Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eRfed9OnBJa8ZxdDH42ETNVzeeE.roa
File: eRfed9OnBJa8ZxdDH42ETNVzeeE.roa (raw, json)
Hash identifier: IL52R4rOjGAFRlYn3on3tZbXyvTuf17V8wd7abZ07OE=
Subject key identifier: 79:17:DE:77:D3:A7:04:96:BC:67:17:43:1F:8D:84:4C:D5:73:79:E1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195231E92812A89167D99AEBEA3B8DD80D9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eRfed9OnBJa8ZxdDH42ETNVzeeE.roa
Signing time: Thu 20 Feb 2025 11:29:20 +0000
ROA not before: Thu 20 Feb 2025 11:29:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:1e:92:81:2a:89:16:7d:99:ae:be:a3:b8:dd:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 20 11:29:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7917de77d3a70496bc6717431f8d844cd57379e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:1f:f6:43:60:75:e4:33:ba:c3:02:f4:aa:
16:12:25:6d:f6:5b:b8:7c:26:86:c8:c9:d8:7c:92:
1f:06:3d:da:3d:72:04:51:3e:99:98:70:87:7f:00:
3a:ed:37:a8:d7:49:a6:39:41:22:74:ef:2b:22:86:
4e:f8:16:75:b6:1a:f7:b4:6c:ef:f7:48:f8:20:3f:
0e:67:a2:24:6c:ab:f5:a3:c7:f3:e9:7e:1a:ce:5a:
f0:96:cf:98:c8:c9:51:34:32:04:b5:1e:19:9a:f2:
ad:ca:74:50:be:65:02:a4:48:53:c2:65:a5:a5:f5:
68:bd:a3:64:77:fa:04:ad:43:36:27:fe:07:53:77:
77:95:09:91:49:61:b1:15:1a:60:e9:d6:82:c1:9f:
bf:86:c7:eb:94:65:03:2b:41:aa:04:1e:31:7a:e6:
81:5d:51:cd:73:62:d8:66:83:66:d6:5f:e6:01:cd:
31:ee:5d:19:c2:61:01:f7:9c:e9:32:9e:32:fa:71:
4a:12:07:7c:93:fe:3c:dc:75:82:b9:0f:f6:21:32:
31:7d:c6:b4:cb:00:2d:a1:14:20:b0:c5:45:70:2d:
3c:ab:73:24:75:6e:7b:8e:d0:1c:20:bc:67:a7:92:
5e:d2:ef:ee:b4:0a:cf:d3:d6:4f:d1:98:fa:f7:a0:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:17:DE:77:D3:A7:04:96:BC:67:17:43:1F:8D:84:4C:D5:73:79:E1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eRfed9OnBJa8ZxdDH42ETNVzeeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.30.0/23
163.5.34.0/24
163.5.46.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.111.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.131.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.155.0-163.5.156.255
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.212.0/24
163.5.218.0/24
163.5.220.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0-163.5.242.255
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f7:60:ff:f8:8e:4f:bf:1e:57:6d:b2:4e:0a:27:82:f8:03:
5e:07:df:85:29:c3:64:fe:bd:d2:f1:79:f9:02:4d:ed:c6:b8:
a7:92:58:1a:24:c4:e6:b9:a9:24:fe:06:51:00:c8:34:88:43:
af:b4:19:dd:aa:f8:0a:79:06:a1:30:db:83:1b:22:27:d6:fa:
74:61:9c:d8:1b:e7:1d:86:2e:b5:db:5c:dd:01:32:4c:f7:93:
c5:27:db:fd:b4:49:b8:3f:f1:6a:4d:a0:69:d2:e4:bb:7e:71:
f6:0b:7c:81:c0:d0:f0:c3:ba:54:f6:31:ca:90:78:34:73:1e:
28:b8:06:5e:f1:39:ff:cb:17:d0:c0:46:88:55:1b:40:84:3a:
ae:c5:ee:55:80:a1:47:fa:8d:8e:77:5b:e8:e8:19:be:62:3e:
f2:e3:a2:ea:1d:b5:9d:18:8a:ab:4e:f7:0e:f3:ce:ca:2b:6c:
05:49:e8:e4:3a:04:a9:6b:5e:aa:47:c8:d8:01:7b:cd:db:31:
5c:c3:ba:a5:78:a6:10:10:c1:1e:29:de:0b:d7:b4:be:24:ad:
ff:df:48:e9:47:3e:73:a8:d9:04:13:96:e2:0f:7a:b6:b0:61:
b6:51:f0:06:31:d9:80:b6:36:be:48:5e:dc:84:a4:86:34:ab:
6e:06:cc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:22 2025 by rpki-client