Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/akMfBco1WWo8eVDRIw__6_lwcjU.roa
File: akMfBco1WWo8eVDRIw__6_lwcjU.roa (raw, json)
Hash identifier: MDKW06PUNqnwpC9qHZL9FyWRdJjUQtdMbOhYhL+Saw0=
Subject key identifier: 6A:43:1F:05:CA:35:59:6A:3C:79:50:D1:23:0F:FF:EB:F9:70:72:35
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01944C5B4C74AC36D99E3EAECC9CF6312259
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/akMfBco1WWo8eVDRIw__6_lwcjU.roa
Signing time: Thu 09 Jan 2025 18:37:19 +0000
ROA not before: Thu 09 Jan 2025 18:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.12.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:5b:4c:74:ac:36:d9:9e:3e:ae:cc:9c:f6:31:22:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 9 18:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a431f05ca35596a3c7950d1230fffebf9707235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:a6:4a:57:eb:59:bc:fd:aa:c3:d1:91:9e:
7f:02:5f:fd:64:d9:0c:32:00:ad:08:07:9c:bf:00:
d1:10:e2:34:9a:5b:48:0e:96:df:49:ca:6c:8f:cd:
dd:b7:9c:cc:97:1d:bd:c4:63:42:cb:2a:54:a0:d8:
a5:24:cf:01:3f:90:f7:d5:ff:d6:e2:28:96:f0:ba:
b9:b1:8e:ae:2a:c8:96:4d:8d:bf:96:3b:23:7c:64:
d0:14:02:14:6d:50:43:d9:fa:06:52:86:0a:eb:f6:
0f:48:4f:b4:12:18:53:57:82:bf:23:e4:5c:14:0a:
ce:31:10:71:1c:42:5d:bb:4c:60:d8:1b:ba:10:9c:
cc:73:dd:1c:56:d3:ee:5e:b8:fd:22:7c:a4:35:f7:
fb:2b:31:dd:62:28:8f:63:6a:fe:55:2e:9b:04:94:
84:32:83:a0:56:ec:02:21:b9:8c:53:a0:e2:7a:5d:
de:6e:6a:fd:bb:6b:36:06:ea:4d:cb:88:f1:f6:1e:
76:7e:1a:f3:9d:6a:a1:0f:01:82:49:50:0f:75:56:
50:ec:96:3e:03:25:d5:99:05:c2:82:d8:36:6c:35:
e1:c7:c1:6f:30:be:55:10:13:2a:ad:ab:20:09:eb:
d2:b4:0e:90:0e:00:b5:d9:12:b5:6d:1f:5f:77:98:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:1F:05:CA:35:59:6A:3C:79:50:D1:23:0F:FF:EB:F9:70:72:35
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/akMfBco1WWo8eVDRIw__6_lwcjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.12.0/24
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.212.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.231.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
82:19:ec:0f:8d:3c:85:8d:71:17:21:52:fb:7c:1c:ea:db:74:
3c:5c:02:18:f3:83:9d:c7:74:ea:50:4e:b9:b6:d1:ef:8f:b5:
aa:44:91:95:de:82:f6:ee:7f:69:1a:af:be:c1:8f:0b:f6:65:
67:39:ee:ec:47:29:78:12:e6:63:60:8a:5a:fb:1b:7b:6e:92:
4b:e2:ae:d4:4e:4f:80:93:63:42:2b:cb:24:4b:0a:10:fe:ab:
30:11:36:c3:65:a0:fa:48:66:f8:b7:40:27:d1:9c:25:96:d5:
4f:26:4e:53:77:07:8b:d1:78:dc:4a:3d:19:1d:c6:26:d4:f0:
77:c9:81:63:1b:8f:24:d7:ae:a9:65:68:38:38:32:f1:40:cf:
66:99:43:13:5e:4f:b1:1a:7f:ad:dc:10:f3:6e:16:c9:34:db:
61:4e:2c:8a:98:2b:f0:57:59:1d:52:5f:79:98:4b:b5:af:72:
1e:93:dd:71:6b:a4:3e:aa:f5:b0:ad:70:46:76:d7:9c:5a:ce:
a4:5b:f1:e0:2e:90:4b:96:ad:5f:e0:b1:c2:eb:97:9c:1f:25:
e8:ed:93:e3:1d:a2:32:9f:7d:ad:82:ad:b8:d3:fc:29:6c:11:
88:5b:fa:fa:d7:06:f0:fa:67:af:c3:cd:a8:a7:d8:a9:bd:da:
87:db:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:00 2025 by rpki-client