Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d2IEAqpvkHPyBV7pNvpyQArbJ4g.roa
File: d2IEAqpvkHPyBV7pNvpyQArbJ4g.roa (raw, json)
Hash identifier: r7mLqsCS84OuA8FLBFLAssPaXpcLeFx9JCulZMLrEV0=
Subject key identifier: 77:62:04:02:AA:6F:90:73:F2:05:5E:E9:36:FA:72:40:0A:DB:27:88
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195661224E14A6DE03216E873201FB0E72E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d2IEAqpvkHPyBV7pNvpyQArbJ4g.roa
Signing time: Wed 05 Mar 2025 11:30:19 +0000
ROA not before: Wed 05 Mar 2025 11:30:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:12:24:e1:4a:6d:e0:32:16:e8:73:20:1f:b0:e7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 5 11:30:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77620402aa6f9073f2055ee936fa72400adb2788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:94:28:3e:dc:b7:d4:bd:1b:40:46:a9:99:
2c:fc:2a:c0:e2:92:a3:12:60:9c:df:9e:c6:7d:8a:
d7:f7:30:91:bb:4e:33:60:2d:47:25:47:6c:6e:f2:
68:dc:80:00:8a:84:84:e5:22:43:a1:70:c5:2e:5e:
32:86:2b:67:37:4e:a2:ac:2e:d3:4a:f7:ef:e4:29:
e4:d6:73:24:4f:bf:50:02:b4:99:4e:54:e3:a7:44:
d2:b6:6d:20:d0:cb:a8:a4:9d:87:cf:a8:f1:f0:a5:
70:69:1e:25:38:ae:65:93:f9:1a:77:0b:2d:2a:07:
33:1f:4d:1b:ee:72:ca:b3:52:7c:54:55:6f:a8:35:
49:fb:fd:7d:14:7d:72:04:6a:2f:a0:00:1f:f1:92:
72:04:25:d4:2b:f3:95:5a:ca:80:3e:a7:c9:bf:58:
d4:2e:2b:fa:2e:c8:2c:d6:09:04:5c:df:47:11:97:
3e:35:3e:a0:0e:dc:72:2b:53:a2:d5:5b:b1:2f:e2:
67:96:21:c6:7c:98:97:b1:6b:3a:d2:45:5c:c2:55:
a3:ec:56:79:b6:c8:8c:67:8d:b7:a5:b2:b0:3b:89:
b1:e1:9b:1b:5f:31:81:3a:b5:94:c5:22:2f:ee:99:
04:26:f7:49:27:2f:eb:56:bb:b4:61:d8:08:08:39:
22:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:04:02:AA:6F:90:73:F2:05:5E:E9:36:FA:72:40:0A:DB:27:88
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d2IEAqpvkHPyBV7pNvpyQArbJ4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.30.0/23
163.5.34.0/24
163.5.46.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.111.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.123.0/24
163.5.128.0/23
163.5.131.0/24
163.5.133.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.155.0-163.5.156.255
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.212.0/24
163.5.218.0/24
163.5.220.0/24
163.5.224.0/24
163.5.228.0/23
163.5.233.0/24
163.5.241.0-163.5.242.255
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cd:24:5f:3c:52:51:bd:05:1a:c1:f1:83:1b:39:fb:e6:48:
df:87:88:17:4d:ee:66:1d:30:cd:78:13:c5:26:6b:4a:29:db:
a0:e1:64:ac:ef:bc:70:0d:28:9b:cd:b1:94:ab:cd:f1:9f:3e:
df:48:13:8f:bf:1f:2c:d6:10:45:f2:f8:25:b4:96:d1:1c:be:
20:97:a7:98:2b:de:ad:2a:47:03:d8:1f:50:43:eb:79:4c:d0:
4c:67:98:3f:19:79:09:d8:3c:36:c6:38:fa:97:cd:b1:8a:53:
4a:2a:48:e0:c0:3c:a5:bd:a9:80:6c:7e:97:9f:d2:db:f3:88:
a0:ce:9e:25:17:7b:2c:d5:04:4c:a3:36:26:53:49:c9:b2:90:
4d:24:c7:47:98:cb:93:ad:0d:ad:a1:62:de:e3:02:8e:ed:db:
d7:5a:c3:d8:2d:1d:a7:bc:07:b7:0a:77:96:ac:30:06:13:26:
16:2a:99:63:54:f8:c2:a2:d4:04:f8:4e:a9:45:78:cf:0d:9d:
ee:b4:ec:af:dd:ab:97:57:e0:3b:22:c6:9d:8a:d4:1a:ba:25:
e2:6b:c5:dd:29:b2:74:c1:8d:dc:f7:60:74:12:ce:57:da:e5:
11:18:50:59:e0:4b:e8:00:1c:39:2c:3a:d2:d3:21:ed:6a:b4:
fd:3d:c1:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:39 2025 by rpki-client