNwFyJVVAVxbb9C
1ZKvUm3M3Yv0B3Pblcl9Ryb2hN8chnLlA7XQS6KCCtjDnoKs0H+mHOBkIKSEVg2m
yyua5DcGlqg7vVqDM1gUcBIIv/Mx7/Qd
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:16 2025 by rpki-client