Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gqw15V4IesF9qv2OnTE_T-zZyhk.roa
File: Gqw15V4IesF9qv2OnTE_T-zZyhk.roa (raw, json)
Hash identifier: vzAZ7uYUu3gWr3lc0Vtb69ILPHn98SfGXk8QtjBcrEw=
Subject key identifier: 1A:AC:35:E5:5E:08:7A:C1:7D:AA:FD:8E:9D:31:3F:4F:EC:D9:CA:19
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019571316FE03012166599B2E3502C2A834A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gqw15V4IesF9qv2OnTE_T-zZyhk.roa
Signing time: Fri 07 Mar 2025 15:20:20 +0000
ROA not before: Fri 07 Mar 2025 15:20:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 163.5.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:31:6f:e0:30:12:16:65:99:b2:e3:50:2c:2a:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 7 15:20:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1aac35e55e087ac17daafd8e9d313f4fecd9ca19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:51:68:7b:12:02:19:9d:8d:81:aa:ae:40:
12:90:e6:14:4d:e9:f1:28:b5:50:4b:6d:59:19:2a:
c2:4c:bf:ae:b1:e6:74:23:52:58:8b:d8:22:bf:65:
82:bd:44:15:bc:7b:61:d2:0a:e3:4a:42:63:7c:5c:
d4:39:ed:ea:53:a2:d9:32:8e:c8:a9:34:bd:90:39:
e9:91:4c:76:6e:9d:b3:e5:80:ca:29:d7:c7:30:73:
00:2d:da:4d:79:ff:aa:03:fd:52:f2:4f:85:0f:2a:
3b:4b:80:85:20:9b:44:06:99:8e:91:4d:e5:e2:15:
b9:a3:10:a8:b9:7e:73:04:46:43:6f:9b:be:87:24:
49:0a:b8:33:88:78:5f:0e:fb:5a:df:fb:f4:f0:ed:
06:d2:d4:1f:73:c0:65:1b:c3:03:c2:20:b0:09:23:
68:06:f4:41:8b:f0:57:99:6b:05:07:13:f3:fa:49:
3b:6d:00:54:9b:58:0e:4d:0d:3a:e7:46:ef:77:5d:
59:b2:27:e2:25:03:4b:90:c2:80:2b:9d:c2:c5:ec:
1b:ae:a2:b7:fb:2e:08:84:5a:c6:38:08:34:ea:75:
97:82:19:42:53:df:14:90:8e:c0:85:ed:16:67:56:
53:22:31:00:76:48:a3:58:76:c6:15:22:50:60:f8:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AC:35:E5:5E:08:7A:C1:7D:AA:FD:8E:9D:31:3F:4F:EC:D9:CA:19
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gqw15V4IesF9qv2OnTE_T-zZyhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7d:50:0b:38:d8:20:a7:9c:9f:49:5e:a5:cf:f7:7b:9c:1c:
63:a0:98:16:9d:39:c9:d8:fb:f7:38:9f:4e:cf:86:68:c0:f4:
73:22:71:77:da:a6:86:10:fa:cc:0b:00:21:4e:f8:4e:92:7f:
76:b5:0f:a0:f0:ef:c0:28:b9:65:7c:a7:88:87:82:ee:d9:9c:
c4:e2:91:be:90:ae:99:83:a3:56:82:1a:92:43:47:1c:1c:50:
d8:e4:c1:43:87:6f:ba:96:f2:17:01:45:08:0b:f4:5b:49:2b:
48:ef:4c:40:d8:23:44:6c:85:3f:20:80:e6:84:b6:42:92:db:
78:3f:6a:d3:07:24:b2:58:b0:d8:59:0e:ed:d1:8a:38:b6:9b:
98:59:57:9a:4c:6d:81:3b:8a:bf:06:38:00:9d:b5:23:c2:7f:
ba:68:cb:cd:6b:e6:4e:f2:63:00:79:5f:d9:37:f0:66:7f:9c:
2d:74:4f:93:64:31:d8:04:70:2e:4a:9c:82:73:37:50:b8:14:
0b:b4:cb:43:b3:a6:0f:87:b6:9b:d5:2c:8a:ef:1e:38:8e:eb:
70:b9:09:5f:81:b9:7f:12:f2:fe:75:af:d6:a0:60:0c:af:43:
ff:1a:65:02:2e:c0:20:84:73:72:96:76:01:60:5f:ae:45:9d:
63:bc:d3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:11 2025 by rpki-client