Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GtQRw8oso5w-uWMKf-yqWP7rnf4.roa
File: GtQRw8oso5w-uWMKf-yqWP7rnf4.roa (raw, json)
Hash identifier: lVu5SOJdtJlFXU+IvvgJfJoLvJulLA/x+qmn8pkAtRs=
Subject key identifier: 1A:D4:11:C3:CA:2C:A3:9C:3E:B9:63:0A:7F:EC:AA:58:FE:EB:9D:FE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A3DC07001A4A0DCB9D84BC50E5329
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GtQRw8oso5w-uWMKf-yqWP7rnf4.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200131
IP address blocks: 163.5.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3d:c0:70:01:a4:a0:dc:b9:d8:4b:c5:0e:53:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ad411c3ca2ca39c3eb9630a7fecaa58feeb9dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:a3:e4:3c:c2:a3:6a:78:c7:f9:48:fb:af:
6c:2e:b2:d3:c4:92:e9:70:be:87:e9:53:2f:37:3e:
a2:d9:3a:3a:2b:7b:40:81:53:db:23:2d:a5:49:cd:
fd:3d:3b:58:cd:64:e1:fb:0f:60:d5:2d:52:a2:1b:
51:1d:1a:65:ea:38:34:89:f1:0c:47:7c:32:db:9d:
9d:6d:1f:34:aa:72:c4:07:3f:e7:2c:75:50:d5:87:
e3:57:46:0a:59:72:e6:ca:4c:de:a5:5e:18:bf:c6:
64:dd:23:3c:b0:82:e2:bc:fe:d8:ba:a0:b4:64:35:
b4:53:a7:68:da:a0:0f:e6:3f:13:ef:43:9b:39:8e:
14:73:b7:2a:8a:17:98:9c:16:af:d4:ed:5f:72:1e:
fb:e8:d5:33:c8:85:0d:bc:a0:31:cd:30:4d:14:5f:
af:6f:6d:f0:13:d1:84:8e:28:94:77:10:dd:ce:dc:
3f:ad:61:83:81:a2:8b:4d:56:be:0b:84:eb:10:85:
30:e4:0e:2c:4b:37:3d:7d:9e:ac:46:3f:40:1a:47:
a8:2b:d5:48:7d:29:7f:1e:81:92:a5:18:4b:ab:a6:
73:ff:4d:84:7f:9c:a9:b4:96:6c:9e:f3:04:14:58:
bf:1b:62:2f:0c:3f:27:fa:b8:0f:55:d4:db:31:cd:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:11:C3:CA:2C:A3:9C:3E:B9:63:0A:7F:EC:AA:58:FE:EB:9D:FE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GtQRw8oso5w-uWMKf-yqWP7rnf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d8:90:38:93:3b:69:29:a1:05:44:c9:92:eb:ed:c1:d0:2c:
1b:cd:42:23:c2:f9:3d:eb:b9:4a:a1:89:fe:77:1d:c9:4f:6b:
40:7f:8a:0f:29:bb:5b:2c:cb:bc:6c:17:0a:62:3f:a3:59:6f:
21:ae:98:73:f6:bb:3b:79:d0:48:7d:6d:ee:fa:c6:11:b4:29:
10:8f:fc:1d:45:ed:cd:7d:f4:9b:aa:2f:c6:c4:4d:48:26:04:
8b:cc:3d:f7:2f:13:5c:e8:4e:3f:81:59:3f:ef:b8:17:db:e3:
24:40:6a:82:92:b6:55:de:64:cf:a4:85:05:88:50:b0:06:3c:
ad:42:a3:ed:b4:6d:57:85:51:96:a4:b9:09:49:a6:2c:b4:6b:
d8:0a:a6:1c:d0:4b:f1:d9:66:b7:85:0c:a4:88:96:c8:eb:f4:
01:3b:48:75:e5:a8:35:b0:0b:c6:f1:c2:0e:0c:e0:10:af:e5:
04:cd:a7:a3:6d:d1:4c:93:d1:d9:eb:d1:b3:8c:eb:9b:dd:ab:
bd:a0:f9:ab:91:e0:e7:f9:c8:da:81:69:c9:62:91:78:4d:c0:
a6:b8:db:ed:65:a2:08:2a:ff:7f:2d:1f:c2:82:91:06:72:38:
e8:81:9d:f6:58:86:4a:f1:3e:01:54:6b:7a:17:ab:40:65:a2:
e6:9d:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:50:48 2025 by rpki-client