Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UNt8x3VQL9FG4kuXIvTegikdGXc.roa
File: UNt8x3VQL9FG4kuXIvTegikdGXc.roa (raw, json)
Hash identifier: 7OQmwTl3Q0sDMN6l4wxlq/Fl8lPQ5D1qtKL/McsqNlc=
Subject key identifier: 50:DB:7C:C7:75:50:2F:D1:46:E2:4B:97:22:F4:DE:82:29:1D:19:77
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A27799A664AA70856CE6ECE251922
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UNt8x3VQL9FG4kuXIvTegikdGXc.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 163.5.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:27:79:9a:66:4a:a7:08:56:ce:6e:ce:25:19:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50db7cc775502fd146e24b9722f4de82291d1977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:a1:ba:58:9b:12:c6:c9:0a:fb:6d:7c:39:
c3:e8:e8:f8:74:c1:9c:55:b9:20:c0:5a:a6:cd:dc:
87:33:73:96:d2:69:3e:d4:1e:87:fb:bf:51:eb:30:
b0:5d:70:4a:83:22:5c:36:bd:ec:ff:18:8e:7f:7f:
25:ae:6b:e9:ae:bf:2b:42:6e:04:01:6c:75:0b:e1:
17:72:34:53:44:bc:7a:80:98:87:88:1a:fb:ff:87:
c8:98:ad:48:8f:83:72:95:17:78:02:79:c5:38:dd:
27:e6:aa:4f:73:09:37:25:20:9b:70:5e:13:e7:d0:
c5:84:72:fe:51:d1:c8:12:7d:e3:c5:f3:10:ab:6b:
75:63:1d:34:2a:91:8a:e2:0b:4f:99:60:e7:17:94:
a0:01:0a:57:62:e9:e7:7f:d8:b2:9f:82:f8:ba:ff:
83:44:75:61:d4:15:ad:a2:e5:9d:18:2b:f7:6d:20:
3e:08:db:1f:87:03:a1:23:5e:31:b8:af:28:79:84:
23:18:0d:cd:8b:2d:d7:0a:72:6c:b9:ac:b8:00:e8:
ff:79:a1:b7:89:80:bb:84:41:d3:d6:a5:8e:5a:59:
ef:c3:cf:f9:ee:aa:51:9b:a1:d3:3a:3d:6d:da:95:
74:a4:b4:6f:d5:88:96:15:e3:22:a6:fc:e2:d5:09:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DB:7C:C7:75:50:2F:D1:46:E2:4B:97:22:F4:DE:82:29:1D:19:77
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UNt8x3VQL9FG4kuXIvTegikdGXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.94.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f7:34:22:72:1c:a4:36:51:59:95:ec:95:56:cc:92:80:0c:
96:5d:59:4e:56:f6:74:14:6e:9d:1e:cd:60:f3:58:ae:51:a5:
e5:cc:9a:77:ed:47:d5:39:68:77:55:05:44:5a:31:45:9a:82:
c6:e4:41:ef:fe:0b:0a:cc:b8:c9:56:e5:fd:ce:ad:26:a7:11:
62:77:5d:dc:e8:75:f8:77:4c:2a:0b:b2:47:84:8f:2d:c4:9b:
da:d0:3f:73:aa:ce:9c:fd:21:02:85:27:6e:de:b3:b3:93:3a:
cf:ea:b6:3a:30:a7:da:d3:94:3e:0a:53:58:67:38:d0:7e:9f:
1e:ab:da:22:7a:2a:e7:d0:ef:cf:11:d4:bb:2b:71:02:86:75:
e4:14:ac:c8:8f:e2:80:d2:6f:91:2d:bc:3a:fb:77:db:d0:d2:
01:94:fa:b6:f8:9c:65:0f:ea:a9:65:ed:03:b1:51:7e:5f:f4:
fc:bd:a1:c8:48:41:59:41:37:d8:ee:40:f5:0d:7d:4f:e2:dd:
12:f0:50:90:f9:ef:d8:bb:ac:ab:ac:ab:51:4d:b0:4d:1b:87:
24:93:61:ad:a7:af:ee:25:b2:ad:90:b5:a9:70:a3:5e:40:b7:
cc:50:e4:fc:05:ae:32:c6:09:96:6f:cf:43:bd:d4:7f:20:63:
8e:2d:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:52:50 2025 by rpki-client