Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xYclL_ge9p9PeidhAftBDuAHEdE.roa
File: xYclL_ge9p9PeidhAftBDuAHEdE.roa (raw, json)
Hash identifier: 6cY4/8Q26S/JDkni8i/pAASNbPppL/IG6uPKfbsLQQY=
Subject key identifier: C5:87:25:2F:F8:1E:F6:9F:4F:7A:27:61:01:FB:41:0E:E0:07:11:D1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018FD44F256DA666C5EA6B64DAF6933CC3EB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xYclL_ge9p9PeidhAftBDuAHEdE.roa
Signing time: Sat 01 Jun 2024 14:58:27 +0000
ROA not before: Sat 01 Jun 2024 14:58:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.53.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d4:4f:25:6d:a6:66:c5:ea:6b:64:da:f6:93:3c:c3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 1 14:58:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c587252ff81ef69f4f7a276101fb410ee00711d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:30:5c:36:30:42:8f:45:d7:56:a5:5d:0e:
96:b7:d0:c3:1c:fa:61:bb:8f:67:37:ca:96:55:9f:
fc:89:91:87:33:5a:99:d3:3a:54:b8:ff:60:da:9a:
73:fa:86:2d:2d:20:5f:ea:fd:32:78:81:5d:e6:8e:
fc:f8:d3:b9:3a:75:ee:3b:52:f9:f6:26:9b:cc:38:
3a:30:6d:8f:b1:d5:23:8a:8e:e1:9e:ec:3e:f0:5c:
b5:a2:3b:35:c6:92:f1:12:b9:10:a4:e4:77:30:65:
13:33:2d:e0:b7:c5:84:60:e5:92:db:25:31:7b:91:
d7:e3:72:c7:9e:5b:06:f3:9f:49:3d:47:76:6b:c8:
3f:a1:87:96:c2:37:d5:77:a8:06:96:55:cd:e3:35:
04:d8:55:9f:6f:93:33:02:ec:af:46:b9:a9:0b:4d:
3a:8d:56:cd:7f:b3:c2:00:94:e5:ed:30:b8:23:1c:
fe:18:8a:98:d0:1c:e1:da:8b:2d:dc:38:b5:f8:c6:
01:49:2b:e7:40:7a:1e:70:ef:c6:bb:55:3e:e9:f8:
1b:33:7d:2e:5e:ee:58:80:af:a8:62:cc:e3:10:3f:
e6:12:73:83:b9:a2:6c:96:2c:fb:c5:1c:49:c8:d4:
4c:7d:dc:99:03:44:ad:7c:fb:26:2b:2f:a3:b9:32:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:87:25:2F:F8:1E:F6:9F:4F:7A:27:61:01:FB:41:0E:E0:07:11:D1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xYclL_ge9p9PeidhAftBDuAHEdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.53.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.124.0-163.5.126.255
163.5.128.0/23
163.5.136.0/24
163.5.139.0/24
163.5.141.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.185.0/24
163.5.188.0/23
163.5.191.0/24
163.5.199.0-163.5.201.255
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.244.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:32:be:5a:09:8e:37:36:5e:aa:7a:b8:e5:f3:6a:cd:0a:b7:
d4:fe:54:59:c7:63:27:10:26:0e:59:f3:2d:eb:5f:8d:e6:fd:
e4:d9:1d:76:4d:63:40:4e:c5:50:8b:ab:38:b2:e7:a9:82:a0:
37:bf:8f:93:89:08:aa:68:11:f6:c4:c1:a2:ac:14:ff:52:b9:
86:74:2d:01:99:89:81:d5:e5:29:f0:d1:20:a7:7f:d6:48:48:
cc:2e:d5:36:92:1f:bf:dc:3d:fc:04:fd:1b:87:40:c3:58:3d:
a0:da:73:1d:74:50:16:b7:c1:6b:a8:11:2c:67:1c:f1:b6:4b:
48:48:74:3b:b8:d3:2d:b4:e0:6c:54:c5:93:68:6b:d1:ea:66:
d4:fa:27:f8:64:4a:d8:66:24:0d:98:a5:15:44:74:cf:bb:4d:
c4:03:0a:0f:69:4d:5e:17:d9:f0:b3:34:71:74:37:56:e2:6f:
8f:a4:85:46:ac:b6:80:8f:da:b9:2f:9c:66:d5:20:1b:f8:0d:
62:0f:ee:4f:5e:c2:0a:8e:4c:8d:9a:bc:87:50:98:c7:8b:33:
36:a7:72:52:fa:ea:0d:4b:c0:2f:3a:5a:c8:62:c5:c0:e5:8a:
16:3e:ec:a2:7e:84:45:6e:44:8c:82:51:18:f2:a9:cd:58:14:
6e:66:22:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:47 2025 by rpki-client