Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bFDB6YecDTwiEbsy48HKgmuSU9g.roa
File: bFDB6YecDTwiEbsy48HKgmuSU9g.roa (raw, json)
Hash identifier: 3NjeKt5ApfP1pb9N2XWYSnBQ7t7kPgHfnP/+QJ3Ilrc=
Subject key identifier: 6C:50:C1:E9:87:9C:0D:3C:22:11:BB:32:E3:C1:CA:82:6B:92:53:D8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A42C06D4A034AD5E3C1ACBDAD7D92
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bFDB6YecDTwiEbsy48HKgmuSU9g.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:42:c0:6d:4a:03:4a:d5:e3:c1:ac:bd:ad:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c50c1e9879c0d3c2211bb32e3c1ca826b9253d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:8d:92:9b:b6:ac:78:0d:f2:17:50:11:50:
fc:3e:e4:3e:2a:5e:bc:c5:43:99:cb:f7:86:81:b5:
7f:d1:ff:0e:ed:4b:44:3f:e3:fd:c7:27:13:7d:84:
75:fb:0e:9d:7e:38:9a:2a:64:6e:b3:99:fb:14:c7:
82:7c:7c:d0:f4:76:c1:34:01:35:93:56:05:bb:da:
00:2f:3a:73:73:76:fc:83:3d:3e:d7:4d:b2:78:01:
63:e6:34:ba:54:78:10:4e:c4:55:2d:97:18:0f:9f:
45:67:c2:6f:cd:00:9f:82:78:03:c7:00:ab:cd:f5:
26:0a:e8:9a:93:4d:9a:58:e1:3a:fa:b4:66:de:e0:
ed:04:d6:64:83:5d:1d:8a:65:ac:09:ad:28:69:9a:
c8:eb:6e:d3:50:c3:5f:37:3a:cf:19:75:d6:a5:b3:
fa:b4:aa:ca:8a:31:5f:00:a1:fd:86:c0:97:55:ae:
5a:0c:ef:84:f8:6f:3c:c9:f9:ba:5f:fe:f7:0e:39:
9b:b5:a1:53:7c:45:aa:b7:93:df:cf:62:58:05:21:
c6:c3:b5:e2:3c:7b:24:b8:d7:5d:52:d5:dc:30:0c:
03:40:6a:27:af:9a:80:af:49:59:36:ce:8e:e0:e7:
8b:b7:28:fd:a5:99:04:d9:25:57:c9:3e:2f:85:80:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:50:C1:E9:87:9C:0D:3C:22:11:BB:32:E3:C1:CA:82:6B:92:53:D8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bFDB6YecDTwiEbsy48HKgmuSU9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9b:34:f8:65:26:5e:a5:9b:83:64:12:7a:8a:1c:17:bb:15:
a2:ac:69:26:4c:4a:35:5f:c4:82:3c:97:a1:32:2c:4d:07:15:
76:d6:70:35:58:46:48:07:1c:19:d6:29:fb:ad:82:c7:85:4c:
c7:0a:22:52:0e:c8:ac:f4:0d:97:21:a1:7a:8e:15:a0:8c:d5:
0f:48:7c:79:5c:51:22:bf:45:79:f9:f7:5b:e2:fe:be:eb:e3:
1c:fa:36:db:b6:8b:0b:d9:08:3c:83:5a:ba:db:48:c7:ea:fb:
e2:b8:95:71:52:44:af:e7:3a:95:88:1d:e3:93:50:04:9b:29:
66:f5:0d:32:62:b7:51:14:1a:b4:1f:8c:1a:15:f0:b5:58:6d:
40:57:e8:3b:f7:c2:69:3f:c4:d8:2a:3c:ab:58:41:3b:4f:b8:
df:11:4a:27:65:af:0c:a5:64:78:05:02:57:7d:20:a2:08:c2:
83:da:24:2b:45:09:f8:9b:cc:ce:b0:8a:50:69:c4:35:8d:05:
fe:de:40:52:1f:18:a6:2c:5a:9d:56:a8:a6:b4:76:97:da:7c:
ca:3a:1d:8c:7a:fb:09:f6:b0:1c:dc:25:62:eb:7f:a4:ee:ba:
6b:c0:28:33:6d:4d:f8:f0:7b:8c:a6:f9:ee:ac:4b:22:84:4c:
34:67:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:44:36 2025 by rpki-client