Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/11AzebX0HrSFg26hmfaKyUUdlJY.roa
File: 11AzebX0HrSFg26hmfaKyUUdlJY.roa (raw, json)
Hash identifier: jCTpowN3hbwgNDG9RU7JToGxS6UDYtWlOkSMziA39CU=
Subject key identifier: D7:50:33:79:B5:F4:1E:B4:85:83:6E:A1:99:F6:8A:C9:45:1D:94:96
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196F30949EAAB418A71AAA98BA64CF09891
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/11AzebX0HrSFg26hmfaKyUUdlJY.roa
Signing time: Wed 21 May 2025 13:29:54 +0000
ROA not before: Wed 21 May 2025 13:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 163.5.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:09:49:ea:ab:41:8a:71:aa:a9:8b:a6:4c:f0:98:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 21 13:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7503379b5f41eb485836ea199f68ac9451d9496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:64:4e:2e:88:f6:0d:54:79:6f:a9:10:51:
15:9f:03:89:d5:58:aa:93:22:13:ee:09:1c:ac:15:
18:ff:22:44:da:e1:5e:a7:3f:2e:68:cf:24:36:1d:
8a:21:f0:3e:e6:5d:79:41:9c:03:36:db:31:07:08:
af:5e:42:52:5c:3e:cf:1e:2d:10:2d:d6:a2:5d:f7:
48:38:70:d4:ef:37:25:57:b1:01:68:30:6c:1c:7d:
bd:42:c1:1b:0a:c6:45:63:45:89:2f:2e:0c:60:d7:
be:06:6e:30:00:28:f3:cd:d6:75:91:9d:91:e1:8a:
10:19:a5:d4:29:6e:f2:05:52:53:b1:d9:80:81:81:
dc:42:8f:22:66:bc:13:70:0e:53:cf:b5:6f:8f:60:
8f:d5:70:c5:82:57:c3:7c:66:03:9b:d1:c4:54:48:
67:c0:ad:44:ce:95:c6:12:49:b9:2d:dd:a6:b2:1d:
19:3a:29:c8:14:83:a0:7a:86:d1:f3:09:2c:b8:1a:
f7:05:96:35:75:79:8d:8a:e2:6b:36:10:0a:65:55:
40:43:b4:ac:2a:85:86:2c:6e:ed:a4:6a:3d:ca:41:
9e:72:33:d9:5f:be:70:9a:42:42:53:6d:13:b5:f8:
8d:87:fc:12:04:70:ed:6e:87:d8:7c:9b:86:90:e1:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:33:79:B5:F4:1E:B4:85:83:6E:A1:99:F6:8A:C9:45:1D:94:96
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/11AzebX0HrSFg26hmfaKyUUdlJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.216.0/24
Signature Algorithm: sha256WithRSAEncryption
47:29:99:4e:05:50:f3:c1:49:f1:a6:13:47:21:34:4f:30:0d:
6a:9d:fe:9a:9a:cd:a7:2d:a9:5f:04:38:e0:9f:7a:ed:fd:ce:
bf:32:a0:d8:d6:09:c4:b5:ac:c0:55:d3:3b:53:72:44:f6:53:
da:2c:11:02:07:b6:4d:e5:46:f8:4b:bf:fb:79:d7:bd:14:b1:
0d:66:c7:fc:09:e1:fa:f6:2e:07:50:c0:12:f5:82:f0:91:d1:
fb:58:f3:48:60:82:16:41:62:6b:f3:c9:96:7a:6b:d7:9f:5d:
9f:7b:f3:14:b2:90:8f:a9:20:a3:7e:06:11:b8:70:63:e6:95:
bd:e5:68:74:52:10:9d:ba:28:6e:54:1e:f1:13:3e:72:e2:10:
4c:db:36:9d:dd:c4:7c:0b:a7:7b:62:5d:f3:96:d3:26:94:ff:
1f:6b:0a:a2:73:da:bc:2c:21:a1:79:a0:f3:8e:88:3c:42:17:
84:e2:b8:fc:7f:c4:26:bb:a0:d9:e0:6e:bd:1f:8c:3b:4d:ec:
6d:1c:a9:8e:d0:48:13:1d:6b:71:29:67:ad:d1:ab:36:63:e1:
33:91:c6:57:bc:03:9a:88:19:79:ad:81:59:a6:96:3c:9b:59:
2f:81:30:53:83:09:b8:f9:d1:c3:3c:ae:18:67:a9:e8:d8:8f:
68:09:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:45 2025 by rpki-client