Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aBc2UM1sWXJI0-zxnDiAT66E-hU.roa
File: aBc2UM1sWXJI0-zxnDiAT66E-hU.roa (raw, json)
Hash identifier: DNGzrfJYSB9xvuvuAbfY2INlkSvbSHpeA/GkW/vVEXA=
Subject key identifier: 68:17:36:50:CD:6C:59:72:48:D3:EC:F1:9C:38:80:4F:AE:84:FA:15
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01951F8AC44E76583C505B917617B0199EC1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aBc2UM1sWXJI0-zxnDiAT66E-hU.roa
Signing time: Wed 19 Feb 2025 18:49:02 +0000
ROA not before: Wed 19 Feb 2025 18:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.25.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.40.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:8a:c4:4e:76:58:3c:50:5b:91:76:17:b0:19:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 19 18:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68173650cd6c597248d3ecf19c38804fae84fa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:59:92:b3:15:68:9d:00:d4:ec:8b:24:76:
7c:c1:45:cc:19:f5:99:68:ad:e2:6e:6d:90:f0:3a:
4c:4c:c5:fb:58:ea:7c:aa:08:c3:3b:64:4f:7b:89:
2a:48:ad:1d:2c:aa:00:ca:e9:38:e8:82:a6:cb:43:
9d:2d:b9:a1:ae:2c:5b:c9:c5:0c:0c:71:1c:e8:0a:
5c:06:04:07:48:ae:58:aa:aa:d7:03:a0:6b:84:c7:
fa:c1:bf:ce:a8:36:95:dc:0a:55:35:10:91:e1:6b:
aa:13:30:e3:87:06:3a:4d:21:f2:39:1d:6e:6d:38:
c7:ed:01:9d:8e:19:fa:ac:8e:f9:e3:9f:9c:5d:b5:
b3:a0:c4:39:14:c1:ed:71:87:c5:0e:c3:b7:d3:63:
e7:01:77:a0:23:4a:ba:aa:c1:37:85:b9:b3:e5:bf:
6e:51:4c:a8:d4:bb:5d:df:bf:e3:df:a0:6f:78:57:
c4:c0:30:84:f7:44:ec:52:ac:49:c9:9c:d9:e1:39:
6a:eb:2d:f1:a1:f0:a4:ea:f6:fd:24:a5:ba:ea:88:
dd:6b:e9:a6:93:ea:e7:1b:3f:fe:f2:e4:68:e8:26:
92:08:2a:f4:61:46:2f:6d:a4:43:a3:44:0f:32:41:
5d:8b:bc:be:b0:c1:09:3a:da:43:3f:b3:84:91:fd:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:36:50:CD:6C:59:72:48:D3:EC:F1:9C:38:80:4F:AE:84:FA:15
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aBc2UM1sWXJI0-zxnDiAT66E-hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.25.0/24
163.5.33.0/24
163.5.40.0/24
163.5.128.0/24
163.5.145.0/24
163.5.165.0/24
163.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b8:b9:e4:74:9f:67:16:50:f8:60:b4:96:54:eb:bb:ef:4d:
6b:89:e8:ba:58:cb:88:48:53:71:4d:bd:49:39:47:21:23:d9:
55:7a:c0:0c:05:9d:61:68:86:66:9e:4a:e1:77:c9:c8:eb:18:
a5:57:d8:6a:0d:d0:b0:4c:d0:a6:8f:4a:aa:da:fb:3e:8d:17:
19:02:c4:01:a5:01:0a:e5:48:7e:05:fb:9f:f2:26:b5:89:ee:
1e:56:4c:82:fc:c8:a3:a6:3c:04:9a:46:c0:79:99:90:45:fd:
81:bd:4f:bb:d1:36:1e:d2:a9:6c:5f:18:05:bb:97:cc:9e:42:
7e:ca:05:03:d7:0f:f7:b7:cc:78:a1:bb:d0:51:74:aa:f3:e7:
4e:76:57:d1:97:0d:84:26:7f:64:6f:70:41:7e:cf:cb:ce:22:
1d:00:39:08:b9:79:6b:be:bf:6f:9d:fb:7d:4b:74:ee:ca:16:
37:18:4a:01:61:31:ae:2b:0f:3c:3c:91:af:6c:27:c4:2b:7f:
03:95:41:b5:f1:34:a4:08:6d:81:71:07:19:1e:f8:47:86:d9:
e4:a0:8c:bd:0f:91:a1:33:08:b1:a1:ad:3d:95:0c:4d:47:3b:
44:3b:7c:67:5d:50:3b:73:e7:34:e3:7e:36:fe:93:25:94:91:
60:43:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:37 2025 by rpki-client