Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4UB6aVX7qHrzosRDP3YkzQlRt3Q.roa
File: 4UB6aVX7qHrzosRDP3YkzQlRt3Q.roa (raw, json)
Hash identifier: FhzCgGHdQTVR+feJVWazgIS+TZzQf5JM2dda99ITNPA=
Subject key identifier: E1:40:7A:69:55:FB:A8:7A:F3:A2:C4:43:3F:76:24:CD:09:51:B7:74
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A26E24F6A6AF126AB812B8DB4D517
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4UB6aVX7qHrzosRDP3YkzQlRt3Q.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 163.5.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:26:e2:4f:6a:6a:f1:26:ab:81:2b:8d:b4:d5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1407a6955fba87af3a2c4433f7624cd0951b774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:93:f2:8e:0e:d1:10:57:10:3b:c3:6a:bf:
5b:cc:ef:3d:a8:24:e4:13:ff:fa:16:49:e6:b9:7a:
d1:e0:38:4f:20:4c:73:d5:9d:67:bd:75:9e:7d:c6:
f4:d3:96:76:b5:3b:0e:a0:b8:01:b6:e9:0a:d2:76:
61:66:9d:cb:51:63:b9:fd:99:31:39:a9:7b:f2:c8:
a7:6d:d0:bd:fd:98:b9:b0:e2:7c:6b:0a:2a:17:6e:
5c:f0:9b:8c:2a:6b:bf:66:8c:03:d3:4f:d6:83:ea:
8b:b4:3a:07:c5:f4:0b:d2:eb:3d:61:f7:0d:17:6b:
9d:b5:98:be:59:62:e8:39:ff:85:53:6f:d6:d1:48:
e7:3f:ea:37:3d:18:0b:18:c3:35:91:89:7d:52:20:
22:e8:37:f6:f0:f6:3b:61:12:44:50:c5:ef:26:b7:
be:97:d7:f6:3f:f8:ab:4a:0c:9d:89:7e:d2:e9:3a:
0b:35:57:58:bf:79:8b:d0:9c:ea:48:44:54:4f:8c:
bb:92:2d:50:ec:8a:cd:5b:4a:10:f5:68:97:35:df:
79:77:90:2b:7b:2d:68:4f:1b:7e:e1:65:a1:c0:a8:
1d:9e:01:12:a4:14:90:42:47:71:1d:5c:26:8e:a4:
7a:ca:5d:ea:07:79:ed:a5:63:7c:26:03:af:72:74:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:40:7A:69:55:FB:A8:7A:F3:A2:C4:43:3F:76:24:CD:09:51:B7:74
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4UB6aVX7qHrzosRDP3YkzQlRt3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a7:65:fd:f7:3b:0a:70:ea:0b:94:ea:74:d2:87:6d:14:82:
47:ae:26:2f:ae:d0:da:aa:20:c3:82:49:f9:b6:e6:c6:34:24:
29:11:6f:b3:85:77:d1:9c:4d:c6:37:a6:0f:6b:10:61:51:7a:
29:a5:47:ca:8a:20:31:40:8f:7d:45:e0:91:c5:e1:b1:ce:c4:
d2:42:87:c6:e4:61:9e:11:cb:0b:bc:a7:b3:3d:92:b9:a4:dd:
e0:08:ec:f9:48:f2:d2:92:58:e6:09:f7:96:3a:a3:86:79:9f:
dc:c7:8c:7b:d0:cd:28:08:4d:b6:9c:6c:65:c7:6b:a4:cb:b9:
89:f0:33:a9:ee:27:d9:e0:3d:ba:fd:0b:4a:ae:5a:51:3b:02:
ac:8f:87:61:fa:85:48:d9:87:3b:69:38:50:7d:94:d7:af:d0:
48:d3:6e:81:8c:db:a6:d1:1c:df:6d:dc:e5:82:e9:cc:53:61:
47:67:aa:56:e6:fc:f9:93:ec:4c:c1:79:15:d9:e4:8c:6d:e3:
2a:12:48:33:47:06:dc:d9:07:7c:75:c9:99:ac:45:e8:4d:51:
70:75:04:ae:e0:c7:4e:cc:0b:34:c5:fa:54:62:d0:2d:79:d4:
dc:2b:7e:cc:33:85:40:b3:f5:c1:7f:21:ac:89:16:c4:23:e4:
a5:5a:4b:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaibiT2pq8SargSuNtNUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMTAxMTk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTQwN2E2OTU1ZmJhODdhZjNhMmM0NDMzZjc2MjRjZDA5NTFiNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/GT8o4O0RBXEDvDar9bzO89qCTk
E//6FknmuXrR4DhPIExz1Z1nvXWefcb005Z2tTsOoLgBtukK0nZhZp3LUWO5/Zkx
Oal78sinbdC9/Zi5sOJ8awoqF25c8JuMKmu/ZowD00/Wg+qLtDoHxfQL0us9YfcN
F2udtZi+WWLoOf+FU2/W0UjnP+o3PRgLGMM1kYl9UiAi6Df28PY7YRJEUMXvJre+
l9f2P/irSgydiX7S6ToLNVdYv3mL0JzqSERUT4y7ki1Q7IrNW0oQ9WiXNd95d5Ar
ey1oTxt+4WWhwKgdngESpBSQQkdxHVwmjqR6yl3qB3ntpWN8JgOvcnRIfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFAemlV+6h686LEQz92JM0JUbd0MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNFVCNmFWWDdxSHJ6b3NSRFAzWWt6UWxSdDNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowW+MA0G
CSqGSIb3DQEBCwUAA4IBAQAqp2X99zsKcOoLlOp00odtFIJHriYvrtDaqiDDgkn5
tubGNCQpEW+zhXfRnE3GN6YPaxBhUXoppUfKiiAxQI99ReCRxeGxzsTSQofG5GGe
EcsLvKezPZK5pN3gCOz5SPLSkljmCfeWOqOGeZ/cx4x70M0oCE22nGxlx2uky7mJ
8DOp7ifZ4D26/QtKrlpROwKsj4dh+oVI2Yc7aThQfZTXr9BI026BjNum0Rzfbdzl
gunMU2FHZ6pW5vz5k+xMwXkV2eSMbeMqEkgzRwbc2Qd8dcmZrEXoTVFwdQSu4MdO
zAs0xfpUYtAtedTcK37MM4VAs/XBfyGsiRbEI+SlWksy
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:52:30 2025 by rpki-client