Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aES9gvtyGsqFE_ty8-iYfSdr94I.roa
File: aES9gvtyGsqFE_ty8-iYfSdr94I.roa (raw, json)
Hash identifier: 59ztIlBEQftsfCLdojXVgKSg+4VrQ6adm30kkZAgUZ8=
Subject key identifier: 68:44:BD:82:FB:72:1A:CA:85:13:FB:72:F3:E8:98:7D:27:6B:F7:82
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A3E197840A123EE97D1C41878F774
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aES9gvtyGsqFE_ty8-iYfSdr94I.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200136
IP address blocks: 163.5.141.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3e:19:78:40:a1:23:ee:97:d1:c4:18:78:f7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6844bd82fb721aca8513fb72f3e8987d276bf782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:d8:fb:e0:1e:f0:77:b4:4d:f4:8e:70:8b:
cd:f1:e2:6c:4c:38:89:fe:56:ee:28:33:07:2b:f4:
b3:24:dc:e0:c4:19:d1:e9:a1:de:88:97:98:b1:60:
69:07:d8:da:09:44:64:d3:fc:71:ed:08:de:e9:df:
35:07:86:a2:f3:42:bc:73:65:f6:1d:4c:60:00:97:
4a:a0:04:c7:d1:5e:18:9a:b7:e0:be:07:7b:e8:7a:
ab:e2:77:56:d7:d8:bb:de:05:90:98:d4:c2:d3:a7:
b8:93:25:e7:f6:47:d6:2c:25:87:e2:5a:e0:2e:e2:
58:e7:9e:30:4f:8a:bc:8b:c4:a0:d0:ca:7c:b0:fe:
f9:d1:1a:11:e1:e2:e7:ae:a0:8c:32:24:d3:a2:3d:
24:af:02:5d:16:24:50:3e:ce:c1:11:8a:9e:2f:6b:
e8:62:34:f5:62:aa:6c:b2:ec:65:13:b1:a3:a3:d4:
95:08:e4:77:c1:88:7d:08:13:ed:71:a3:f7:ea:eb:
dd:79:47:d7:cd:32:49:b6:1a:0a:fa:61:71:92:61:
e9:89:79:a2:fd:18:13:9b:d5:31:5e:99:34:70:6b:
9f:48:b9:f9:da:97:30:e0:2d:17:a2:43:c4:ba:bc:
e0:bb:15:5f:1a:ff:41:71:e4:e2:11:f8:f5:be:23:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:44:BD:82:FB:72:1A:CA:85:13:FB:72:F3:E8:98:7D:27:6B:F7:82
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aES9gvtyGsqFE_ty8-iYfSdr94I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.141.0/24
163.5.143.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7a:8d:6d:f6:29:d2:49:d6:20:12:36:94:ea:c4:d9:48:0f:
30:b0:78:a3:3d:e6:f4:87:0e:c6:4a:6d:8a:9f:e8:2e:c7:ab:
de:ad:78:2e:d9:ef:ab:11:f1:ae:73:1f:e3:93:4b:68:67:61:
0d:2a:2e:98:97:1c:5c:23:64:1b:88:d3:ef:d0:92:60:fd:76:
b2:d1:f7:1d:e7:36:4c:6b:5d:90:b4:4a:3b:6e:45:6d:82:82:
d0:84:b5:b0:eb:01:5c:78:94:6e:19:0f:fe:67:55:fe:78:b1:
cb:d1:73:02:f7:3c:49:50:ce:ec:15:74:8f:88:97:9a:2f:3b:
4a:3b:ad:ba:1a:1f:e3:d5:15:14:3e:9e:3c:7a:74:e3:1a:10:
be:00:91:6f:71:03:23:1a:b0:87:47:48:3f:0a:37:c1:4e:f2:
b3:38:86:a5:ed:05:91:1a:94:56:50:41:7d:05:b9:21:1f:af:
9e:9c:fd:82:57:a4:30:c0:3a:89:57:49:02:7d:a1:cc:d1:a3:
a2:a9:05:6c:69:2d:7c:f3:45:f5:e3:1b:bf:bc:cd:bd:d3:49:
48:55:7c:e7:65:68:5b:28:07:79:d5:82:c0:78:ce:ad:9b:b1:
33:35:3c:eb:ff:58:0c:17:90:bd:73:00:ee:54:8b:f4:28:34:
0e:52:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:47:24 2025 by rpki-client