Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VNW-lmVHFoMptnCys0tk8l9M9_c.roa
File: VNW-lmVHFoMptnCys0tk8l9M9_c.roa (raw, json)
Hash identifier: fauJUQldyR539FIvykgW2UpLBakBxS7n9zN7STMbW5g=
Subject key identifier: 54:D5:BE:96:65:47:16:83:29:B6:70:B2:B3:4B:64:F2:5F:4C:F7:F7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193AB18649E4642246215F149C806736124
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VNW-lmVHFoMptnCys0tk8l9M9_c.roa
Signing time: Mon 09 Dec 2024 11:05:22 +0000
ROA not before: Mon 09 Dec 2024 11:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56339
IP address blocks: 163.5.0.0/24 maxlen: 24
163.5.2.0/24 maxlen: 24
163.5.3.0/24 maxlen: 24
163.5.5.0/24 maxlen: 24
163.5.10.0/24 maxlen: 24
163.5.11.0/24 maxlen: 24
163.5.20.0/24 maxlen: 24
163.5.21.0/24 maxlen: 24
163.5.23.0/24 maxlen: 24
163.5.24.0/24 maxlen: 24
163.5.42.0/24 maxlen: 24
163.5.43.0/24 maxlen: 24
163.5.45.0/24 maxlen: 24
163.5.48.0/24 maxlen: 24
163.5.50.0/24 maxlen: 24
163.5.52.0/24 maxlen: 24
163.5.55.0/24 maxlen: 24
163.5.57.0/24 maxlen: 24
163.5.68.0/24 maxlen: 24
163.5.69.0/24 maxlen: 24
163.5.80.0/24 maxlen: 24
163.5.81.0/24 maxlen: 24
163.5.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ab:18:64:9e:46:42:24:62:15:f1:49:c8:06:73:61:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 9 11:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54d5be966547168329b670b2b34b64f25f4cf7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:5b:b1:8c:1d:ac:b0:74:1c:73:8f:cd:79:
b1:2b:f4:dd:3f:63:f3:d2:00:a3:e6:bf:37:14:f9:
3d:00:fb:a1:da:23:62:0b:bb:f8:76:c8:b8:71:ca:
d8:a0:d4:40:c0:0a:68:29:a8:cb:3b:ce:b6:b9:ae:
b4:ea:1d:77:51:f8:55:ee:fd:07:be:00:dd:96:ea:
45:6c:99:d3:6b:e3:bf:7e:92:c1:a1:f5:78:23:f0:
32:0a:67:2a:e2:35:a6:38:45:48:ed:a5:c1:7d:11:
5b:ef:25:16:d4:ee:e7:2c:a8:b3:f2:99:65:51:f7:
00:fc:51:85:c8:67:eb:75:ba:13:3e:b8:4f:cf:5d:
84:75:87:9c:2c:5a:82:c2:67:1f:67:66:58:50:bd:
2d:31:92:11:60:56:9e:62:27:69:49:e8:46:a3:7c:
d2:29:20:50:9e:69:f7:0c:7a:a0:b3:a1:ef:75:7a:
04:be:b5:08:6b:01:35:f0:ed:bc:01:d5:2f:76:0b:
a0:94:69:f6:f1:5f:92:3f:17:e5:63:0e:ae:cd:77:
f9:b7:8a:60:85:7f:3c:4f:2c:5f:37:b5:91:0f:49:
5d:41:74:ba:31:f5:e3:25:1c:81:e0:9a:50:d5:9e:
4d:7e:23:94:c4:b8:b3:1d:1b:29:d5:af:ff:5d:49:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:BE:96:65:47:16:83:29:B6:70:B2:B3:4B:64:F2:5F:4C:F7:F7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VNW-lmVHFoMptnCys0tk8l9M9_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.0.0/24
163.5.2.0/23
163.5.5.0/24
163.5.10.0/23
163.5.20.0/23
163.5.23.0-163.5.24.255
163.5.42.0/23
163.5.45.0/24
163.5.48.0/24
163.5.50.0/24
163.5.52.0/24
163.5.55.0/24
163.5.57.0/24
163.5.68.0/23
163.5.80.0/23
163.5.85.0/24
Signature Algorithm: sha256WithRSAEncryption
01:86:f3:76:64:d8:c6:64:87:50:14:16:f5:9b:d6:91:0a:dd:
42:fa:c3:0c:f6:ce:c3:d0:d1:1c:ef:68:32:88:96:d1:3d:12:
51:79:82:35:9b:fa:73:a5:76:39:ca:10:64:e2:91:3d:75:6b:
3a:05:d0:04:fe:2b:05:d4:4b:26:7b:10:cf:7e:53:26:3b:28:
97:7d:67:35:11:08:de:d4:d1:f3:66:15:e5:f2:55:23:ee:6f:
18:e8:68:57:77:7b:7a:69:32:ca:62:69:5e:0a:46:35:b3:6c:
62:db:85:22:73:a8:0e:d9:7a:61:80:71:90:c1:7f:c4:27:68:
90:58:d8:12:b9:94:0d:9b:81:fe:49:cc:50:1c:2a:ba:d8:ce:
7f:a2:d7:17:19:d1:37:71:f5:05:ad:0e:bf:e1:0e:fe:d7:d0:
c5:a8:5c:df:b4:8b:ed:37:db:90:07:a6:c0:a4:97:51:a3:3e:
3e:16:87:86:7e:c3:ab:d9:f4:42:25:a4:20:60:c3:1e:2d:57:
cd:56:ad:c7:8d:e2:21:b2:fb:1b:f4:2f:a1:f4:4f:b4:dd:d7:
62:89:96:09:58:c5:f4:4e:fd:15:1d:76:1d:a8:de:0d:3e:3b:
a7:da:44:67:dd:db:7c:51:92:2b:32:88:6f:03:0a:89:2e:69:
74:57:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:35:35 2025 by rpki-client