Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LJv5Saz5Jt4PuobaeDNA-tb97V8.roa
File: LJv5Saz5Jt4PuobaeDNA-tb97V8.roa (raw, json)
Hash identifier: fpGDzgDWA6MnpikKAMQjQBTkI/+1LxBZR2sly/kQgrE=
Subject key identifier: 2C:9B:F9:49:AC:F9:26:DE:0F:BA:86:DA:78:33:40:FA:D6:FD:ED:5F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019808E2AB3950ACCE0312C7674C4D529A74
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LJv5Saz5Jt4PuobaeDNA-tb97V8.roa
Signing time: Mon 14 Jul 2025 12:22:09 +0000
ROA not before: Mon 14 Jul 2025 12:22:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 163.5.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:e2:ab:39:50:ac:ce:03:12:c7:67:4c:4d:52:9a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 14 12:22:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c9bf949acf926de0fba86da783340fad6fded5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7b:61:a3:2b:98:f5:06:b1:fc:1c:54:ac:03:
d8:de:f9:e1:24:22:74:df:a1:0a:aa:0b:76:3d:1e:
7c:3a:6b:0b:13:dc:55:e7:06:08:dd:7f:62:03:cf:
94:52:39:0e:3d:ca:7b:92:ad:a7:28:72:0b:b2:98:
d7:34:1e:2c:a3:d0:a8:c2:e4:8d:cc:2a:b6:95:ef:
2a:60:29:60:8a:92:cc:0f:7f:a4:bb:f4:bb:14:b1:
cb:7e:c4:6e:0c:2d:06:04:9d:4b:6f:dd:1f:53:33:
61:9a:67:45:98:95:ac:fb:73:de:8f:2a:b5:c0:0d:
e5:ad:44:85:be:06:33:14:3b:0a:f6:54:c7:e9:02:
7e:22:1b:a2:27:6f:f3:08:44:1a:ed:18:f0:d0:ab:
46:61:3a:3c:2e:73:fb:4c:e9:46:cf:a0:e1:f4:1b:
db:2c:7e:39:a7:e7:de:35:0d:cb:de:e7:40:31:e9:
62:e0:87:0e:0a:6c:f7:92:8b:bd:9f:ba:c9:a6:07:
1d:f9:64:71:f6:9f:1f:63:ff:e1:7d:b2:2b:fe:b9:
13:67:3e:90:77:49:5e:6c:ea:16:82:49:6b:e3:28:
1b:c7:b6:34:7e:67:a0:55:3f:ac:f5:fc:d4:04:a8:
35:19:8c:b4:ad:bb:d0:4a:34:a3:38:8a:04:07:20:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9B:F9:49:AC:F9:26:DE:0F:BA:86:DA:78:33:40:FA:D6:FD:ED:5F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LJv5Saz5Jt4PuobaeDNA-tb97V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e7:b5:28:59:5c:25:a5:80:0d:3c:7e:b1:54:55:26:9d:5a:
9a:25:d2:8f:ee:1a:a2:59:90:e8:1a:ee:32:a7:dc:78:a9:1e:
a0:53:0b:6b:df:7e:15:48:94:f0:05:f4:61:db:b1:ba:52:42:
4e:c4:ab:ae:dc:04:75:6d:be:a9:16:cf:37:7b:b8:c0:71:90:
ef:12:d2:0e:b4:3d:2e:6e:96:2a:4a:0c:c5:2c:cb:4a:7a:24:
6b:15:da:8b:d7:b2:19:60:ae:59:66:61:9b:23:f6:da:b2:9b:
44:db:4c:17:e1:3e:c1:0e:8d:a6:bd:43:a6:e7:17:6b:bb:40:
49:d4:83:b6:a3:b4:14:77:4b:d7:00:63:e8:f9:5f:21:2b:df:
83:57:dc:14:1c:8b:8d:d9:47:f3:ac:f6:e9:a0:09:87:de:91:
83:0a:ca:d7:b3:12:6a:a8:8e:67:38:09:9c:94:50:b5:e0:f3:
14:f7:b9:a6:53:2f:2a:9a:bc:54:54:f3:c0:4e:4f:26:74:89:
61:ae:44:1c:c0:a9:51:4b:b2:c0:37:2c:2d:20:8e:9e:ce:62:
35:49:45:6e:63:4a:92:0c:b5:63:63:a0:7e:97:c1:ea:d0:c6:
79:24:57:2e:58:35:2e:7f:4b:94:f2:3c:3e:88:9c:7e:32:3a:
dc:5d:f3:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZgI4qs5UKzOAxLHZ0xNUpp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNzE0MTIyMjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzliZjk0OWFjZjkyNmRlMGZiYTg2ZGE3ODMzNDBmYWQ2ZmRlZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HthoyuY9Qax/BxUrAPY3vnhJCJ0
36EKqgt2PR58OmsLE9xV5wYI3X9iA8+UUjkOPcp7kq2nKHILspjXNB4so9CowuSN
zCq2le8qYClgipLMD3+ku/S7FLHLfsRuDC0GBJ1Lb90fUzNhmmdFmJWs+3Pejyq1
wA3lrUSFvgYzFDsK9lTH6QJ+IhuiJ2/zCEQa7Rjw0KtGYTo8LnP7TOlGz6Dh9Bvb
LH45p+feNQ3L3udAMeli4IcOCmz3kou9n7rJpgcd+WRx9p8fY//hfbIr/rkTZz6Q
d0lebOoWgklr4ygbx7Y0fmegVT+s9fzUBKg1GYy0rbvQSjSjOIoEByDuLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCyb+Ums+SbeD7qG2ngzQPrW/e1fMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTEp2NVNhejVKdDRQdW9iYWVETkEtdGI5N1Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowV8MA0G
CSqGSIb3DQEBCwUAA4IBAQBA57UoWVwlpYANPH6xVFUmnVqaJdKP7hqiWZDoGu4y
p9x4qR6gUwtr334VSJTwBfRh27G6UkJOxKuu3AR1bb6pFs83e7jAcZDvEtIOtD0u
bpYqSgzFLMtKeiRrFdqL17IZYK5ZZmGbI/basptE20wX4T7BDo2mvUOm5xdru0BJ
1IO2o7QUd0vXAGPo+V8hK9+DV9wUHIuN2UfzrPbpoAmH3pGDCsrXsxJqqI5nOAmc
lFC14PMU97mmUy8qmrxUVPPATk8mdIlhrkQcwKlRS7LANywtII6ezmI1SUVuY0qS
DLVjY6B+l8Hq0MZ5JFcuWDUuf0uU8jw+iJx+MjrcXfOA
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:46 2025 by rpki-client