Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gt6NEIkTCb3iSP4DF6jzJP5LeH0.roa
File: Gt6NEIkTCb3iSP4DF6jzJP5LeH0.roa (raw, json)
Hash identifier: 70Fx/qGaFHFDhYoUq2gzC7B75pHlu2rVrfirlEfykf8=
Subject key identifier: 1A:DE:8D:10:89:13:09:BD:E2:48:FE:03:17:A8:F3:24:FE:4B:78:7D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01957122CA913DD2EF9DF2DB72EC65212FF2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gt6NEIkTCb3iSP4DF6jzJP5LeH0.roa
Signing time: Fri 07 Mar 2025 15:04:20 +0000
ROA not before: Fri 07 Mar 2025 15:04:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:22:ca:91:3d:d2:ef:9d:f2:db:72:ec:65:21:2f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 7 15:04:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ade8d10891309bde248fe0317a8f324fe4b787d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:1c:fb:1f:9e:28:80:1e:4e:41:f7:57:c8:
12:c5:43:b4:c4:d6:88:6f:85:33:a7:89:7e:df:07:
99:ed:33:ab:30:f3:5e:98:d4:4c:78:03:db:df:f7:
cb:7b:4f:83:1c:56:d4:c0:4d:16:b0:69:70:04:b0:
bf:07:9a:6e:12:0c:55:90:bc:67:4b:54:78:91:70:
f2:2a:a5:bd:2c:34:30:83:b9:11:22:fe:c6:49:88:
ce:da:54:3f:43:c7:31:5a:ab:05:7f:70:7e:e0:82:
42:32:1a:45:40:64:76:f7:45:16:f6:39:7d:e8:3f:
84:68:f1:ce:c5:ba:a3:08:4c:1e:ac:21:2a:50:b1:
c5:b5:44:6b:0f:f0:50:94:8e:48:e6:b4:b7:6e:ad:
96:fa:c8:d5:a9:9c:ee:6e:13:64:51:64:fd:f1:46:
08:16:21:98:dc:86:d1:73:2a:86:26:9c:4c:1c:05:
40:5a:96:c8:95:95:af:f0:17:99:7c:39:36:f6:9c:
16:42:6d:28:98:49:23:b8:4b:72:c0:62:bb:f4:bf:
a8:ea:bf:7e:5b:db:86:5e:1b:a6:83:2e:e9:55:ad:
1f:cf:53:f8:66:9a:f9:e4:31:3c:50:41:7c:22:1e:
5c:2b:44:fe:4e:8e:b0:fa:aa:48:31:bd:01:09:93:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:8D:10:89:13:09:BD:E2:48:FE:03:17:A8:F3:24:FE:4B:78:7D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gt6NEIkTCb3iSP4DF6jzJP5LeH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:af:8f:67:21:35:db:20:2f:00:49:76:a0:05:ad:5e:7e:cc:
e9:17:c2:61:08:8b:bf:66:a5:82:7f:5c:1e:a6:d3:f5:a8:f1:
f3:e7:2a:36:d8:00:3e:b7:23:45:91:c9:45:5b:99:a7:51:b5:
ae:ff:c7:da:b4:e8:4b:e2:2a:23:96:e1:22:6c:13:c1:ca:5e:
c4:72:c5:97:b5:8b:f0:88:c6:e6:de:c1:78:bd:5f:99:26:b3:
f0:f4:9e:74:05:d3:1b:38:da:bb:ac:cf:e7:0b:77:ed:1c:f2:
3c:05:04:ac:29:e9:ed:8e:e8:1e:1e:00:e2:9f:91:b2:78:c7:
52:b9:7f:f4:36:bc:29:20:68:63:27:17:ca:3f:be:80:5e:2c:
93:f8:42:f8:90:6a:ec:fa:6a:8c:51:f7:1a:63:99:b4:f7:1a:
67:56:9b:d4:cc:bb:d1:6d:e5:ef:c0:ba:6b:4a:70:9d:66:9e:
c3:54:c0:d3:21:20:11:0f:64:ec:32:c1:a3:09:8b:57:a6:65:
cd:e2:eb:7f:c9:66:9f:61:5e:d0:7f:64:80:18:3c:5e:02:af:
e6:31:a6:04:cc:7b:86:10:38:f9:97:88:18:16:22:23:3c:3c:
40:6c:cc:6e:5e:2a:4f:2b:21:81:9c:cd:4e:2c:9e:22:d4:a8:
ef:ce:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:09 2025 by rpki-client