Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cjg431i60LhdugIsOps6j1KKn6U.roa
File: cjg431i60LhdugIsOps6j1KKn6U.roa (raw, json)
Hash identifier: MCggrBsLtZ7OhTIoh5367wo+Ht0oaoScRku0p9uV2yA=
Subject key identifier: 72:38:38:DF:58:BA:D0:B8:5D:BA:02:2C:3A:9B:3A:8F:52:8A:9F:A5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A51F8679A552AE6DB8BB6F3C6130E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cjg431i60LhdugIsOps6j1KKn6U.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399641
IP address blocks: 163.5.105.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:51:f8:67:9a:55:2a:e6:db:8b:b6:f3:c6:13:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=723838df58bad0b85dba022c3a9b3a8f528a9fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:59:d1:7c:6b:b2:c3:df:82:50:4f:c2:bc:
08:ba:1c:fe:43:a3:09:a9:44:1c:87:08:22:0b:12:
5e:ec:e1:89:c6:40:a0:1c:dc:0e:08:2e:4d:79:fa:
fa:90:d4:99:f6:4e:d7:aa:34:1e:11:78:09:4b:dc:
e7:2c:3a:5b:6d:8d:3e:5c:62:6b:9d:22:c7:ad:a5:
60:3f:73:62:23:be:f7:e2:63:20:85:2b:b3:61:60:
06:f5:71:d1:2c:dc:27:5a:a7:5b:4c:30:40:b6:b8:
a0:e6:4c:f3:8b:9b:3a:26:67:b6:15:a8:89:37:93:
44:88:ba:6d:3d:e8:8d:fb:ac:b0:18:d6:c0:9c:20:
be:5c:06:66:97:e3:c4:d6:b0:47:9d:eb:f7:2e:f6:
37:a3:d3:fa:0c:c1:29:56:51:e5:34:26:49:4d:69:
bd:d7:e1:69:85:59:df:17:64:1b:e7:7f:d6:c1:ae:
bd:b2:53:6a:54:38:f2:59:17:20:ef:a0:a2:67:74:
bb:22:ce:9b:69:6a:91:14:e5:72:2a:dd:85:bb:47:
d0:13:8c:fa:b7:03:ea:a7:bb:5e:da:fc:52:fc:89:
77:6e:ed:31:06:99:fc:44:6d:6a:ba:39:0a:fb:04:
ae:9a:0b:75:dd:75:a8:0a:c4:d7:e5:ba:e4:e1:e4:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:38:DF:58:BA:D0:B8:5D:BA:02:2C:3A:9B:3A:8F:52:8A:9F:A5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cjg431i60LhdugIsOps6j1KKn6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.105.0/24
163.5.235.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9f:27:d6:b0:78:93:25:7a:be:94:31:a6:3a:5a:d6:2b:1a:
a6:75:37:e7:ee:8e:62:2c:47:00:1b:d5:05:95:33:88:b1:1f:
b3:1c:57:1f:38:2e:99:06:f8:b1:fe:12:b6:12:b5:3c:12:a1:
ec:40:8c:a4:42:ea:68:ed:b6:35:df:c5:6d:e9:b4:77:11:0c:
ec:99:20:00:65:ac:1c:72:ed:9c:ea:35:f0:2c:36:1a:13:19:
c0:23:82:75:80:3f:18:93:f3:ad:fc:1f:40:aa:ca:4e:20:11:
61:b4:57:83:af:ba:a4:3a:f5:c3:54:9a:15:07:e5:d2:ac:bd:
06:4e:d4:d3:d7:0d:6c:45:41:81:5f:53:ca:b0:f6:dd:46:48:
71:cb:7b:62:4f:e6:72:1d:d3:c6:7c:9b:63:f1:59:5c:97:b8:
8c:49:8e:f5:f1:cc:d1:bb:47:dd:38:67:bd:1b:80:d1:56:dc:
bd:9f:66:25:ba:e9:f2:93:e4:e3:3f:54:d6:28:e0:71:d3:ff:
4f:1f:a5:56:60:b2:b6:43:32:36:dd:0e:1e:15:2e:50:34:8c:
65:0d:71:0a:e7:4e:04:fb:50:44:6b:ac:b5:b3:73:26:48:20:
cf:89:3a:0e:d4:9f:95:02:24:61:4b:ab:fc:c4:6e:19:02:be:
83:ac:7d:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjalH4Z5pVKubbi7bzxhMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMTAxMTk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjM4MzhkZjU4YmFkMGI4NWRiYTAyMmMzYTliM2E4ZjUyOGE5ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAretZ0XxrssPfglBPwrwIuhz+Q6MJ
qUQchwgiCxJe7OGJxkCgHNwOCC5Nefr6kNSZ9k7XqjQeEXgJS9znLDpbbY0+XGJr
nSLHraVgP3NiI7734mMghSuzYWAG9XHRLNwnWqdbTDBAtrig5kzzi5s6Jme2FaiJ
N5NEiLptPeiN+6ywGNbAnCC+XAZml+PE1rBHnev3LvY3o9P6DMEpVlHlNCZJTWm9
1+FphVnfF2Qb53/Wwa69slNqVDjyWRcg76CiZ3S7Is6baWqRFOVyKt2Fu0fQE4z6
twPqp7te2vxS/Il3bu0xBpn8RG1qujkK+wSumgt13XWoCsTX5brk4eSTNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHI4ON9YutC4XboCLDqbOo9Sip+lMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvY2pnNDMxaTYwTGhkdWdJc09wczZqMUtLbjZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowVpAwQA
owXrMA0GCSqGSIb3DQEBCwUAA4IBAQBHnyfWsHiTJXq+lDGmOlrWKxqmdTfn7o5i
LEcAG9UFlTOIsR+zHFcfOC6ZBvix/hK2ErU8EqHsQIykQupo7bY138Vt6bR3EQzs
mSAAZawccu2c6jXwLDYaExnAI4J1gD8Yk/Ot/B9AqspOIBFhtFeDr7qkOvXDVJoV
B+XSrL0GTtTT1w1sRUGBX1PKsPbdRkhxy3tiT+ZyHdPGfJtj8Vlcl7iMSY718czR
u0fdOGe9G4DRVty9n2Yluunyk+TjP1TWKOBx0/9PH6VWYLK2QzI23Q4eFS5QNIxl
DXEK504E+1BEa6y1s3MmSCDPiToO1J+VAiRhS6v8xG4ZAr6DrH3z
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:58:25 2025 by rpki-client