Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FCvYSOCWHL0OZn6yAJualSy2T_s.roa
File: FCvYSOCWHL0OZn6yAJualSy2T_s.roa (raw, json)
Hash identifier: cGpo/y89BZd3FNEXrMzZexI5haVAq2yk7iLTn8nR2gA=
Subject key identifier: 14:2B:D8:48:E0:96:1C:BD:0E:66:7E:B2:00:9B:9A:95:2C:B6:4F:FB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01973E9BA8A89C533E72F083B8D216D4AF3E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FCvYSOCWHL0OZn6yAJualSy2T_s.roa
Signing time: Thu 05 Jun 2025 05:41:17 +0000
ROA not before: Thu 05 Jun 2025 05:41:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 163.5.33.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3e:9b:a8:a8:9c:53:3e:72:f0:83:b8:d2:16:d4:af:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 5 05:41:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=142bd848e0961cbd0e667eb2009b9a952cb64ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:a7:6f:04:bc:ff:eb:66:00:2a:d3:85:73:
5c:6a:ff:9f:42:61:eb:66:ea:fe:1d:af:79:5c:72:
0d:b5:62:f3:d1:e2:7c:32:ba:73:df:83:5f:96:4b:
4c:69:19:b3:b2:e5:dd:bc:e7:52:9a:38:ca:25:4b:
0a:90:9d:b8:00:2b:56:ba:3e:52:e7:1e:f2:33:e8:
3a:80:66:1c:20:d1:1d:5d:97:aa:5c:4d:1b:fb:f1:
1a:ea:fe:b0:f3:e9:6d:99:d5:21:bf:e0:b8:c6:59:
91:0e:53:4f:b3:58:a3:72:74:fb:86:d8:07:e0:3b:
b4:55:a5:65:80:c3:b9:89:e9:c7:8b:05:30:f9:c0:
43:e6:62:3f:06:9b:96:df:0c:c2:57:f0:99:bb:35:
b3:9d:46:a8:ef:19:fe:47:a6:06:3b:8b:b7:c4:89:
5f:61:40:59:e0:00:57:db:4e:1e:92:8c:85:0a:b4:
4f:e5:bc:8a:79:dd:51:08:e1:f0:a4:65:21:45:4e:
e7:17:91:25:c7:54:92:f8:63:55:1e:44:4e:c4:a3:
40:46:84:db:38:d9:e0:0b:9e:14:84:f2:cb:12:1b:
1d:23:7e:5d:56:b4:c8:48:92:84:e4:f1:4e:83:df:
c2:5c:7d:2f:42:98:ed:85:8f:41:36:60:b3:16:ae:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2B:D8:48:E0:96:1C:BD:0E:66:7E:B2:00:9B:9A:95:2C:B6:4F:FB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FCvYSOCWHL0OZn6yAJualSy2T_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.33.0/24
163.5.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ef:6a:4d:61:18:c5:f3:01:54:4b:4a:49:b7:28:53:c3:f1:
df:0b:32:3f:5b:18:56:f4:56:c4:1d:13:fd:72:04:06:be:09:
f0:8d:7d:67:ab:93:95:f2:82:51:ed:b0:f3:cf:1f:ad:77:7f:
0b:7d:32:8b:40:a4:7a:f9:b0:3f:c7:a2:8c:cb:8b:7e:78:6d:
2d:a3:c1:dc:29:d3:4c:13:d5:17:b7:af:9d:04:6c:8e:6e:87:
54:c7:83:9a:ad:4b:8f:e9:8a:01:56:d7:44:54:c6:cc:ff:5e:
81:a8:f7:d5:04:37:28:1f:99:d1:c1:b5:4b:d9:12:ef:2e:3c:
87:bd:99:f7:c3:a7:9e:79:34:fa:ae:de:ea:0c:bf:28:e2:be:
53:a3:48:60:26:65:d5:68:e6:7d:a8:0a:cb:b1:a7:31:32:ee:
e4:f7:a1:3e:5b:28:d4:5f:e7:e2:10:29:14:40:e1:c0:46:ad:
65:67:8e:00:6e:e2:f8:d8:42:68:52:c0:67:b9:53:48:20:ac:
87:90:5c:46:a6:e9:19:e9:32:f2:24:7a:f5:5a:2f:17:0f:c9:
7c:5e:5c:2f:df:ce:69:de:5d:6d:bb:b8:69:13:57:af:65:5f:
ec:79:c9:0f:93:a1:4a:c7:52:f9:1f:19:14:18:d5:7f:44:3f:
b7:c1:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:09:28 2025 by rpki-client