Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PeZ7gr_rSjVq8cuTTd90tnDg9lk.roa
File: PeZ7gr_rSjVq8cuTTd90tnDg9lk.roa (raw, json)
Hash identifier: I0vZNsPpD8Gz+3s3m0LePbjAJ9xVOpY7X3ONc5x0J3I=
Subject key identifier: 3D:E6:7B:82:BF:EB:4A:35:6A:F1:CB:93:4D:DF:74:B6:70:E0:F6:59
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195A9C8489E00FDE3E543109E80FF448C0D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PeZ7gr_rSjVq8cuTTd90tnDg9lk.roa
Signing time: Tue 18 Mar 2025 15:03:50 +0000
ROA not before: Tue 18 Mar 2025 15:03:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138195
IP address blocks: 163.5.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:c8:48:9e:00:fd:e3:e5:43:10:9e:80:ff:44:8c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 18 15:03:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3de67b82bfeb4a356af1cb934ddf74b670e0f659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:fd:20:a9:f9:a9:ae:b3:19:2e:24:a5:4b:
4e:09:b5:f6:81:72:13:20:8b:4d:7e:36:55:d6:fa:
34:11:4b:0c:2f:af:91:a9:da:21:d8:ff:00:ff:e5:
3f:0e:a8:b3:86:c9:65:fb:d8:58:e2:eb:27:6a:24:
dc:80:da:c1:12:6b:ad:74:70:e0:88:f4:e4:da:0f:
02:f1:6f:e8:ef:54:a2:34:8c:8b:14:23:91:38:9c:
17:c5:e5:f5:14:48:9f:43:f4:9f:ff:90:2f:c8:3b:
d1:a5:ce:08:04:78:02:a4:21:f2:79:8f:24:53:d1:
f2:c7:b5:1a:6b:d3:40:9c:e6:d5:4f:d6:85:bd:6e:
60:37:9b:44:77:a6:e1:73:56:f1:05:1c:dd:d1:5e:
e0:e3:66:dd:29:c7:5c:ff:2e:15:50:d9:10:63:f5:
9d:ac:e3:96:4e:20:50:58:f9:86:60:62:92:c8:b8:
76:97:b4:df:57:54:eb:96:93:e7:f8:fa:fe:c0:b0:
38:f6:96:8f:74:7e:bc:1c:c6:56:a8:1a:8c:55:86:
e9:cd:f4:05:15:7d:0d:41:19:91:12:a3:80:9f:13:
7a:ba:1c:47:5a:bb:c6:a5:d9:62:0d:75:a9:07:0b:
6b:b5:68:b9:aa:2c:14:ec:40:e6:9f:88:34:92:ca:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E6:7B:82:BF:EB:4A:35:6A:F1:CB:93:4D:DF:74:B6:70:E0:F6:59
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PeZ7gr_rSjVq8cuTTd90tnDg9lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b1:eb:58:39:0b:34:93:7c:4a:eb:38:c8:27:ae:3d:f4:77:
fe:ee:c1:fa:fb:57:0a:ae:6c:ca:17:19:07:6e:64:99:53:a0:
90:a8:5c:f4:39:9a:9c:a6:92:22:33:36:44:e6:4f:ab:e9:5c:
71:2b:8d:f7:98:c7:27:71:00:ef:48:65:6f:c1:6b:9e:6e:3b:
5b:eb:19:cd:81:b7:59:a6:ad:48:73:68:2d:ee:5c:12:ec:7e:
97:93:97:93:dc:43:9b:f9:7d:03:0f:fc:6a:af:e2:48:78:87:
3a:98:71:1a:32:3e:60:ac:b1:ef:d2:6b:ae:46:a7:11:10:1b:
6b:45:0d:bf:1a:f1:19:95:10:33:34:2b:6e:94:63:12:2c:b0:
df:43:96:c3:a5:e3:cd:0d:e8:6e:64:b6:94:32:e0:33:55:36:
dc:9e:ce:9d:77:64:5a:8d:b2:09:7b:b6:bd:2f:1a:ce:bd:84:
4e:fc:03:7b:71:a2:9b:dd:d4:21:09:d0:84:13:71:e1:20:94:
42:3d:b3:d7:7c:9b:5c:9c:72:4c:12:d8:b6:5d:b8:38:4a:68:
a8:bc:86:9c:eb:ab:08:c1:e4:a1:d4:b6:14:3c:fa:75:25:5c:
9b:16:d9:ea:65:83:40:fb:a6:b0:2f:82:13:b1:4b:b2:aa:b0:
51:e8:f5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:44 2025 by rpki-client