Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jzjxTAZdtl7w02lNKwI4CCT10jg.roa
File: jzjxTAZdtl7w02lNKwI4CCT10jg.roa (raw, json)
Hash identifier: Z+b1RMhcA/3CpX99nFvo60qBxjTs1PmTXO+BCXVUfXM=
Subject key identifier: 8F:38:F1:4C:06:5D:B6:5E:F0:D3:69:4D:2B:02:38:08:24:F5:D2:38
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194DB0F6523382301635CB6B90D74C5376F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jzjxTAZdtl7w02lNKwI4CCT10jg.roa
Signing time: Thu 06 Feb 2025 11:40:06 +0000
ROA not before: Thu 06 Feb 2025 11:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.14.0/24 maxlen: 24
163.5.22.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:0f:65:23:38:23:01:63:5c:b6:b9:0d:74:c5:37:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 6 11:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f38f14c065db65ef0d3694d2b02380824f5d238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:c0:39:41:6b:44:03:d4:7d:ec:a1:19:ae:
2b:c3:14:62:9b:2e:78:e6:65:32:40:be:7e:68:e9:
09:27:66:fd:24:e3:d3:d5:e5:c8:36:d2:41:ae:8c:
6e:7d:ea:81:3a:06:8e:aa:e3:5f:ed:96:99:a8:19:
07:47:49:8b:b2:70:25:0c:3e:7d:11:e1:1f:1d:d7:
21:a7:e0:48:ad:ea:d8:75:2d:3f:a2:4a:3d:b7:00:
79:2f:7e:ef:5f:aa:76:7a:91:0e:71:fe:bf:de:01:
12:da:76:21:11:36:0a:26:c1:ad:91:93:8d:53:37:
dc:ae:f6:22:a4:c5:d3:e2:c1:df:d9:72:e8:f6:85:
f3:42:bf:d9:c0:53:c6:55:8a:04:e3:64:d0:08:50:
cf:ab:b6:a3:a4:95:9c:0d:e3:81:72:07:88:dc:c0:
ec:c3:63:d3:b5:c1:10:e0:a5:b0:a1:8c:05:0c:a8:
56:14:1b:e0:50:4a:31:3b:14:fe:3e:4c:57:91:5d:
f6:5a:2a:1b:24:89:b3:7b:74:09:88:77:4b:40:8f:
33:d3:92:7e:4d:29:a1:da:82:3e:c7:62:dd:63:4b:
ee:4c:02:3e:c1:52:c1:17:99:76:a6:71:ab:54:dd:
9f:16:d5:44:5d:73:22:92:c0:7a:41:27:87:ca:76:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:F1:4C:06:5D:B6:5E:F0:D3:69:4D:2B:02:38:08:24:F5:D2:38
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jzjxTAZdtl7w02lNKwI4CCT10jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.14.0/24
163.5.22.0/24
163.5.30.0/23
163.5.34.0/24
163.5.46.0/24
163.5.59.0/24
163.5.73.0/24
163.5.111.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.212.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0-163.5.242.255
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:88:5d:20:00:1f:68:46:77:37:f9:c4:c7:2e:9d:e1:ad:df:
3d:2f:f9:83:43:a3:fc:45:a3:91:b7:2a:82:a7:e3:4c:1b:7c:
5b:aa:e3:19:da:fd:db:af:4e:a3:58:64:37:fb:32:cd:49:38:
8b:2e:e7:c4:fe:0c:7e:40:a3:79:1d:7c:73:45:81:6b:8c:61:
17:8b:7c:c0:cf:b0:29:4a:6e:32:dd:68:91:7c:d0:ba:47:05:
12:9e:e1:1a:b5:0c:87:65:15:ba:59:2b:d7:fc:45:7e:23:fa:
a1:91:6d:1e:26:5d:8c:e2:b7:c7:e2:c2:19:67:1e:c9:b6:40:
e7:3a:a3:bc:88:f5:85:1e:e5:44:c4:41:8a:b1:96:cf:2d:a2:
e2:1a:88:c1:2b:27:1c:66:91:fa:a2:11:58:83:e8:ba:3a:bc:
f7:df:7e:38:95:3c:27:d2:fd:e4:5b:5a:55:b9:98:bd:de:91:
b5:ca:04:20:c4:90:34:ad:30:e4:f8:07:05:bf:62:68:e8:a5:
e5:30:dc:f3:9a:25:77:c3:72:b1:3e:15:a2:a5:8f:d5:35:51:
fe:fb:7d:27:d4:9e:74:32:35:ab:12:f1:9a:ce:c4:c4:32:ba:
19:da:06:d1:c1:04:4c:b4:7e:f7:af:69:36:c3:bf:ef:1e:2a:
52:99:cb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:56 2025 by rpki-client