Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bT_z2bo-u6nGjYgoFbI6VbMjaqE.roa
File: bT_z2bo-u6nGjYgoFbI6VbMjaqE.roa (raw, json)
Hash identifier: Skuxj5L3LqhVEu3Vt8ONijpi5rw4yzBJhhp0v/TcAyE=
Subject key identifier: 6D:3F:F3:D9:BA:3E:BB:A9:C6:8D:88:28:15:B2:3A:55:B3:23:6A:A1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019823DF7E6C15FF7AC5777659A6699FBFA6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bT_z2bo-u6nGjYgoFbI6VbMjaqE.roa
Signing time: Sat 19 Jul 2025 18:08:26 +0000
ROA not before: Sat 19 Jul 2025 18:08:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.41.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:23:df:7e:6c:15:ff:7a:c5:77:76:59:a6:69:9f:bf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 19 18:08:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d3ff3d9ba3ebba9c68d882815b23a55b3236aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:57:be:1f:18:46:ea:5c:54:14:38:c7:a0:
7a:6f:4c:19:a1:36:98:b4:2d:3d:d2:c9:ce:b4:51:
04:02:29:64:4d:4e:01:47:df:97:8f:73:cf:a9:ce:
3b:e9:58:02:cc:eb:6b:44:e6:19:25:7a:63:e4:c3:
0a:6f:f1:31:93:ac:59:0e:c2:49:9f:39:f8:ad:f2:
a7:63:68:c2:9e:3e:44:34:62:48:5a:71:0e:8d:e2:
ea:61:35:05:fc:e8:93:ff:70:c5:5c:60:2b:44:9a:
6e:dd:f8:ee:6f:b6:6b:fc:36:c5:17:e8:f0:ef:c1:
0a:7f:38:27:fa:4c:fb:01:e8:9b:38:cc:98:47:2a:
cb:54:35:61:87:15:a3:c6:8a:5c:6f:30:38:d7:e1:
90:74:92:65:c9:fd:87:e9:00:55:78:33:18:d5:3e:
41:eb:2e:64:8c:11:d5:da:10:e3:5d:fd:5a:0d:cd:
f6:48:58:3e:cf:90:e6:05:fa:02:e9:d2:84:9b:92:
a2:c8:d5:df:02:4f:b1:5f:82:96:d8:8f:d8:dc:8c:
d6:53:b5:7b:ae:7d:3d:88:ee:65:21:05:04:1f:ba:
ce:ee:e1:3b:e3:d9:a5:96:e0:db:6b:b0:7d:8d:5d:
f4:13:f3:ab:65:58:c3:2f:c5:c3:9f:49:b1:a6:43:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3F:F3:D9:BA:3E:BB:A9:C6:8D:88:28:15:B2:3A:55:B3:23:6A:A1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bT_z2bo-u6nGjYgoFbI6VbMjaqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.41.0/24
163.5.46.0/24
163.5.233.0/24
163.5.247.0-163.5.248.255
Signature Algorithm: sha256WithRSAEncryption
64:29:51:62:1d:35:b0:cb:a2:22:5a:f6:cc:40:b0:db:c8:0c:
0e:6f:ae:1b:fb:96:9a:4f:f4:3c:77:77:a2:49:a1:47:02:64:
6b:e3:38:22:fe:3f:0c:28:5f:12:1b:49:8d:a8:fb:ec:46:4c:
9a:b9:0a:e8:2a:09:4e:54:70:08:a5:f3:21:58:71:d7:42:e0:
f9:22:7a:b2:98:50:55:41:d5:ff:fc:c8:9b:1b:f4:e8:1b:2d:
c0:46:e2:5e:df:a5:ce:93:40:08:65:dc:17:15:0c:b7:c1:02:
0a:cb:18:be:d2:76:9a:10:58:fb:67:2f:b9:f9:49:12:94:f6:
41:52:a6:5e:48:8b:9c:43:52:25:71:85:ab:48:32:cd:90:b4:
19:ab:2c:f6:29:80:32:ef:41:8b:c2:6a:fd:6e:0b:3a:b8:02:
36:f3:b2:cd:f8:8d:07:df:9a:99:02:8c:2b:56:25:78:2e:ac:
85:93:56:77:ea:b9:09:a1:f6:c4:ba:d6:52:f2:d8:7d:c9:bc:
28:d9:4e:43:bc:22:d3:46:dd:08:49:00:0b:5a:d1:9f:53:c6:
8b:d9:5f:24:d8:78:d7:3a:63:e0:ce:f7:f2:b5:3d:d9:48:f1:
63:b0:93:e0:25:6f:ee:6a:3c:48:27:69:a5:99:74:75:9b:ed:
66:92:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 00:00:31 2025 by rpki-client