Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/A6OLMyzrFWFCTJ88DzElbMIiC84.roa
File: A6OLMyzrFWFCTJ88DzElbMIiC84.roa (raw, json)
Hash identifier: 9PpSU0ioM0Gmg/zi3XvQTtmgkXVBAc9tjzXzV8Kcseo=
Subject key identifier: 03:A3:8B:33:2C:EB:15:61:42:4C:9F:3C:0F:31:25:6C:C2:22:0B:CE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0197E916B5545812E07396EE128D79F1A0D6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/A6OLMyzrFWFCTJ88DzElbMIiC84.roa
Signing time: Tue 08 Jul 2025 08:11:08 +0000
ROA not before: Tue 08 Jul 2025 08:11:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35916
IP address blocks: 163.5.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:16:b5:54:58:12:e0:73:96:ee:12:8d:79:f1:a0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 8 08:11:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03a38b332ceb1561424c9f3c0f31256cc2220bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:fb:41:75:86:e8:f6:b4:ef:b3:65:e1:21:
0c:00:0d:e2:02:5b:8a:63:5f:0c:28:d7:21:7a:04:
eb:68:43:0c:a5:ad:09:2a:cb:86:5b:85:23:e2:cb:
b2:2f:54:fd:27:e4:d6:b1:a3:d1:dd:76:b0:53:20:
7c:74:94:59:30:0f:81:cf:0d:ea:f0:04:0c:ec:0c:
cf:a2:7e:c8:d3:5e:10:2e:19:1e:3d:eb:47:04:d3:
07:49:ce:25:d4:59:fb:86:e7:50:9c:2c:67:2f:2f:
3e:9a:93:03:e6:54:67:9a:de:51:f0:ae:9b:97:fd:
91:40:d1:d3:8a:28:d7:43:bf:f2:86:78:aa:16:53:
1a:c6:e0:a3:9b:9f:63:e4:75:f0:4f:a8:7b:7f:54:
f4:d8:82:4b:e7:f9:4a:31:29:de:d7:47:58:07:3c:
53:be:66:85:5b:72:c6:d9:be:22:e2:8a:7b:15:0f:
89:64:b1:96:6a:eb:04:24:52:94:a8:76:7f:c2:c0:
70:bc:da:bb:ac:a4:97:f0:ee:b3:a2:6c:70:a3:be:
de:0b:10:8d:b9:34:64:34:39:f5:da:e7:69:e0:85:
ea:7c:1e:40:0a:a5:34:65:62:30:3e:93:19:b4:ff:
31:67:22:97:96:c6:09:0d:ca:e5:e0:30:b8:7e:30:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:8B:33:2C:EB:15:61:42:4C:9F:3C:0F:31:25:6C:C2:22:0B:CE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/A6OLMyzrFWFCTJ88DzElbMIiC84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:46:f6:7a:38:7d:28:10:bd:8d:8d:26:83:3f:9c:16:e1:40:
e9:8a:f4:dd:d3:91:25:81:0f:e5:7b:dc:d0:4a:52:52:66:fd:
b9:d1:26:59:35:d2:d9:34:f6:b4:ce:ab:f8:78:23:7f:87:66:
85:df:6b:67:4d:1f:96:a7:be:fa:76:94:3d:df:df:55:f6:23:
1e:81:43:77:5d:0a:da:32:f9:97:b4:85:94:93:7b:2a:8a:df:
e0:10:e5:7f:95:7f:78:7f:3d:f0:87:58:09:0c:f6:23:af:c0:
66:09:7b:a9:eb:a8:ca:49:40:15:92:c7:83:55:e0:64:5c:02:
a8:34:c0:2b:2b:6a:98:7b:ab:75:38:75:57:ea:52:4d:ca:15:
27:0c:37:01:40:00:98:d9:5e:1d:d7:77:e4:50:c7:6f:3c:73:
d2:61:55:a8:2e:34:ea:21:9c:e0:9a:84:bd:62:92:7f:e7:e9:
97:cb:eb:cf:f7:20:e8:e3:f4:68:1a:15:cd:ee:4b:14:dd:64:
bf:dc:c6:79:70:b1:7c:64:db:5d:c2:46:38:b4:37:bd:f6:26:
44:40:16:96:6b:6c:49:fe:c2:df:49:7f:26:84:82:4d:81:fb:
23:e9:f4:af:ad:7f:8c:75:2c:e6:86:07:8c:cb:3b:cc:f1:97:
00:8e:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 00:17:55 2025 by rpki-client