Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FU08n9-CBU3OXvFfzyf9Oe_N9EM.roa
File: FU08n9-CBU3OXvFfzyf9Oe_N9EM.roa (raw, json)
Hash identifier: AqAeGqAFJfLegHNwIX7NoxZ1sDAeIPha0MFk7CG1Jm8=
Subject key identifier: 15:4D:3C:9F:DF:82:05:4D:CE:5E:F1:5F:CF:27:FD:39:EF:CD:F4:43
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01957136034954573C9638DCB071EBD96C73
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FU08n9-CBU3OXvFfzyf9Oe_N9EM.roa
Signing time: Fri 07 Mar 2025 15:25:20 +0000
ROA not before: Fri 07 Mar 2025 15:25:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 163.5.84.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:36:03:49:54:57:3c:96:38:dc:b0:71:eb:d9:6c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 7 15:25:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=154d3c9fdf82054dce5ef15fcf27fd39efcdf443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:67:02:61:c7:13:7c:36:51:50:df:b7:a3:
7d:97:d0:6b:7b:95:77:2d:c4:44:49:b9:2f:ea:f4:
53:5f:05:da:13:bf:86:54:8e:62:02:bb:84:15:d3:
0c:76:3c:25:49:52:31:c3:37:8f:ee:e2:46:bf:ee:
67:04:3d:26:05:1e:53:c9:a8:f6:fb:4c:72:2c:71:
6e:ff:d5:ee:5c:23:1d:93:ea:d9:07:47:e9:de:7e:
e7:c6:09:a2:b1:5c:74:59:02:e5:8b:1b:21:6c:65:
ba:ed:86:18:b4:d3:c3:55:2f:82:34:9f:6d:d6:cd:
ab:5c:5c:2e:6e:ef:b2:82:cd:2a:11:50:32:3e:3c:
87:c7:26:88:b7:69:e8:91:dd:c9:50:ee:38:9e:24:
9e:67:76:1a:1e:15:23:2c:8b:11:b3:07:df:56:4b:
d3:ab:6f:a7:f6:64:07:85:30:5d:21:48:da:e6:85:
fe:b7:be:24:05:39:cf:1a:d9:0d:92:8c:a2:34:f7:
d5:0a:5e:60:78:ae:a0:44:12:d1:8f:99:cd:28:aa:
7a:5e:b2:40:f2:13:62:0d:4a:6f:cc:81:c6:82:e6:
40:46:7b:57:19:c6:af:3e:b0:03:fd:79:0f:1c:8c:
fb:75:1f:91:c5:e9:93:e8:a7:29:e6:90:0c:1e:f5:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:3C:9F:DF:82:05:4D:CE:5E:F1:5F:CF:27:FD:39:EF:CD:F4:43
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FU08n9-CBU3OXvFfzyf9Oe_N9EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.84.0/24
163.5.123.0/24
163.5.192.0/23
163.5.195.0/24
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
90:4c:e7:7b:6e:05:c1:22:ea:22:a8:6e:3a:7d:6b:1d:11:7d:
e0:ec:16:05:0c:ab:ed:92:36:cd:3b:fc:c4:4d:fc:e7:61:76:
68:fc:dc:47:cf:1c:b4:bf:8b:24:c6:bd:b4:fb:98:cf:27:b2:
e5:42:84:73:8b:eb:b9:47:14:13:93:cf:12:7e:5b:7b:d2:fb:
9c:68:05:ca:28:97:b0:3f:87:48:6c:7d:20:19:49:74:42:18:
95:41:12:09:0c:b9:fd:f4:7d:6f:bd:5c:e4:78:d4:56:ad:ec:
dc:b0:60:94:b0:9e:ce:a9:65:d9:db:a5:14:ce:4d:66:36:ea:
ab:01:9e:0c:9b:27:b2:ee:07:84:57:33:04:ea:f0:2f:9f:34:
44:2d:12:0e:7f:ba:7e:65:f7:02:90:57:56:56:16:51:95:0a:
fa:a4:c7:56:2f:6c:61:5d:d5:fa:1a:1b:42:fb:68:6d:bf:4b:
71:43:ca:4b:77:69:b4:e0:a4:10:e6:65:b5:77:bb:81:ce:11:
30:55:0e:f0:1f:8b:0d:1f:4d:3f:b8:15:50:9d:8d:30:f3:aa:
cc:6f:08:9d:70:64:62:32:52:f3:c6:73:81:7a:ab:3b:b9:22:
d4:af:ea:3c:a1:f4:62:76:53:07:d1:ae:a4:d5:d5:f8:b1:4c:
b0:ac:47:d7
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZVxNgNJVFc8ljjcsHHr2WxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMzA3MTUyNTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTRkM2M5ZmRmODIwNTRkY2U1ZWYxNWZjZjI3ZmQzOWVmY2RmNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKVnAmHHE3w2UVDft6N9l9Bre5V3
LcRESbkv6vRTXwXaE7+GVI5iAruEFdMMdjwlSVIxwzeP7uJGv+5nBD0mBR5Tyaj2
+0xyLHFu/9XuXCMdk+rZB0fp3n7nxgmisVx0WQLlixshbGW67YYYtNPDVS+CNJ9t
1s2rXFwubu+ygs0qEVAyPjyHxyaIt2nokd3JUO44niSeZ3YaHhUjLIsRswffVkvT
q2+n9mQHhTBdIUja5oX+t74kBTnPGtkNkoyiNPfVCl5geK6gRBLRj5nNKKp6XrJA
8hNiDUpvzIHGguZARntXGcavPrAD/XkPHIz7dR+RxemT6Kcp5pAMHvWMdQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBVNPJ/fggVNzl7xX88n/TnvzfRDMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRlUwOG45LUNCVTNPWHZGZnp5ZjlPZV9OOUVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAowVUAwQA
owV7AwQBowXAAwQAowXDMAwDBACjBdUDBACjBdYwDQYJKoZIhvcNAQELBQADggEB
AJBM53tuBcEi6iKobjp9ax0RfeDsFgUMq+2SNs07/MRN/Odhdmj83EfPHLS/iyTG
vbT7mM8nsuVChHOL67lHFBOTzxJ+W3vS+5xoBcool7A/h0hsfSAZSXRCGJVBEgkM
uf30fW+9XOR41Fat7NywYJSwns6pZdnbpRTOTWY26qsBngybJ7LuB4RXMwTq8C+f
NEQtEg5/un5l9wKQV1ZWFlGVCvqkx1YvbGFd1foaG0L7aG2/S3FDykt3abTgpBDm
ZbV3u4HOETBVDvAfiw0fTT+4FVCdjTDzqsxvCJ1wZGIyUvPGc4F6qzu5ItSv6jyh
9GJ2UwfRrqTV1fixTLCsR9c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:46 2025 by rpki-client