Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vg1-5MR8dXiH-d03U3X_AryVPVs.roa
File: Vg1-5MR8dXiH-d03U3X_AryVPVs.roa (raw, json)
Hash identifier: 88H3rTiABnyhvcsq5wIKbz55rBdfAfOVBido+xUZyFw=
Subject key identifier: 56:0D:7E:E4:C4:7C:75:78:87:F9:DD:37:53:75:FF:02:BC:95:3D:5B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01972B39267A05B4F28F670042C6AFF6E322
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vg1-5MR8dXiH-d03U3X_AryVPVs.roa
Signing time: Sun 01 Jun 2025 11:20:55 +0000
ROA not before: Sun 01 Jun 2025 11:20:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.66.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2b:39:26:7a:05:b4:f2:8f:67:00:42:c6:af:f6:e3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 1 11:20:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=560d7ee4c47c757887f9dd375375ff02bc953d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:12:36:30:bc:a7:03:c7:c4:d9:c2:17:8e:
68:20:b5:fa:30:21:5a:94:0b:20:27:54:53:42:3b:
49:7b:a1:73:f0:8b:74:ad:00:6a:c5:02:fd:03:22:
ba:04:6f:70:5f:2b:54:8f:5a:eb:78:05:58:7e:23:
77:d7:30:85:b7:88:c7:b1:4d:de:5e:2c:f1:7a:52:
57:a8:99:94:6f:c4:c3:15:ae:13:4a:e1:e8:39:51:
a5:76:c2:3a:82:c9:8a:a9:51:30:03:de:6c:63:cc:
9e:98:25:cd:95:e7:c4:ff:5b:ba:24:df:77:05:d2:
2d:64:e0:e7:53:0b:ba:20:53:ad:78:10:c1:4a:52:
6b:6d:a2:e5:0c:37:15:94:72:e5:0f:47:b3:89:ef:
99:24:97:78:8f:3e:1c:dd:c2:5a:52:e2:15:56:73:
d3:72:76:63:77:82:97:4a:8f:75:7c:b4:fb:50:c8:
0c:3e:97:29:ce:85:46:bb:a5:7a:ee:9f:80:41:47:
40:2b:c8:61:29:ad:80:a7:c0:85:54:32:9a:46:6e:
17:4f:c4:c2:d3:ff:93:9d:61:9d:48:11:ac:74:de:
3d:d6:ae:e2:22:26:04:88:d1:b3:08:76:f9:a1:4a:
3d:d5:e3:a9:f7:d2:ec:34:b9:a7:35:4e:dc:74:e1:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0D:7E:E4:C4:7C:75:78:87:F9:DD:37:53:75:FF:02:BC:95:3D:5B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vg1-5MR8dXiH-d03U3X_AryVPVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.66.0/24
163.5.118.0/24
163.5.153.0-163.5.154.255
163.5.177.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a2:e0:3f:26:a0:24:45:03:84:a6:37:b7:e5:dc:70:51:7d:
dc:d5:df:80:c6:bc:7e:61:60:9c:6b:28:79:6e:77:0d:66:a4:
e4:4e:30:4b:e6:3e:3b:99:69:50:91:9c:d2:5d:a7:71:ef:41:
e1:46:db:fd:71:35:de:fa:5a:d5:5b:43:70:fc:1c:9c:02:a0:
12:74:a7:f4:30:1f:6b:6c:12:55:5d:bb:d6:47:4e:1d:2c:cd:
f9:0f:53:8c:44:cc:9c:91:cb:4c:bd:b7:5e:60:d6:b2:cb:f4:
01:9d:d7:22:6e:9f:7e:b5:c5:d4:48:2d:8a:3d:7b:1e:e8:67:
e4:93:83:7c:72:66:2a:9f:61:bb:2c:db:23:e6:18:4e:04:1a:
f2:d1:67:a0:83:ed:79:e2:30:9f:4f:ef:74:10:aa:84:50:16:
9d:5a:c3:7e:de:fb:93:f8:d6:dd:78:57:6e:2f:5c:4b:d8:32:
85:99:bb:1d:4a:a3:6a:f8:67:ee:f0:2c:8a:ed:fa:d4:ec:11:
fa:bb:4b:a9:e5:db:01:1e:ac:a4:f4:c7:1d:59:17:eb:6c:bc:
c3:29:7e:e3:06:11:55:54:d2:7e:37:e2:68:b9:75:42:88:48:
b3:ac:ce:ac:65:f7:c8:94:95:0c:b9:55:b3:e5:87:09:e9:e5:
4c:43:a8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:12:53 2025 by rpki-client