Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/G0oj9h_YyXHOAawKULexm3q2MZs.roa
File: G0oj9h_YyXHOAawKULexm3q2MZs.roa (raw, json)
Hash identifier: 1ypQjl/2GutueMA6v/tsuwe7uYhI33Jiuj8x5L/EntE=
Subject key identifier: 1B:4A:23:F6:1F:D8:C9:71:CE:01:AC:0A:50:B7:B1:9B:7A:B6:31:9B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01971C0D7C078260C5ABC718FE1159A2C4E5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/G0oj9h_YyXHOAawKULexm3q2MZs.roa
Signing time: Thu 29 May 2025 12:38:55 +0000
ROA not before: Thu 29 May 2025 12:38:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212489
IP address blocks: 163.5.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1c:0d:7c:07:82:60:c5:ab:c7:18:fe:11:59:a2:c4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 29 12:38:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b4a23f61fd8c971ce01ac0a50b7b19b7ab6319b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:cc:0a:f1:88:dd:52:7d:26:69:8f:ac:37:
e9:90:77:8c:bf:a2:0a:e8:0f:7c:dd:12:89:9d:ea:
e4:d7:94:b8:61:69:24:2c:b0:5b:68:1a:62:ff:06:
18:c0:27:c3:bc:72:8a:fb:99:31:72:b4:19:ee:09:
e8:3c:89:dc:26:e9:e6:c2:9d:21:00:eb:bb:18:aa:
a6:be:18:cc:46:d2:de:90:91:d7:9d:57:a2:8a:a9:
6e:19:77:f0:54:f7:89:09:06:27:61:f0:eb:31:57:
54:3f:27:39:90:01:0e:bf:cc:b7:3e:24:e3:a8:c6:
a0:0a:0e:65:49:d7:9f:25:eb:9f:f3:19:28:10:bb:
47:8b:81:0a:4f:4a:a2:55:50:55:05:27:b6:f1:47:
16:15:f4:38:b8:5b:8f:fc:f1:26:89:71:ce:51:d9:
46:7e:c3:20:e8:52:99:8a:f7:1e:c4:d2:97:a2:e8:
a1:d2:3e:58:8b:6a:b2:fa:08:5a:98:b1:48:1b:62:
9b:f6:38:4a:ce:5d:8c:bb:eb:5e:f0:29:90:ca:f5:
4a:5c:e2:38:8e:c5:23:2b:70:5b:8f:13:88:45:4f:
b1:66:f8:81:b5:81:2c:91:aa:62:c1:ff:b9:a3:bf:
d3:37:28:fd:71:b6:3e:92:89:55:77:be:1d:b6:12:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4A:23:F6:1F:D8:C9:71:CE:01:AC:0A:50:B7:B1:9B:7A:B6:31:9B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/G0oj9h_YyXHOAawKULexm3q2MZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.5.0/24
Signature Algorithm: sha256WithRSAEncryption
64:93:e9:df:96:1f:0e:28:a6:40:5d:d3:c0:b1:66:66:8b:3f:
fb:bf:b5:2e:5e:4b:58:81:ff:c6:8b:47:63:27:11:79:00:01:
e3:92:08:0d:ad:9e:d3:f3:95:70:04:34:31:16:c0:28:3f:dc:
0e:33:38:0e:5c:5b:7f:27:40:5a:cd:dd:53:2b:73:c1:69:a4:
ee:36:b5:45:a0:0f:2c:83:6d:90:9e:bc:59:ba:c0:14:a5:7d:
bf:1a:2f:b1:72:2b:27:f7:3f:48:f6:1f:11:60:e7:8b:b6:b4:
94:51:bc:f1:03:c4:dc:ef:1f:d5:04:fa:ca:51:9e:94:f3:62:
a7:11:9a:96:97:d5:5a:87:d6:53:63:d4:35:3f:68:48:99:ec:
7d:b9:34:70:f7:6c:44:56:3d:72:e8:5f:ef:0c:70:58:5c:10:
22:bc:af:68:81:51:46:5c:3f:3b:21:42:3d:8e:dc:d1:9e:e1:
cd:4e:6b:45:59:4f:d9:ea:2e:4d:be:42:c5:d4:3f:28:62:a3:
fc:a3:d3:e1:bd:32:39:a1:d4:8e:7b:6e:02:f3:c9:98:b2:86:
48:5c:f5:4e:44:87:d9:16:8e:bf:c4:66:07:22:6b:26:b5:d6:
0a:a3:46:34:fb:4f:a1:c6:ad:41:92:18:a5:77:a0:af:5f:9f:
e9:77:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:36 2025 by rpki-client