Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NfWendwa90h66mdlJY3X6q2IVhU.roa
File: NfWendwa90h66mdlJY3X6q2IVhU.roa (raw, json)
Hash identifier: AhJYEuxEXFQzHdFTCa9Tmk4bvSpxrDOTFIJ0lreOTCM=
Subject key identifier: 35:F5:9E:9D:DC:1A:F7:48:7A:EA:67:65:25:8D:D7:EA:AD:88:56:15
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019497962449E9B93E3377E00BE71F33BADE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NfWendwa90h66mdlJY3X6q2IVhU.roa
Signing time: Fri 24 Jan 2025 09:13:06 +0000
ROA not before: Fri 24 Jan 2025 09:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.47.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:96:24:49:e9:b9:3e:33:77:e0:0b:e7:1f:33:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 24 09:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35f59e9ddc1af7487aea6765258dd7eaad885615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:d7:16:b7:9a:45:eb:c9:28:70:1c:89:49:
8b:ba:c1:31:62:b4:05:44:dd:33:af:29:6a:62:51:
a2:9a:a7:d5:5e:1a:07:dd:99:49:41:14:ca:8a:f5:
7d:ba:a6:2a:70:81:e6:52:1b:5a:46:22:03:07:64:
c9:75:b5:81:68:df:fc:36:d3:92:e2:99:ac:d1:c2:
91:60:ae:86:b5:b0:8c:41:f1:2e:1c:44:49:66:12:
60:bf:e8:02:66:84:82:aa:d5:35:d4:b6:66:d7:be:
7e:ba:c8:05:85:eb:6d:6e:94:50:d9:36:72:d1:64:
d5:6f:fa:c4:32:44:7f:dc:e1:8f:9e:8c:7f:bb:42:
4a:b7:d3:51:13:60:ac:86:87:9b:4f:7a:c1:7a:de:
83:27:63:b2:4b:0c:9f:af:0e:90:c8:69:d7:c8:8d:
75:6e:b5:42:ae:fd:5a:c7:22:9e:a2:1c:a1:92:01:
26:df:50:a3:fd:d4:ab:b8:97:96:78:eb:41:7e:e0:
c1:58:85:da:12:5e:eb:4d:d0:80:a8:77:9c:04:e8:
38:63:af:ca:5d:4c:05:fc:02:e7:e3:ca:1a:63:e0:
da:86:e9:66:e2:93:e3:98:5d:81:f2:34:5c:d2:6c:
d4:75:31:4f:be:cd:5f:0c:ee:fb:05:86:38:52:b9:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:9E:9D:DC:1A:F7:48:7A:EA:67:65:25:8D:D7:EA:AD:88:56:15
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NfWendwa90h66mdlJY3X6q2IVhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.47.0/24
163.5.66.0/24
163.5.156.0/24
163.5.186.0/24
163.5.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:30:9d:5c:e6:1b:eb:0d:12:fc:a9:94:d2:0e:f5:bf:c4:61:
ff:cb:c3:32:e6:21:39:00:9d:42:28:5b:9c:b5:68:c8:32:e0:
30:58:af:13:a8:2e:d2:68:a7:45:7d:ec:40:f9:3e:5b:14:cc:
52:ad:f3:f8:f6:6d:5b:99:f7:2b:1c:50:58:a3:7b:fc:06:96:
9a:54:ce:e9:1a:88:14:a6:3e:03:3c:86:59:e9:08:2d:64:52:
d3:10:2c:eb:27:59:db:4f:c3:65:69:27:41:3c:d8:7f:93:ff:
21:16:25:20:0f:f6:ec:d6:24:66:66:08:0e:8d:70:84:f5:c0:
0e:33:98:2f:a5:c0:1a:35:11:c6:1e:33:42:59:ec:f1:ab:c1:
e6:38:f7:59:75:b6:ad:fc:92:82:ae:20:1d:70:3b:d1:a4:99:
cc:9e:3e:69:cc:a7:5c:bb:58:26:69:3d:f5:15:a5:b2:e9:5f:
2e:64:fb:1c:5a:5c:60:d6:6c:20:4f:66:fb:ef:01:ba:52:c9:
a2:73:ad:b8:0c:52:e4:4c:f8:ec:7e:21:80:87:49:a4:5c:c4:
dc:1e:a0:4f:95:da:ec:9c:1f:c9:6c:f1:04:15:9b:69:f6:a1:
71:57:8f:6d:56:68:4a:70:5c:07:ff:33:eb:88:1b:4f:62:ca:
22:10:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:26 2025 by rpki-client