Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e8knK7ZkaQLoNMJbVmmFNfGJTBM.roa
File: e8knK7ZkaQLoNMJbVmmFNfGJTBM.roa (raw, json)
Hash identifier: dKw57Dhfsu/p+T8dqZYcMtzn0/28j8COZA4U2CxSKz4=
Subject key identifier: 7B:C9:27:2B:B6:64:69:02:E8:34:C2:5B:56:69:85:35:F1:89:4C:13
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01938D84CD0FABFC44689CB59CB0A05171F2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e8knK7ZkaQLoNMJbVmmFNfGJTBM.roa
Signing time: Tue 03 Dec 2024 17:15:10 +0000
ROA not before: Tue 03 Dec 2024 17:15:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:84:cd:0f:ab:fc:44:68:9c:b5:9c:b0:a0:51:71:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 3 17:15:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bc9272bb6646902e834c25b56698535f1894c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:a4:67:16:66:82:86:04:ff:e3:d3:33:d6:
a3:64:e0:c3:d1:27:97:e3:3e:27:7e:ff:c0:18:8b:
60:cc:67:ac:10:50:36:46:00:2f:57:f2:dd:b1:c9:
d3:ec:3b:1e:f4:cf:09:ce:b7:3d:f4:eb:c1:53:b3:
1b:ef:ac:b2:1b:8f:e2:75:64:89:d4:54:1e:d8:c9:
4b:53:54:97:26:cc:c0:9a:e2:c6:a2:7c:9b:cf:18:
30:f9:02:21:61:1f:f6:f4:a0:d2:7e:7f:58:d9:e1:
32:3d:dd:a4:56:6c:84:46:bc:e7:ad:0e:a0:39:6a:
ef:98:12:94:5a:28:a6:34:5f:9a:73:67:cd:5f:f0:
c8:14:57:fd:62:13:79:68:97:6d:3b:30:a4:7b:de:
f0:7e:6b:30:b2:78:8e:82:3b:0a:fe:6a:a4:27:5e:
f9:2e:d8:21:b3:d6:02:3a:a0:75:7f:fc:a4:50:4a:
fd:b7:30:b6:fe:bf:18:24:23:fa:38:65:6a:54:43:
04:06:60:cd:28:fc:31:42:e4:5e:1a:f5:ce:d5:de:
8a:06:f2:f7:9b:81:56:18:11:38:e4:31:47:86:21:
41:52:2f:23:45:6e:3b:ce:94:8d:6f:af:e1:01:a4:
8d:a8:0a:f4:3c:5b:7c:d0:dc:6b:3c:15:da:f4:ea:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:27:2B:B6:64:69:02:E8:34:C2:5B:56:69:85:35:F1:89:4C:13
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e8knK7ZkaQLoNMJbVmmFNfGJTBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/23
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.248.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
61:33:60:af:23:37:c0:81:24:35:f6:b1:b0:fe:b0:86:e7:ae:
17:86:14:20:ef:74:02:77:a9:68:10:1f:ce:61:77:f4:4b:44:
a7:08:df:0b:6e:f7:06:e9:56:1f:f2:fe:ed:41:9d:6e:b8:0e:
42:62:bb:9c:a9:85:88:63:16:fd:5e:5a:e9:39:ce:36:9a:02:
62:0f:40:43:65:eb:11:bd:84:65:e9:d7:cb:77:76:bb:e4:45:
03:de:08:d2:65:36:97:38:b4:55:3f:94:09:91:a8:42:a4:d3:
fd:81:81:90:a5:2c:7c:60:06:ce:6f:f8:44:bf:d7:55:95:83:
97:98:06:00:db:d7:2c:73:8a:be:15:34:ce:67:60:5b:6f:51:
6b:10:74:e9:08:e0:d4:91:8b:84:9f:db:f3:0d:24:b3:33:3e:
ec:53:54:dd:17:7a:31:30:03:18:c8:d1:c2:d3:db:30:b9:7b:
69:c2:55:36:f8:9a:d7:64:c4:77:bb:7b:cb:16:c9:0c:df:03:
38:97:aa:45:c6:8a:4e:57:e9:51:a5:59:cd:70:11:c7:19:28:
6a:06:39:b4:c6:fe:fe:1a:38:b1:dc:37:2a:36:ec:27:44:f4:
15:99:4b:03:e4:3f:b8:61:de:95:8e:c2:bc:80:1c:f3:35:f3:
fb:72:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:32 2025 by rpki-client