Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d_leXZWrppcforVhLDmdQBQkdQk.roa
File: d_leXZWrppcforVhLDmdQBQkdQk.roa (raw, json)
Hash identifier: DdZ7M6sIT5cJ1dD5/jJMwTEY9sKNBJVGlLyTo2uXtEg=
Subject key identifier: 77:F9:5E:5D:95:AB:A6:97:1F:A2:B5:61:2C:39:9D:40:14:24:75:09
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195231AA26ED219D9F05150B70B2EEE8ADE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d_leXZWrppcforVhLDmdQBQkdQk.roa
Signing time: Thu 20 Feb 2025 11:25:02 +0000
ROA not before: Thu 20 Feb 2025 11:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:1a:a2:6e:d2:19:d9:f0:51:50:b7:0b:2e:ee:8a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 20 11:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77f95e5d95aba6971fa2b5612c399d4014247509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4d:7f:7a:19:ed:1c:c3:48:45:ed:83:d0:08:
f3:ab:bb:76:8a:7d:50:f1:4c:86:19:70:ad:e9:fa:
3a:16:cd:49:8a:aa:23:f2:13:89:1d:c9:d6:7b:ec:
1c:85:3b:78:99:20:7e:c5:ae:ad:19:01:3d:48:60:
7a:84:c3:d7:c8:59:41:8a:91:2b:54:6c:0d:01:38:
7e:6a:10:9b:e0:91:82:5a:b7:a7:e0:87:76:09:4f:
b1:a7:56:b8:a1:15:35:39:0c:63:1e:e2:92:f7:10:
66:a6:97:6a:02:f5:5c:c9:e0:17:c8:51:71:4b:06:
fd:08:ea:da:2f:cd:47:aa:2c:3e:01:65:71:e1:a4:
03:cf:8b:17:19:89:28:2a:62:d9:b0:0f:d9:01:25:
e3:ad:09:12:fe:0b:a9:66:95:9e:9d:05:9a:eb:79:
14:64:30:d4:4d:b4:e7:60:94:d9:b8:b5:06:6c:c6:
68:ea:ef:31:83:26:05:fc:18:f5:57:7e:00:73:e7:
3d:93:80:a0:2f:c6:56:8e:fb:77:8d:51:cc:cf:13:
05:93:fd:58:6f:b7:f0:0f:51:70:42:c9:7f:4f:20:
4f:e7:72:42:c4:df:d1:25:0b:2f:f3:1d:76:3c:40:
81:19:32:03:80:85:ae:b6:26:cb:40:45:d8:62:43:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:5E:5D:95:AB:A6:97:1F:A2:B5:61:2C:39:9D:40:14:24:75:09
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d_leXZWrppcforVhLDmdQBQkdQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.47.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f6:59:cb:a2:92:76:75:2f:c6:05:ed:e5:af:65:46:bb:f7:
72:0b:af:8d:79:aa:11:bd:3d:52:8e:d3:47:fd:ad:6f:75:aa:
f2:97:95:14:5d:bb:14:92:3f:6b:93:a6:46:89:56:e0:1e:4e:
b3:cb:56:e9:ad:80:24:3e:46:0e:6e:ae:f0:be:a9:c4:1d:66:
43:2a:e0:8c:2b:ea:a1:23:40:04:0f:3a:ef:3a:6d:b7:7d:de:
6e:eb:b8:94:94:d7:88:bd:08:7f:65:d3:3f:9b:c4:1b:11:eb:
a6:a2:10:c2:73:7b:07:81:4b:40:ee:c4:6d:14:cc:9f:ca:4f:
23:23:b5:23:1b:49:fb:49:84:47:6a:13:15:e7:89:0e:cb:5e:
63:14:1b:d9:d1:1f:11:a9:b3:4e:b7:19:2d:52:23:ac:a9:44:
92:04:25:4e:83:ac:f4:29:80:16:f4:ac:6e:6a:37:0b:63:ae:
71:a5:6c:1f:16:13:6d:99:b5:15:d3:93:30:01:db:9c:e3:92:
12:71:d3:07:d0:90:73:34:19:53:a5:a2:45:7f:34:36:a0:89:
88:a1:92:f7:2b:c8:a6:47:d3:e6:be:ff:ce:49:aa:70:a3:32:
02:89:83:e6:56:d0:ce:49:96:ad:0a:9d:42:ae:08:93:9c:34:
5b:e8:2f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:53:35 2025 by rpki-client