Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ahnmCIZto3eZd-f7WzS4DQketfE.roa
File: ahnmCIZto3eZd-f7WzS4DQketfE.roa (raw, json)
Hash identifier: 2lHpC1NNZd9KQCFxR+m8qCnKp+v/xTs/vgeFJ/qt9I0=
Subject key identifier: 6A:19:E6:08:86:6D:A3:77:99:77:E7:FB:5B:34:B8:0D:09:1E:B5:F1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194410A912A045393F27E16FAAAF3F8C875
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ahnmCIZto3eZd-f7WzS4DQketfE.roa
Signing time: Tue 07 Jan 2025 13:53:19 +0000
ROA not before: Tue 07 Jan 2025 13:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.12.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:0a:91:2a:04:53:93:f2:7e:16:fa:aa:f3:f8:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 7 13:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a19e608866da3779977e7fb5b34b80d091eb5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:0d:77:aa:ec:64:34:4d:88:c1:f3:bb:64:
24:3a:9a:89:d8:0a:e8:e6:56:e4:4c:03:52:0d:a8:
55:ee:8e:68:03:6a:4a:ff:9d:e5:4c:b1:d3:50:51:
a3:3a:2c:40:e6:20:ad:07:c7:25:7f:de:1a:db:71:
55:06:b1:74:1f:b1:58:27:e2:0c:76:2c:29:18:90:
4b:a5:69:98:0a:f8:20:f2:dc:ac:ae:7e:9b:8a:56:
ea:d2:b3:6d:6a:2e:31:7f:9e:26:f9:62:41:8a:43:
44:6b:81:cf:a6:20:36:58:dd:2c:74:ad:c3:40:a7:
3b:f9:a7:1e:4b:77:d2:62:eb:27:c1:34:f5:f4:a7:
49:08:f3:2a:bf:c5:18:29:c6:88:5a:0e:e8:2c:73:
d1:20:33:ae:8a:19:04:8f:53:72:47:0e:08:be:34:
b4:65:83:79:e9:aa:9c:7d:e1:c5:41:4a:d5:1c:ff:
40:f1:89:23:20:17:d9:e9:bf:93:fc:c7:be:e3:e1:
ee:90:d2:7d:9a:04:c0:6a:4e:e8:51:19:1a:63:6d:
3d:67:5c:fe:5b:97:33:bc:ee:10:30:e5:54:0f:9d:
06:11:2e:bd:41:b6:1c:d4:dd:71:df:30:0c:20:90:
f1:6e:21:15:8f:a8:e2:75:0f:87:90:89:37:f5:0f:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:19:E6:08:86:6D:A3:77:99:77:E7:FB:5B:34:B8:0D:09:1E:B5:F1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ahnmCIZto3eZd-f7WzS4DQketfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.12.0/24
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.211.0-163.5.212.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.245.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
03:df:16:19:f9:09:46:e7:0a:9c:6c:dd:94:14:be:d9:de:c8:
f0:4e:08:77:bf:4e:91:15:49:2a:96:35:1c:23:1d:d8:27:ce:
3e:05:9f:22:b4:e6:b7:2a:82:b0:2e:be:25:48:d0:e4:63:cc:
9a:a2:a8:10:50:c1:75:bb:1b:e2:9d:bc:56:5e:f0:6a:47:18:
a2:01:d6:d2:25:ed:cb:b6:ba:50:ae:17:0d:e8:af:37:79:a0:
93:f3:0b:6e:6c:fe:5e:c4:c5:8f:d6:23:cb:25:99:d3:00:14:
8a:ef:1d:c0:f8:07:7a:af:dd:22:de:79:3c:04:48:70:19:21:
41:80:ef:b8:d9:3f:40:e6:6e:70:78:ee:43:c4:f1:db:d7:11:
70:6d:91:95:89:c8:cc:58:dd:00:bd:2b:03:df:06:38:de:7c:
02:fa:12:ef:5d:bb:d3:09:d8:5c:ca:5d:2b:a9:e7:e1:cf:d2:
8b:f1:73:1a:6e:07:86:e0:e8:39:58:ec:2e:75:eb:56:41:c4:
d4:8b:d5:40:6c:b4:2a:df:2e:b5:ea:98:b4:2c:87:e9:3f:0c:
97:1a:1e:32:2a:7c:5f:d1:3a:28:13:90:e2:94:f2:59:b9:01:
47:5d:85:2b:67:8b:cf:65:66:32:4a:c6:3f:a3:cf:ee:2f:df:
ba:b4:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:37:47 2025 by rpki-client