Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bMkOei4cpmJUsbnIMc-UoWcS1fk.roa
File: bMkOei4cpmJUsbnIMc-UoWcS1fk.roa (raw, json)
Hash identifier: wvKeFvsrVTUUBaXbN8Y6B25bx+h7jMZ7pCq8c/hWAQo=
Subject key identifier: 6C:C9:0E:7A:2E:1C:A6:62:54:B1:B9:C8:31:CF:94:A1:67:12:D5:F9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194183B7C385F89282E9A2AFA0D4BEB6666
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bMkOei4cpmJUsbnIMc-UoWcS1fk.roa
Signing time: Mon 30 Dec 2024 15:42:18 +0000
ROA not before: Mon 30 Dec 2024 15:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:3b:7c:38:5f:89:28:2e:9a:2a:fa:0d:4b:eb:66:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 30 15:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cc90e7a2e1ca66254b1b9c831cf94a16712d5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:f7:92:2b:2b:e9:c4:e2:b0:b5:a7:0f:27:
7e:46:3f:c9:54:c9:e2:13:6d:29:d5:16:04:ec:96:
33:b8:1e:8f:05:b9:34:79:8d:13:52:49:3e:4e:94:
ea:ce:5f:c9:c6:85:1c:21:b7:ee:ee:c3:ce:2e:17:
4f:10:c8:4e:4c:63:12:47:e0:fc:00:28:e3:06:0c:
cd:05:52:17:ef:f4:38:7c:1f:e1:7a:69:bf:cd:e4:
b5:48:33:2b:b5:c7:b0:6b:09:e9:55:d9:d1:2a:d9:
b5:95:b5:fb:c7:c7:c1:cc:c4:ba:22:2b:dd:0b:be:
36:d9:2a:de:30:4e:40:32:ea:25:63:2b:44:bc:0f:
f8:01:10:4d:a5:96:3e:0c:12:e7:0a:4c:f1:b8:36:
a7:9b:c8:3b:ee:5b:de:be:fa:33:48:65:bc:fa:d5:
43:20:ce:42:db:08:b6:1a:99:1e:cf:0f:25:cb:f1:
8f:7f:81:54:a2:b5:b1:97:88:81:5c:b2:5d:72:5f:
e6:75:b2:e8:86:00:89:62:c6:31:82:02:f8:26:fc:
a7:eb:c3:7a:15:1c:e9:d5:87:e6:51:87:0f:73:52:
be:73:19:70:90:c6:da:98:82:0c:11:26:b1:1f:e9:
94:41:55:e3:ee:55:0f:24:f0:87:41:56:da:2e:08:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:0E:7A:2E:1C:A6:62:54:B1:B9:C8:31:CF:94:A1:67:12:D5:F9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bMkOei4cpmJUsbnIMc-UoWcS1fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.34.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.211.0-163.5.212.255
163.5.218.0/24
163.5.221.0/24
163.5.224.0/24
163.5.228.0/24
163.5.237.0/24
163.5.241.0/24
163.5.245.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5b:c5:06:64:9b:25:73:6d:5a:ab:1c:3f:8b:4f:1f:38:78:
c1:3b:f7:13:98:15:f8:8a:2e:8d:1e:e6:8d:bf:52:96:14:31:
ed:09:33:55:0a:fc:65:7b:99:71:b6:94:59:d6:4f:cd:15:15:
24:cc:ba:d6:22:33:a2:82:2d:4f:30:aa:31:48:32:c4:91:89:
7f:54:a7:4a:ca:54:28:27:18:7f:8c:ad:94:f6:f0:a8:e1:dc:
ba:8b:3a:e6:a9:21:38:6d:1a:80:7d:74:ce:9e:94:0b:f0:a9:
06:c0:e6:2a:c7:3c:48:fe:a7:c9:37:a2:e5:25:5e:ac:67:5f:
73:39:b8:39:df:6b:ac:2c:23:ad:51:40:7b:66:59:44:e7:51:
16:d5:40:a8:17:9b:b2:45:a5:3e:de:8c:87:4c:c1:e4:b6:c5:
7e:be:7f:ee:16:9a:92:b2:b8:2b:ee:dc:99:27:c6:a7:3c:02:
c1:48:08:34:34:5c:6e:03:3b:ca:b9:4b:bb:2c:93:cc:4e:2c:
7e:d4:5e:2d:8f:2d:eb:42:1c:7b:d8:9d:fb:1a:c3:18:e8:11:
26:8b:48:ad:c1:84:15:3a:ba:78:f5:ab:ba:5f:1b:7f:73:5e:
db:af:e8:53:0f:25:87:7c:89:75:05:48:30:c8:a1:5f:87:80:
a9:e9:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:34:23 2025 by rpki-client