Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MeDsqZ10Be2pjbSu5PCOMXV-IAE.roa
File: MeDsqZ10Be2pjbSu5PCOMXV-IAE.roa (raw, json)
Hash identifier: vdtqhfHKXKJ/X4Bd+LliolKYml6fcvqDQDalyJIzgys=
Subject key identifier: 31:E0:EC:A9:9D:74:05:ED:A9:8D:B4:AE:E4:F0:8E:31:75:7E:20:01
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A19F895945ECB20BA4601FA0DAA39
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MeDsqZ10Be2pjbSu5PCOMXV-IAE.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 163.5.1.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
163.5.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:19:f8:95:94:5e:cb:20:ba:46:01:fa:0d:aa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31e0eca99d7405eda98db4aee4f08e31757e2001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:38:5c:bf:dd:f3:3d:3f:64:11:d4:ee:99:a6:
78:05:8d:79:b9:a1:0d:ac:f7:31:ee:9a:b0:ff:98:
29:9e:8c:0c:1f:98:c7:03:4d:21:87:a0:62:2c:59:
55:ea:8b:51:0f:a6:7d:aa:10:e3:0d:7f:d5:85:e2:
21:1f:4f:d3:f1:11:b4:d9:2b:e2:49:58:3a:1a:5c:
09:bb:33:38:8d:c9:dd:42:b9:ca:ce:21:49:7a:1b:
87:9c:45:bc:20:24:4b:e3:20:a3:7e:dd:f7:bf:c2:
46:70:cf:cc:e4:50:31:d7:c7:c6:e5:0d:f3:a7:cd:
b4:0a:06:5d:43:b7:0e:f3:6b:fe:0a:87:dc:dc:10:
93:2f:df:fa:cc:33:44:60:6b:a6:a2:1f:d3:ce:2b:
da:69:aa:80:62:ae:5b:8d:1d:ec:c2:ed:e5:35:fb:
6d:71:2a:5e:8d:0d:26:97:4b:7d:6e:7b:c3:1f:3d:
2a:4d:5b:74:c6:e4:34:ce:88:13:d2:60:36:fd:8c:
57:17:f5:f6:49:5f:35:1f:3c:66:d9:bc:f5:b7:3e:
69:61:d6:b0:d0:28:8f:3d:69:0f:87:b4:08:a0:89:
cc:0e:33:69:71:b5:4c:65:a0:1b:5d:05:77:05:0a:
9e:67:1e:38:a4:9d:cf:60:9b:f6:7a:8e:3f:95:8a:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E0:EC:A9:9D:74:05:ED:A9:8D:B4:AE:E4:F0:8E:31:75:7E:20:01
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MeDsqZ10Be2pjbSu5PCOMXV-IAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.1.0/24
163.5.4.0/24
163.5.6.0/24
163.5.43.0/24
Signature Algorithm: sha256WithRSAEncryption
44:75:a5:d6:9f:bc:b7:32:80:1f:a5:02:9d:8e:7a:16:25:58:
03:34:f9:9e:b6:2f:9b:06:1b:fc:cc:61:dc:a2:1d:ed:73:50:
43:59:f7:a8:32:11:86:0c:45:82:0c:ab:ae:16:68:ac:84:e5:
9e:ab:4a:e8:66:3d:ad:d7:d9:de:b3:f6:16:5c:88:f3:1e:28:
df:48:08:3b:54:c7:3c:a6:dd:cc:20:ad:aa:c8:01:63:56:5b:
8d:87:d2:76:87:1a:31:84:9f:67:eb:54:38:6d:c9:55:d5:37:
19:49:bf:8f:a9:8b:2e:44:a8:d0:85:12:6a:86:87:3c:34:a5:
d4:df:6d:c1:84:8e:ea:f4:12:96:1d:b1:2e:4a:a6:23:56:d0:
0e:98:bf:15:7c:9c:9b:5b:ca:27:45:30:cd:5a:bd:08:94:bd:
c3:97:47:de:3f:7b:b9:8d:0d:68:49:9b:51:02:aa:ae:5a:77:
b5:42:d7:b3:1a:2e:72:f1:94:8a:3f:3e:75:80:3f:cc:cf:2a:
78:06:c3:ef:62:6d:37:8d:69:8c:af:eb:7b:14:a6:c5:69:66:
fd:af:f9:22:85:ec:3c:cb:c7:b2:e9:e1:e0:a5:05:12:62:a0:
32:ac:5b:31:15:42:cb:2a:b0:3c:fc:18:25:d3:4d:2b:b0:ac:
9d:a4:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:57:28 2025 by rpki-client