Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4YMjQ7UpHd3OAqEwLMOPQjHUo0s.roa
File: 4YMjQ7UpHd3OAqEwLMOPQjHUo0s.roa (raw, json)
Hash identifier: ypIYEDfRKdf0atzDAQIUmxizAkizPuY6Pj4+aIjECdQ=
Subject key identifier: E1:83:23:43:B5:29:1D:DD:CE:02:A1:30:2C:C3:8F:42:31:D4:A3:4B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196AC794489186E779BFA42181396217796
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4YMjQ7UpHd3OAqEwLMOPQjHUo0s.roa
Signing time: Wed 07 May 2025 20:39:10 +0000
ROA not before: Wed 07 May 2025 20:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 163.5.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:79:44:89:18:6e:77:9b:fa:42:18:13:96:21:77:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 7 20:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1832343b5291dddce02a1302cc38f4231d4a34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:43:60:bd:22:0a:c4:13:e2:60:fc:5d:56:
2a:be:cf:51:78:1c:ae:5a:5d:4f:c6:68:dd:62:64:
3e:d5:5b:07:63:0b:ac:48:31:b0:77:31:9f:89:b1:
c1:cf:2e:18:2f:f1:45:d0:12:3b:64:cd:b3:5e:10:
49:9a:b3:da:40:35:ce:cc:f0:5d:dc:87:7c:c9:06:
b6:62:34:dd:db:2e:a2:a8:4c:30:cd:74:43:a2:c5:
19:4b:49:e9:12:2b:b4:c4:da:05:a3:f6:b7:03:b2:
f0:9c:1d:ba:a0:69:e8:1c:35:d0:a4:43:02:a3:76:
4e:ac:c7:49:1c:5c:71:ef:9e:3e:0e:c6:3a:3a:3c:
3c:0e:60:2b:40:4d:46:e4:2a:fd:df:2b:9d:69:b4:
ce:95:f1:44:2d:42:10:7b:a8:04:06:ef:b0:b9:32:
ef:52:ac:cf:e0:5f:ec:86:3f:26:4d:33:d4:da:1a:
8a:eb:43:8d:4b:41:ab:c9:9b:db:07:12:78:bf:1e:
4d:f1:46:8f:4f:18:ea:0f:87:e7:93:73:4d:3c:21:
aa:4d:22:b6:f7:a2:35:f3:45:c4:22:25:a0:19:7c:
57:1e:22:70:dc:d2:3b:89:ca:89:7d:cc:43:ff:27:
d3:99:5f:56:2b:21:3c:0b:25:b0:4f:7e:31:81:98:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:83:23:43:B5:29:1D:DD:CE:02:A1:30:2C:C3:8F:42:31:D4:A3:4B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4YMjQ7UpHd3OAqEwLMOPQjHUo0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.133.0/24
Signature Algorithm: sha256WithRSAEncryption
58:be:52:61:ce:ba:89:2f:cf:a7:3f:36:03:70:f3:d3:43:2e:
9a:c9:74:1a:8e:00:a6:a4:9d:de:85:54:b6:84:a8:4a:d2:ce:
11:ab:0d:1c:f2:18:53:5d:12:74:18:f5:18:66:e1:8f:11:74:
f4:21:ce:7c:e7:6e:03:ff:70:bb:3d:58:77:68:ea:73:73:de:
26:2e:af:f3:15:ff:c9:27:09:2a:fe:43:0f:82:3d:cd:b8:37:
53:36:b3:96:25:1e:e7:2d:12:7b:58:30:a7:68:32:e7:21:8e:
b9:67:17:dc:3c:40:19:47:78:23:3f:23:65:21:0b:75:42:82:
be:29:fe:c4:27:17:b8:7d:b7:b1:6c:a3:55:e6:8b:80:5c:5a:
6d:22:8c:88:ac:a7:56:8f:bc:9f:99:72:58:3c:9a:36:85:83:
ca:a6:17:06:03:8b:22:09:99:47:2d:d5:5b:54:d5:28:c2:52:
c6:88:33:dd:20:38:21:5a:08:2c:37:1f:9e:32:ff:82:8b:32:
83:da:ea:6a:54:5f:43:52:f0:73:6b:38:0f:80:9c:c3:9b:7c:
19:5f:1c:5e:a0:fa:51:42:5e:45:82:00:27:20:e2:95:92:94:
83:f0:14:8d:31:2e:98:74:71:ca:5a:52:d2:ae:3f:13:98:f7:
55:fc:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:46 2025 by rpki-client