Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CTpT_Xi-WjQmiU4ee0MHzRQgFU8.roa
File: CTpT_Xi-WjQmiU4ee0MHzRQgFU8.roa (raw, json)
Hash identifier: szWGH6Whbwn9tRYB0WZTfRAt6T+zOiPxn33xKO8MIWs=
Subject key identifier: 09:3A:53:FD:78:BE:5A:34:26:89:4E:1E:7B:43:07:CD:14:20:15:4F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01971BFDEBA140A08EB7E40995782223F879
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CTpT_Xi-WjQmiU4ee0MHzRQgFU8.roa
Signing time: Thu 29 May 2025 12:21:55 +0000
ROA not before: Thu 29 May 2025 12:21:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215144
IP address blocks: 163.5.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:fd:eb:a1:40:a0:8e:b7:e4:09:95:78:22:23:f8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 29 12:21:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=093a53fd78be5a3426894e1e7b4307cd1420154f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:e1:e9:b7:8f:ca:58:db:78:87:7c:b5:d1:
a3:ce:2f:00:5c:c3:98:0c:40:0d:91:b5:e5:78:de:
50:07:7c:4a:08:c7:81:de:f7:b7:63:7b:c1:ad:84:
fc:83:a3:1d:98:fc:e2:13:b2:cb:85:f4:b9:fa:5d:
93:cd:1b:a5:12:b7:05:dc:b6:58:91:35:56:a1:9c:
a8:9b:8e:09:17:1f:1f:61:5b:04:4d:ee:ee:db:fe:
35:2d:bb:78:ca:a2:71:88:c7:80:65:46:66:9f:7d:
24:10:a3:ce:18:2d:58:f4:f9:5a:c7:c4:f3:5d:51:
bd:8f:0d:e6:cf:24:04:20:f6:40:2d:01:e1:c6:2c:
38:ef:7a:ba:f1:17:8d:e2:31:33:9b:f4:c2:25:4c:
01:24:44:a2:09:2b:3a:a5:91:4f:f0:e8:fc:e4:62:
cd:20:58:1d:4c:de:7a:99:1a:e5:ea:29:0c:ac:41:
a9:3f:f4:99:2e:73:e9:ff:7e:e0:00:29:4b:ca:66:
d7:1f:b2:30:62:c5:28:9d:24:53:34:66:04:84:85:
5d:da:33:f4:95:f4:de:e9:8f:d9:de:1e:39:1b:ce:
82:f7:24:4d:c6:fa:80:47:06:d7:71:ec:df:0c:61:
60:18:d2:61:59:c4:b6:d7:c8:78:20:c6:9e:87:90:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3A:53:FD:78:BE:5A:34:26:89:4E:1E:7B:43:07:CD:14:20:15:4F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CTpT_Xi-WjQmiU4ee0MHzRQgFU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
55:cf:57:5c:2d:88:77:f4:e2:46:2f:ab:1e:67:d3:c2:b4:de:
b6:c9:e0:67:13:59:02:e6:7a:98:9c:e5:c0:e7:67:25:7d:01:
1a:d0:16:e6:4c:8b:7a:2d:28:b8:55:b2:00:e4:32:3f:a6:c2:
39:69:cf:6d:c1:f2:e2:ab:e0:46:62:ed:60:7b:e2:95:75:c0:
24:a9:da:e4:e1:bf:e7:78:e3:9f:4e:e6:ab:34:74:37:47:67:
9f:34:88:2c:86:8f:22:1c:16:2e:95:1c:a5:10:fd:59:13:43:
8f:83:20:7f:c1:e3:9f:f2:9b:63:2f:1b:9e:64:89:fc:d9:0b:
4f:45:7e:87:a7:b8:18:f4:7f:e7:9f:51:c0:99:d1:00:a0:e1:
8d:55:a8:6d:a6:64:04:b6:70:88:01:b8:11:8b:b4:92:b8:a4:
e2:64:20:15:a3:3e:30:46:1b:18:c3:7d:f8:20:3b:c6:8c:35:
e5:af:50:b4:8c:09:d5:94:58:33:f0:11:e4:6b:8e:37:0a:09:
0e:35:14:20:e9:c0:95:50:fe:d8:31:4a:9d:9e:45:24:21:8d:
92:02:fd:55:d6:79:ea:47:0c:d0:56:a1:ac:c6:41:61:c8:71:
44:2a:28:41:44:0a:c0:0c:b5:9d:d6:cb:66:4a:b3:db:43:30:
37:78:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:45 2025 by rpki-client