Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pOIr2cDem88P_duCCb-JliCvqLY.roa
File: pOIr2cDem88P_duCCb-JliCvqLY.roa (raw, json)
Hash identifier: n5xSjBtp5DsL4zq6m8lxXs8RAeKr5SJ+Z95Q7hXVD0k=
Subject key identifier: A4:E2:2B:D9:C0:DE:9B:CF:0F:FD:DB:82:09:BF:89:96:20:AF:A8:B6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01890B9A726C420AA6E926FEAF9E8064DB75
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pOIr2cDem88P_duCCb-JliCvqLY.roa
Signing time: Fri 30 Jun 2023 09:20:18 +0000
ROA not before: Fri 30 Jun 2023 09:20:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:9a:72:6c:42:0a:a6:e9:26:fe:af:9e:80:64:db:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 30 09:20:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4e22bd9c0de9bcf0ffddb8209bf899620afa8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:23:6b:42:de:c5:25:a7:5a:4b:d2:6f:7e:
2c:09:43:38:d5:2a:96:ff:d0:31:a4:93:a9:63:84:
5f:03:1a:c7:16:56:25:5d:c9:1f:1a:0d:70:ec:52:
d4:42:db:4c:a9:fe:e1:25:de:14:80:ec:4c:70:d0:
87:71:e5:bb:52:61:b6:b7:36:8f:2a:27:5a:d6:5d:
a0:f8:75:c8:b9:62:4b:8d:19:52:07:20:7d:bb:8f:
a2:f6:be:dd:16:9d:38:22:31:a4:67:f6:19:79:83:
29:1b:e1:76:dd:4c:f6:c9:1c:17:c8:a5:7a:cd:97:
31:3c:3c:a2:b0:d5:56:1f:50:0b:e4:bb:90:9b:8f:
46:a2:2a:0d:60:54:d6:55:42:99:fb:cd:19:f5:18:
55:82:ad:00:72:d6:85:13:b7:68:b6:f7:ad:26:81:
57:e5:46:95:3b:a6:d6:29:c3:98:8f:4b:81:d7:49:
aa:03:4a:b9:92:f6:2f:12:be:a3:63:bb:ae:2c:43:
63:cf:fa:42:65:b6:a3:85:6d:49:f5:7c:7b:6c:e7:
3f:a8:95:c7:bf:da:17:eb:af:02:de:80:49:c5:d6:
76:db:72:95:c3:98:b0:3b:99:ba:61:ef:41:49:4e:
b5:fd:30:a7:fc:3c:18:0f:34:da:29:36:7b:77:80:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:2B:D9:C0:DE:9B:CF:0F:FD:DB:82:09:BF:89:96:20:AF:A8:B6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pOIr2cDem88P_duCCb-JliCvqLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.61.0-163.5.62.255
163.5.86.0/23
163.5.99.0/24
163.5.127.0/24
163.5.130.0/24
163.5.136.0/24
163.5.138.0/24
163.5.161.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0/24
163.5.223.0/24
163.5.226.0/24
163.5.230.0/24
163.5.248.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:38:cf:50:e8:ab:46:97:09:e2:38:99:d9:f4:5e:94:6d:19:
77:aa:c1:97:23:3a:a6:34:03:06:de:fd:a1:85:65:cc:e0:62:
8f:07:8d:8a:5b:64:cc:47:53:62:dc:37:40:03:df:ef:31:e4:
0b:5c:a7:7c:16:df:fb:13:1e:ad:cb:9e:33:63:57:65:c4:c6:
39:09:9c:4d:15:b4:5e:05:d3:b2:5f:6a:9e:e2:c6:07:c2:3d:
bc:1a:10:8e:23:59:19:88:ac:bd:55:bf:66:80:ee:78:1c:f1:
09:29:24:9b:a9:b3:61:25:2b:ae:95:96:c6:4c:c3:e6:17:ba:
4c:cd:e0:e9:ce:73:18:32:a8:97:24:bb:d1:2e:fd:3c:d1:84:
8a:b8:e0:a0:a7:16:c2:e2:03:a9:b6:e2:17:2c:f5:21:d3:9c:
5a:e0:27:c7:5b:1b:37:9e:bb:27:6d:e4:eb:5f:09:dd:94:45:
27:f5:0d:11:85:fb:9e:7e:4e:af:4d:ec:d5:d6:0a:27:ca:6b:
82:e3:d0:b1:3d:9b:7b:ae:9a:22:0a:3a:92:33:ae:72:f7:f2:
67:95:4f:c7:3c:1a:f5:09:4d:df:97:fd:c1:72:b7:1f:e5:53:
9f:5f:1d:82:61:db:c6:f2:44:7a:37:2f:88:b7:a9:9a:09:60:
e3:b3:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:24:07 2025 by rpki-client