Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gwnpeMYF_T7saqGznKFrzfRLAiY.roa
File: gwnpeMYF_T7saqGznKFrzfRLAiY.roa (raw, json)
Hash identifier: wxiCUyNFZOsXxrc40DgxJzOJ+ZgLmaS7hz9EaVeX0lc=
Subject key identifier: 83:09:E9:78:C6:05:FD:3E:EC:6A:A1:B3:9C:A1:6B:CD:F4:4B:02:26
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01936CA2BD851CB87BF2967EA2EC13EA63AB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gwnpeMYF_T7saqGznKFrzfRLAiY.roa
Signing time: Wed 27 Nov 2024 08:00:24 +0000
ROA not before: Wed 27 Nov 2024 08:00:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.7.0/24 maxlen: 24
163.5.8.0/24 maxlen: 24
163.5.9.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:a2:bd:85:1c:b8:7b:f2:96:7e:a2:ec:13:ea:63:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 27 08:00:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8309e978c605fd3eec6aa1b39ca16bcdf44b0226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:00:ef:34:33:d2:89:2b:d4:3e:3c:8c:5e:
df:88:3a:5c:a5:b3:c3:e4:83:b6:eb:b2:5d:7a:99:
51:61:ed:38:9a:4b:83:f6:a1:51:70:77:8c:3e:fa:
f3:a0:10:20:45:80:b3:d5:e9:48:11:49:93:8f:99:
6e:be:50:e0:51:f5:df:35:2c:fa:01:b1:53:ba:ed:
61:71:87:87:f1:b5:69:2d:a8:ea:06:72:fc:20:f4:
d6:ad:e0:12:38:37:8e:b0:93:22:76:ae:dc:c3:7c:
d3:3e:3e:c4:cd:99:62:62:7a:2f:dd:4d:2d:ba:1b:
64:25:ab:2f:77:a2:b7:ae:23:d8:1e:8b:5c:98:e4:
37:3b:22:9c:f5:e4:54:db:9c:20:d9:e9:83:32:50:
d3:79:71:d2:1e:70:5a:b2:14:e4:62:22:b4:87:4d:
a5:6a:09:46:ca:df:03:55:bf:78:ca:63:2f:2d:0b:
ed:ec:2a:4b:5e:b3:13:d1:0c:bd:d9:4a:c9:34:35:
01:06:96:75:5e:00:ef:a5:96:97:27:66:89:57:7e:
33:a6:a7:45:21:6f:4e:08:f4:f5:b4:31:9a:c2:a4:
87:43:df:d8:9c:94:c1:d8:0a:50:a5:ce:d8:03:d5:
77:7a:c4:3b:c4:c2:1a:67:1d:ec:c5:21:35:20:05:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:E9:78:C6:05:FD:3E:EC:6A:A1:B3:9C:A1:6B:CD:F4:4B:02:26
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gwnpeMYF_T7saqGznKFrzfRLAiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.7.0-163.5.9.255
163.5.13.0/24
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.157.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/23
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4d:5a:06:21:4f:d7:0e:9a:bf:d4:65:2b:bf:27:7f:6b:48:
c0:de:8f:2b:09:79:c7:99:04:fa:4b:3e:6c:a0:b3:bc:ed:7b:
ac:97:9f:d8:28:d7:ca:35:7b:48:d2:7a:1c:8d:62:d7:ee:f5:
0a:d1:bc:1e:f9:34:6b:5a:08:4d:ac:38:8d:ea:4d:d5:28:26:
0c:47:8b:fc:46:a8:2b:bf:34:78:9c:56:b7:f0:75:ec:4e:c4:
e5:be:be:62:9a:3f:f4:38:28:43:9d:65:bf:17:45:ee:17:eb:
1f:b5:00:10:ca:74:ad:24:db:a4:e2:18:cd:de:18:8b:70:e1:
53:a8:f0:61:8d:af:82:65:e1:bf:c2:e1:f2:df:5c:ba:c3:2e:
28:45:66:69:50:a3:a7:74:0c:0b:9a:b4:be:55:e7:97:67:1c:
a2:09:56:4b:54:26:44:92:0c:03:e1:e9:d0:ae:14:3a:6b:39:
b0:32:3f:bd:77:d1:46:d9:64:aa:51:fc:04:75:26:eb:1b:35:
56:15:44:1c:2b:d9:17:fb:87:6f:e1:0a:0c:12:7d:91:0d:4c:
8d:5a:6d:79:3e:13:e2:82:45:5c:f6:bb:7b:43:99:fa:d2:e2:
30:07:52:6b:22:f8:65:81:be:7c:64:04:00:aa:9e:54:f3:27:
7d:01:12:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:14 2025 by rpki-client