Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/C-mbvqBuIlnLKBnF406g7HuWjxY.roa
File: C-mbvqBuIlnLKBnF406g7HuWjxY.roa (raw, json)
Hash identifier: 2jufXB9EklkPrdYWbOHgtsrry+YjZm6OB6m8rjy+3Sk=
Subject key identifier: 0B:E9:9B:BE:A0:6E:22:59:CB:28:19:C5:E3:4E:A0:EC:7B:96:8F:16
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A36011CEC41C6B724C298F750E827
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/C-mbvqBuIlnLKBnF406g7HuWjxY.roa
Signing time: Wed 01 Jan 2025 19:49:10 +0000
ROA not before: Wed 01 Jan 2025 19:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 163.5.58.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:36:01:1c:ec:41:c6:b7:24:c2:98:f7:50:e8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0be99bbea06e2259cb2819c5e34ea0ec7b968f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:95:85:09:ff:2d:05:ab:50:d2:9d:1d:62:
a4:41:7f:33:d1:64:a7:c3:d9:c4:a6:21:a2:dd:d8:
3a:78:41:c8:fc:c9:d7:df:6b:91:59:c5:3c:ad:fc:
78:db:e5:9c:86:89:a9:97:1f:43:b1:b4:aa:28:23:
94:0c:fd:9b:cb:cc:15:d7:b1:ea:d2:de:03:c7:90:
68:46:ef:01:dd:4f:c5:23:d3:63:36:11:1e:d1:3b:
94:48:bc:eb:d1:08:a3:05:75:ef:7c:06:8f:64:06:
b9:dd:5e:97:bb:cf:00:87:c8:e4:92:1e:d5:fc:1b:
af:b5:5a:75:a7:e2:7b:e2:1c:c4:28:dc:b5:24:9c:
43:64:24:1e:65:62:5e:a3:a4:0e:b4:a6:c4:1a:aa:
cd:63:9f:00:0f:9f:ae:0d:b9:e7:69:1c:18:20:6c:
52:91:b6:7c:02:82:c8:4b:85:34:a0:24:8f:9d:5a:
4d:d4:e2:e7:94:be:25:87:1c:57:f7:85:d0:d8:81:
90:66:0e:04:df:e1:82:d5:70:01:8c:41:33:08:1d:
09:89:80:4a:15:87:43:7c:85:14:ac:15:66:40:7b:
d6:26:3d:bd:4b:8c:d4:62:02:d1:f3:d0:14:7a:b4:
92:1d:24:65:71:e1:23:e1:9b:d4:de:0a:69:b2:be:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E9:9B:BE:A0:6E:22:59:CB:28:19:C5:E3:4E:A0:EC:7B:96:8F:16
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/C-mbvqBuIlnLKBnF406g7HuWjxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
163.5.71.0/24
163.5.125.0/24
163.5.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:99:9a:d5:ac:dc:fe:b8:1b:38:f1:eb:60:77:f1:64:cc:dd:
b9:43:d6:ad:7e:63:3e:2a:e8:5d:4a:09:70:9e:9a:eb:bd:dc:
58:31:83:58:f6:b8:f2:ac:b4:57:84:e9:82:87:bd:40:cc:5f:
0d:2f:33:d0:44:5f:c8:04:24:af:7f:c2:27:34:75:2e:52:45:
32:3c:53:6d:67:66:54:bc:af:02:b0:72:d5:d3:7b:e9:3c:dd:
24:20:50:f1:29:1c:ec:dc:8c:bf:da:cd:1e:6e:6a:fc:a8:fe:
3b:e1:ab:07:f0:3e:46:60:4f:1f:17:7c:83:ba:11:ab:f1:1f:
75:e5:e0:47:36:18:54:04:9a:ed:bf:91:22:f8:d8:48:6a:4f:
6d:b5:33:1f:47:64:8d:41:53:13:bf:ef:c9:9f:79:11:93:e6:
93:46:8d:2e:99:7d:54:92:e9:79:70:5e:e5:2a:94:1b:cf:07:
2e:00:80:f3:d6:0b:1a:35:60:8a:e3:b2:78:cc:05:38:a4:de:
65:44:c7:30:3a:2e:94:27:7b:bb:59:87:2c:2a:4d:3d:43:7e:
7d:24:08:a3:59:ca:c9:a7:e0:cf:bf:57:9a:a8:91:b4:47:81:
e9:80:97:d9:68:57:18:48:69:20:07:c1:29:12:fe:82:0c:c7:
72:73:27:c0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQjajYBHOxBxrckwpj3UOgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMTAxMTk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmU5OWJiZWEwNmUyMjU5Y2IyODE5YzVlMzRlYTBlYzdiOTY4ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4yVhQn/LQWrUNKdHWKkQX8z0WSn
w9nEpiGi3dg6eEHI/MnX32uRWcU8rfx42+Wchomplx9DsbSqKCOUDP2by8wV17Hq
0t4Dx5BoRu8B3U/FI9NjNhEe0TuUSLzr0QijBXXvfAaPZAa53V6Xu88Ah8jkkh7V
/BuvtVp1p+J74hzEKNy1JJxDZCQeZWJeo6QOtKbEGqrNY58AD5+uDbnnaRwYIGxS
kbZ8AoLIS4U0oCSPnVpN1OLnlL4lhxxX94XQ2IGQZg4E3+GC1XABjEEzCB0JiYBK
FYdDfIUUrBVmQHvWJj29S4zUYgLR89AUerSSHSRlceEj4ZvU3gppsr6cVQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAvpm76gbiJZyygZxeNOoOx7lo8WMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQy1tYnZxQnVJbG5MS0JuRjQwNmc3SHVXanhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowU6AwQA
owVHAwQAowV9AwQAowWEMA0GCSqGSIb3DQEBCwUAA4IBAQC1mZrVrNz+uBs48etg
d/FkzN25Q9atfmM+KuhdSglwnprrvdxYMYNY9rjyrLRXhOmCh71AzF8NLzPQRF/I
BCSvf8InNHUuUkUyPFNtZ2ZUvK8CsHLV03vpPN0kIFDxKRzs3Iy/2s0ebmr8qP47
4asH8D5GYE8fF3yDuhGr8R915eBHNhhUBJrtv5Ei+NhIak9ttTMfR2SNQVMTv+/J
n3kRk+aTRo0umX1Ukul5cF7lKpQbzwcuAIDz1gsaNWCK47J4zAU4pN5lRMcwOi6U
J3u7WYcsKk09Q359JAijWcrJp+DPv1eaqJG0R4HpgJfZaFcYSGkgB8EpEv6CDMdy
cyfA
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:41:19 2025 by rpki-client