Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0oTv7ULDk-qnTlCNUf2QKRqwmAk.roa
File: 0oTv7ULDk-qnTlCNUf2QKRqwmAk.roa (raw, json)
Hash identifier: 4Zok7LQ/Rkv26G10qwqk0W/0ZH8XZtoHdCx491vEI24=
Subject key identifier: D2:84:EF:ED:42:C3:93:EA:A7:4E:50:8D:51:FD:90:29:1A:B0:98:09
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A4E710DC48714A943740D5C2A5DA0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0oTv7ULDk-qnTlCNUf2QKRqwmAk.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216159
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4e:71:0d:c4:87:14:a9:43:74:0d:5c:2a:5d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d284efed42c393eaa74e508d51fd90291ab09809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:33:a8:ea:23:f1:dd:ba:38:7b:40:5f:e2:
84:27:02:24:11:f3:1c:5a:82:ea:f6:a9:66:91:a8:
69:b9:69:fa:da:0f:ac:e7:3c:50:35:1c:dd:a0:f7:
08:95:32:d8:dd:71:14:6e:4e:b8:33:2c:b7:80:25:
93:ca:08:f0:18:5d:b1:05:7d:6d:c5:2b:ac:b8:37:
bd:af:8e:80:9b:22:e0:80:bd:3b:fd:81:b9:87:e1:
a7:c7:58:31:b9:88:e5:6c:bf:f9:81:c6:1d:85:39:
b8:9f:dd:bf:88:9e:41:8b:33:89:b7:52:36:5d:0d:
b6:10:8e:09:18:b8:36:e8:82:62:4d:59:1f:ea:81:
8f:6f:af:b6:3d:cd:e3:b8:9b:2e:f5:d6:65:db:4e:
9c:d2:27:46:21:de:3e:99:7a:04:a6:63:6a:bb:7d:
ae:0b:47:51:08:6b:5b:4d:cd:1c:94:ea:62:43:92:
b4:13:19:41:28:f6:3e:ca:5f:c1:69:a9:c5:b3:ce:
34:ab:38:5f:d8:d0:7c:dc:df:96:21:e5:d1:00:49:
f4:00:2f:61:b1:83:0c:f5:54:11:df:34:10:26:d8:
c8:93:a5:79:d2:9b:b3:6e:1e:25:82:b6:68:81:25:
a9:94:cf:10:54:50:cc:bb:ee:a0:57:3d:d7:60:0b:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:84:EF:ED:42:C3:93:EA:A7:4E:50:8D:51:FD:90:29:1A:B0:98:09
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0oTv7ULDk-qnTlCNUf2QKRqwmAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.192.0/23
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
7a:40:a9:1a:ed:ef:1f:82:81:31:cf:fc:ed:51:f1:b1:ef:1b:
93:c0:f9:bc:21:bd:12:16:ad:12:5f:b1:8d:f9:05:0e:d8:46:
5f:ac:e6:f5:a3:2d:54:a2:1a:79:f5:96:c5:4b:26:fc:9a:84:
e9:01:5a:a3:ea:28:f4:88:a6:31:a5:79:bc:a7:76:5a:a2:6c:
98:c1:9c:2d:4e:c0:38:04:91:13:10:f5:54:01:52:ba:f0:ac:
39:89:81:49:53:1f:16:60:de:cc:62:ec:31:51:b4:78:93:65:
b5:f2:7e:3b:fa:af:62:ff:8a:e9:14:b7:ee:86:a6:f1:87:7c:
cc:34:64:86:01:90:3a:02:b6:49:7d:37:38:93:ae:fb:40:a5:
d8:01:99:8a:1b:64:9c:13:df:c0:cd:d1:60:2d:c6:d7:58:ae:
1b:19:7a:b3:ac:0c:45:17:2b:89:82:89:69:8e:78:f4:97:1c:
91:88:76:bf:7d:03:05:fa:fa:96:21:57:41:59:6f:f5:09:25:
84:02:7e:f0:fe:51:92:31:27:02:07:94:56:39:a6:cf:51:88:
de:31:83:49:51:c7:ab:02:06:03:cf:d2:1f:1a:ad:b9:f3:84:
fe:a9:b8:d7:44:95:28:44:f1:b8:b4:88:ff:1a:05:3a:58:fa:
f1:b1:7d:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:55:11 2025 by rpki-client