Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2E0uetw3Y-nJ_xRCVpy46k8Mf-o.roa
File: 2E0uetw3Y-nJ_xRCVpy46k8Mf-o.roa (raw, json)
Hash identifier: JBEkxJG+rZ1lelsCGL+S50Y+pJtonRGvW8pmAMiggmE=
Subject key identifier: D8:4D:2E:7A:DC:37:63:E9:C9:FF:14:42:56:9C:B8:EA:4F:0C:7F:EA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A4ECE4EDF2590B220171F1703D584
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2E0uetw3Y-nJ_xRCVpy46k8Mf-o.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265919
IP address blocks: 163.5.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4e:ce:4e:df:25:90:b2:20:17:1f:17:03:d5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d84d2e7adc3763e9c9ff1442569cb8ea4f0c7fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:e9:b4:cb:ed:c8:b5:b1:c1:a7:54:06:2b:
f3:c7:e2:3e:67:5a:f3:f8:bc:74:50:ac:e3:bb:6a:
2d:23:b6:28:38:77:81:35:24:2e:55:f0:ac:b3:6b:
36:47:1e:09:d8:88:b4:73:99:cf:92:ac:e0:7f:98:
76:9c:f7:cf:00:16:78:b9:53:04:da:6c:8a:53:ab:
13:99:3a:49:e8:80:a0:25:23:5d:35:02:42:61:5c:
a4:4d:40:c5:cf:c0:ae:6b:d7:be:38:01:3e:02:7b:
9b:14:4a:39:dc:ac:33:78:c7:a6:96:fb:5b:30:3f:
33:a9:49:89:3c:df:00:f7:f3:74:1d:fe:d6:92:71:
77:98:46:e1:00:c2:3f:6a:0c:9a:b1:d3:9a:b2:ff:
f2:1c:3b:68:8d:00:9d:13:96:51:a8:83:41:72:ef:
32:b9:10:95:84:5d:84:ff:66:16:4a:66:f3:e5:5a:
9a:ed:d3:04:2d:79:fa:fb:f1:eb:fb:5d:a0:76:92:
32:d9:78:3a:2f:d6:59:e4:62:d2:8f:ab:41:c3:3c:
cb:ff:de:0d:12:79:3b:5d:0f:67:71:02:41:bc:d9:
cd:84:58:8f:0c:fb:37:a3:90:27:86:ee:93:47:60:
c9:65:a0:c3:11:8e:9e:ca:c0:e1:ba:3b:f4:d4:5a:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:2E:7A:DC:37:63:E9:C9:FF:14:42:56:9C:B8:EA:4F:0C:7F:EA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2E0uetw3Y-nJ_xRCVpy46k8Mf-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
Signature Algorithm: sha256WithRSAEncryption
28:20:78:6a:99:18:a3:cc:96:5e:d1:d4:65:d9:a0:bb:8d:90:
2a:12:e8:28:73:87:4d:a7:f1:cd:f9:23:57:cd:1f:3d:49:6a:
49:e2:c8:68:ce:3e:13:e7:e9:61:ff:ef:c0:f4:36:b2:24:57:
81:7b:7a:29:76:f5:b1:7a:e6:67:d8:bc:27:47:d5:b5:65:2b:
a5:60:bd:94:dc:ee:68:92:19:36:8b:9e:88:9a:04:95:8c:c0:
6e:f9:5a:02:c9:cd:12:24:99:c1:73:bd:2b:5d:f9:a1:45:50:
28:3d:1c:b4:aa:34:d4:f4:3f:29:2a:fa:f1:47:22:c6:7c:f4:
b1:32:1a:bd:8a:bc:6b:97:c8:75:f5:90:36:ac:64:ce:39:ff:
aa:f8:f4:32:4c:19:a3:73:cf:a5:09:79:bb:16:ad:2e:e5:9e:
67:41:c6:89:ba:7f:db:ba:a6:ae:7b:39:f7:22:56:84:f2:29:
a1:a7:55:4c:15:70:6b:2c:40:cf:bb:93:c4:4e:7c:85:87:16:
8e:b1:ca:23:79:76:2f:87:b6:e8:fd:b2:13:cb:43:99:95:b9:
f7:a2:14:6f:3b:1f:6e:24:0b:83:22:31:98:05:f1:8e:cc:df:
db:69:3b:8d:c2:45:ee:5d:4c:ca:da:2c:52:66:c7:a9:bb:8d:
87:ca:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:46:03 2025 by rpki-client