Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SKq5EZpWu0UtnlrDu8xUP7oHxMI.roa
File: SKq5EZpWu0UtnlrDu8xUP7oHxMI.roa (raw, json)
Hash identifier: 0pg+pavZ6YhstEsbhqqaLpulyiCOYZG28FLBbDyQvy8=
Subject key identifier: 48:AA:B9:11:9A:56:BB:45:2D:9E:5A:C3:BB:CC:54:3F:BA:07:C4:C2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194734989155AB7C7B2A33594C6C1CBE91A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SKq5EZpWu0UtnlrDu8xUP7oHxMI.roa
Signing time: Fri 17 Jan 2025 08:03:06 +0000
ROA not before: Fri 17 Jan 2025 08:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59538
IP address blocks: 163.5.12.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:49:89:15:5a:b7:c7:b2:a3:35:94:c6:c1:cb:e9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 17 08:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48aab9119a56bb452d9e5ac3bbcc543fba07c4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:4b:36:7e:35:44:d6:81:2c:06:8e:d0:18:
66:e0:47:a0:f6:ce:1f:76:00:a2:9f:07:3e:e3:42:
36:d7:8d:2c:fe:d5:92:17:b2:57:f7:b2:c8:39:54:
06:21:d9:0f:86:ef:1a:28:e3:6f:29:7c:7f:8f:50:
9a:1c:91:53:a7:62:0c:1b:c8:65:62:ae:be:92:d6:
6c:6d:0a:93:8a:07:11:83:58:d9:73:7e:8c:41:85:
d6:8d:a3:54:9b:2f:28:58:dc:a7:a9:b4:2d:f7:62:
ff:3a:2a:99:84:91:c0:06:2a:82:bf:c1:5e:f7:0a:
58:ad:ff:25:4c:25:fd:cc:6d:88:03:9f:dd:7f:2c:
49:d7:2f:15:cf:ca:3d:7c:70:f9:0a:11:8a:00:eb:
5d:30:fc:76:7f:63:d3:4e:6e:f3:e0:b1:7a:8e:85:
7c:a8:e1:f3:de:6d:e2:24:b0:94:1c:66:12:57:3a:
92:e3:f6:7b:9e:f2:6a:fd:a1:0d:0c:16:b8:91:7e:
d1:6b:28:17:9c:4e:27:19:7e:d8:9a:62:d4:4e:17:
2f:2a:ee:95:3d:4b:8b:b8:1e:6f:58:e0:ea:a8:db:
6f:b9:de:b4:f0:fd:19:d0:b0:26:db:0d:19:3e:4e:
bd:65:ad:66:a7:14:a3:93:57:8b:78:65:8f:5e:ea:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:B9:11:9A:56:BB:45:2D:9E:5A:C3:BB:CC:54:3F:BA:07:C4:C2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SKq5EZpWu0UtnlrDu8xUP7oHxMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.12.0/24
163.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8c:89:ca:18:d4:4b:71:43:e0:24:29:76:3a:48:39:39:4d:
9d:44:0d:24:bd:0c:ce:1a:e5:61:ba:54:21:ad:3f:cf:33:a0:
70:d4:3c:3d:16:b6:2d:9c:43:2c:08:2f:c3:30:41:ce:90:06:
bb:c9:de:36:2e:73:b6:0e:8f:a1:34:46:00:e6:eb:a3:cb:0d:
1c:64:3f:69:47:62:45:5e:70:9f:24:13:57:da:78:cc:6e:ea:
b9:44:80:fc:bc:50:f6:11:b3:e4:e7:25:b2:55:80:2c:83:27:
67:30:e3:24:5a:5a:99:94:06:54:44:00:d9:1f:7f:8c:ed:dc:
16:cd:3d:83:89:74:b0:16:fb:52:e9:59:b2:2e:70:14:cf:08:
b8:d9:47:09:33:e3:a6:6e:3f:2a:af:f8:fa:28:1a:49:a1:9a:
58:93:62:d9:4c:88:38:b0:82:16:95:8e:22:89:d7:ec:57:67:
9d:9b:8f:46:66:e0:7f:6d:bd:30:49:af:74:dd:89:a6:70:e1:
09:64:7a:c6:de:16:5e:38:99:5a:d0:bb:60:97:74:96:30:41:
c0:55:ea:13:13:bd:fe:14:27:e8:65:af:a5:b4:72:92:8f:a5:
92:b8:28:12:bc:c4:c9:49:74:df:07:06:9d:48:c8:7a:df:34:
f6:7b:87:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRzSYkVWrfHsqM1lMbBy+kaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMTE3MDgwMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGFhYjkxMTlhNTZiYjQ1MmQ5ZTVhYzNiYmNjNTQzZmJhMDdjNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVVLNn41RNaBLAaO0Bhm4Eeg9s4f
dgCinwc+40I2140s/tWSF7JX97LIOVQGIdkPhu8aKONvKXx/j1CaHJFTp2IMG8hl
Yq6+ktZsbQqTigcRg1jZc36MQYXWjaNUmy8oWNynqbQt92L/OiqZhJHABiqCv8Fe
9wpYrf8lTCX9zG2IA5/dfyxJ1y8Vz8o9fHD5ChGKAOtdMPx2f2PTTm7z4LF6joV8
qOHz3m3iJLCUHGYSVzqS4/Z7nvJq/aENDBa4kX7RaygXnE4nGX7YmmLUThcvKu6V
PUuLuB5vWODqqNtvud608P0Z0LAm2w0ZPk69Za1mpxSjk1eLeGWPXupK1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEiquRGaVrtFLZ5aw7vMVD+6B8TCMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvU0txNUVacFd1MFV0bmxyRHU4eFVQN29IeE1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUMAwQA
owVcMA0GCSqGSIb3DQEBCwUAA4IBAQAxjInKGNRLcUPgJCl2Okg5OU2dRA0kvQzO
GuVhulQhrT/PM6Bw1Dw9FrYtnEMsCC/DMEHOkAa7yd42LnO2Do+hNEYA5uujyw0c
ZD9pR2JFXnCfJBNX2njMbuq5RID8vFD2EbPk5yWyVYAsgydnMOMkWlqZlAZURADZ
H3+M7dwWzT2DiXSwFvtS6VmyLnAUzwi42UcJM+Ombj8qr/j6KBpJoZpYk2LZTIg4
sIIWlY4iidfsV2edm49GZuB/bb0wSa903YmmcOEJZHrG3hZeOJla0Ltgl3SWMEHA
VeoTE73+FCfoZa+ltHKSj6WSuCgSvMTJSXTfBwadSMh63zT2e4do
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:56:04 2025 by rpki-client