Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/B4QlH5vx3ts49UjZXCejtDKJyrU.roa
File: B4QlH5vx3ts49UjZXCejtDKJyrU.roa (raw, json)
Hash identifier: imaY129Vp/SjqtaFeZSWDfzWDeAqAf2pz+gF/IIY5MA=
Subject key identifier: 07:84:25:1F:9B:F1:DE:DB:38:F5:48:D9:5C:27:A3:B4:32:89:CA:B5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A2D18199498DB0BDC9BEB513A575D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/B4QlH5vx3ts49UjZXCejtDKJyrU.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.82.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2d:18:19:94:98:db:0b:dc:9b:eb:51:3a:57:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0784251f9bf1dedb38f548d95c27a3b43289cab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:31:2f:d5:d0:dd:df:ee:ed:4e:83:02:32:
68:2c:0e:db:f8:43:20:ef:55:63:8d:b2:e9:8f:1b:
2d:f1:08:34:c3:3e:8e:65:57:49:9c:92:09:c0:27:
f7:84:60:4d:ad:40:35:7a:a0:04:e3:fa:15:e0:99:
f9:d4:4f:b1:cc:bc:15:10:b8:e0:7f:97:e6:3b:21:
11:0c:91:d1:96:0f:64:fa:bd:f9:19:65:b4:5f:78:
e5:3f:64:b1:c8:c1:bf:ca:54:f5:d8:2a:58:79:1e:
fe:98:f7:bb:95:4e:61:f8:e4:28:a6:26:2d:0a:cc:
7d:14:ce:48:1a:a9:2b:e8:cf:c7:7f:b2:92:26:3b:
77:5a:ad:5f:f0:3c:eb:8a:e6:4e:7d:9b:fd:aa:bc:
e4:9f:ca:fc:39:6f:2d:80:bf:d7:ac:ba:f8:98:bf:
93:f3:7b:84:eb:53:a1:3b:c6:91:b1:ee:17:4c:b9:
89:a3:66:c2:b8:10:46:eb:56:7d:b5:0b:f2:8f:67:
67:f8:41:2e:38:a2:12:7c:9b:72:c9:c4:b3:d4:0b:
98:d8:8f:ff:31:79:ef:fa:a1:4f:97:ac:b5:85:52:
8c:fe:22:e1:dc:ca:5d:ef:f0:af:e0:37:ed:17:fa:
4e:99:64:1b:20:2e:e4:db:88:bf:0b:09:fd:20:00:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:84:25:1F:9B:F1:DE:DB:38:F5:48:D9:5C:27:A3:B4:32:89:CA:B5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/B4QlH5vx3ts49UjZXCejtDKJyrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.82.0/24
163.5.99.0/24
163.5.127.0/24
163.5.202.0/24
Signature Algorithm: sha256WithRSAEncryption
33:db:05:fc:35:7b:0c:92:25:6b:92:28:b0:1c:24:f4:47:15:
0e:5d:4a:6d:c1:5d:c4:56:e8:ba:c6:b0:9d:85:09:fb:b4:0f:
c9:dd:b0:a9:96:9b:b6:38:b3:e4:e2:00:96:1e:0f:a0:6e:ba:
15:9e:f8:01:17:62:78:8f:2d:e9:66:91:b0:e3:95:3f:42:77:
d1:0c:b8:0f:c7:71:24:c8:f6:4c:54:f7:fc:a0:75:ca:8f:de:
22:af:c1:50:96:d7:1c:80:1c:52:a6:35:d7:83:a1:e7:01:02:
ef:a9:32:c4:01:82:5f:fd:8c:6c:46:17:77:c2:0c:06:66:aa:
f5:c6:8a:ec:00:81:5a:bd:17:a4:9f:f7:2f:dd:89:a9:1d:69:
06:8f:3e:46:64:23:3c:7b:e3:9c:18:10:4d:e4:cb:5f:e7:6b:
8d:a3:f8:ca:58:b4:06:90:df:7d:61:7a:25:c2:7c:1a:6e:62:
ab:a9:91:d9:8b:67:ac:6d:90:a1:08:67:b0:b1:72:07:60:ae:
37:8c:89:73:4f:4d:2f:8c:5f:cf:eb:f1:a6:3b:1a:d0:5e:fc:
00:fa:ec:4c:26:d8:75:e4:67:83:bf:5c:d1:bb:09:e7:c0:bb:
45:c7:4a:f3:c1:02:a6:30:f8:2c:53:b9:f0:30:7e:10:07:b4:
37:ca:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:53:32 2025 by rpki-client