Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Jd4ux4zSWST_mB2aaVVdMHofO88.roa
File: Jd4ux4zSWST_mB2aaVVdMHofO88.roa (raw, json)
Hash identifier: 3MZY1JcPajXfm68J3G3f8cpGWGianLH/spg6KegHjAA=
Subject key identifier: 25:DE:2E:C7:8C:D2:59:24:FF:98:1D:9A:69:55:5D:30:7A:1F:3B:CF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A3398AE65CE5B22E3F6AA16B8E59A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Jd4ux4zSWST_mB2aaVVdMHofO88.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 163.5.178.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:33:98:ae:65:ce:5b:22:e3:f6:aa:16:b8:e5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25de2ec78cd25924ff981d9a69555d307a1f3bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:78:af:48:94:b8:48:9f:85:9c:51:a4:4a:
e9:1f:aa:9f:46:6e:e0:55:47:c1:b8:26:94:f7:80:
d1:f4:ba:c4:56:54:cf:49:c3:a4:bd:1b:0f:d7:bf:
09:2b:d2:5a:4b:26:5a:8c:c2:84:71:da:c7:17:df:
09:91:95:7f:89:d7:60:f3:42:cc:4d:46:97:96:5d:
65:45:2d:48:fb:24:82:1b:ae:fc:94:3b:03:d6:1e:
0e:a0:01:c3:ce:65:1e:ca:a6:a5:c8:45:6c:12:2d:
e4:6f:9f:50:f8:0f:33:00:23:37:8f:07:3f:35:6c:
4a:f5:8c:3c:f8:88:bc:5d:a8:e2:23:a9:54:72:96:
69:24:d4:40:cd:54:1d:f0:fb:8d:75:b1:ec:1e:a5:
c0:6d:9e:54:c2:94:c1:d0:bc:32:0b:0f:1f:a2:6c:
e0:9b:8f:5e:34:08:15:49:7a:a4:68:0a:e2:5b:03:
1a:ad:24:09:5b:ed:1c:78:58:ca:e8:d2:64:0e:33:
78:1e:46:0b:dd:a3:4c:3a:8b:26:45:eb:60:08:60:
0d:86:b8:27:66:a3:d4:18:3e:0c:6f:12:57:49:1a:
c1:99:1a:1e:56:50:d5:25:ae:0e:ac:aa:b5:ea:38:
2f:9d:75:0c:d0:0e:3d:6c:b0:23:60:f2:f2:93:2c:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DE:2E:C7:8C:D2:59:24:FF:98:1D:9A:69:55:5D:30:7A:1F:3B:CF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Jd4ux4zSWST_mB2aaVVdMHofO88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.178.0/24
163.5.184.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6e:fc:03:2c:66:fc:ad:17:db:db:da:5a:7f:74:85:d6:a6:
61:32:1f:69:d7:3d:31:ac:54:34:74:3b:16:c7:32:7f:8c:71:
4f:e7:16:d9:51:77:f6:fd:1a:66:54:f5:0e:fb:c0:6f:49:77:
d8:88:38:22:ab:46:b7:80:48:42:5d:b5:fb:52:cd:0b:ee:b0:
4f:56:32:bf:07:3a:3b:59:72:5c:c2:11:e1:ba:9c:91:ad:63:
70:20:b4:f3:9d:bf:0f:15:f2:39:7c:4e:74:ab:a1:16:8d:93:
85:76:a1:31:b9:86:2a:17:55:cd:7d:80:cd:d3:e3:ca:9a:a7:
d9:94:2a:3f:92:6f:f2:17:f5:9a:d4:68:37:f8:11:3d:2f:16:
7d:05:3d:aa:76:4f:71:01:4f:41:38:bd:c8:44:fc:3b:c7:29:
95:07:5a:d5:81:8a:04:52:a3:9d:e6:f8:40:55:cb:98:04:90:
8f:3b:d8:ab:fd:55:40:f0:f1:e2:16:a9:7a:dc:39:ca:ea:93:
ae:34:cd:5f:c5:6b:08:79:df:32:8d:94:15:90:1d:0c:66:1b:
f3:14:fa:bf:1b:ed:1a:71:6d:e5:a2:8a:ec:cc:cb:38:8f:56:
d2:22:cc:03:44:35:29:7e:b6:98:85:c6:d1:08:c3:2e:bd:67:
cb:e8:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:56:58 2025 by rpki-client