Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fOOwRF8VujB3sjTLj7ltN0caMiw.roa
File: fOOwRF8VujB3sjTLj7ltN0caMiw.roa (raw, json)
Hash identifier: rEREDjoWhNBNVMDQKmKcDwaG/unSsE53kCJRXfANMNk=
Subject key identifier: 7C:E3:B0:44:5F:15:BA:30:77:B2:34:CB:8F:B9:6D:37:47:1A:32:2C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A2AD32D583257DA5E559C3428B0A5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fOOwRF8VujB3sjTLj7ltN0caMiw.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29066
IP address blocks: 163.5.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2a:d3:2d:58:32:57:da:5e:55:9c:34:28:b0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ce3b0445f15ba3077b234cb8fb96d37471a322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:4f:8c:ce:b1:f3:78:90:ed:79:92:4a:2f:
1a:d0:8d:0a:d8:7c:b6:7f:6e:c1:b6:a8:9c:57:61:
0f:7c:b5:3a:a9:ae:da:0f:ee:85:92:2f:19:48:dc:
2e:83:f1:7a:c4:8f:67:00:09:c0:11:bc:4b:5a:3d:
3a:b5:d3:24:a0:64:5c:a3:d4:b8:7e:48:08:54:d7:
85:35:33:d0:85:f0:ec:e8:b9:ff:2b:37:46:85:09:
c6:6a:6a:95:b3:4f:40:14:a4:3b:4b:3e:58:27:2d:
40:3c:7f:7d:98:16:d0:01:93:34:38:6d:c0:6a:4a:
eb:93:4a:7a:55:b2:46:d8:6a:15:5d:22:7e:1a:d5:
cf:f5:ee:25:80:30:e1:5f:af:61:3b:eb:7f:b2:ad:
f3:d9:8c:cf:a9:4e:d0:27:f8:39:8f:66:f4:09:96:
c4:a9:70:d0:0b:fd:7c:e7:f2:4f:45:bd:9b:d0:28:
47:01:73:5e:db:b0:1f:89:14:70:84:39:34:12:44:
45:bc:4c:b4:8a:86:b6:d5:ae:25:0f:e0:18:b1:fe:
80:81:0d:e7:13:bb:6b:d8:63:38:20:30:b7:97:32:
06:1c:03:08:9a:52:83:0d:c6:01:83:7d:18:3b:66:
d7:ca:e5:0e:3c:3a:e0:91:97:7a:ef:91:c9:4c:2d:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E3:B0:44:5F:15:BA:30:77:B2:34:CB:8F:B9:6D:37:47:1A:32:2C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fOOwRF8VujB3sjTLj7ltN0caMiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ad:60:ca:c2:85:3e:ba:30:5c:9d:16:16:cc:02:4d:21:f4:
44:c9:3e:10:1b:ea:7b:fe:9f:aa:b3:e2:09:cd:40:e4:5a:d6:
a1:17:09:c3:41:35:b5:71:62:bb:c8:2c:a7:0f:8e:36:f1:46:
26:ef:50:83:12:9f:cd:71:ba:a7:dd:52:a2:82:18:64:61:66:
4b:5e:4c:4e:1a:1e:9b:78:33:7c:a6:6c:71:60:d8:1f:73:6a:
ce:aa:9c:b2:e3:aa:51:05:02:d1:9e:d0:24:db:70:8d:8e:e9:
aa:66:cf:20:2f:f4:3b:c6:bc:c9:e2:21:8b:3d:dc:e9:a6:e9:
2d:e8:9a:92:3d:e4:71:1f:8c:b3:41:72:7e:73:e5:fc:f0:94:
ca:d7:dd:9b:88:ec:23:c2:42:b3:9b:35:96:64:4b:19:a8:a4:
aa:12:8b:92:f6:f6:ab:20:04:e8:de:8e:36:56:90:7c:04:51:
5f:56:cf:52:88:24:01:d9:48:a1:40:1f:68:38:1d:5d:f7:0f:
81:b8:7f:6f:0d:22:6d:4b:a2:27:db:87:28:be:2f:5c:4c:c8:
1c:2d:1e:af:20:9f:77:93:99:93:f2:b7:f1:68:3a:bf:2d:da:
38:aa:6b:05:09:72:53:5e:64:9e:c8:a4:c7:33:ce:9f:e3:30:
6b:5d:e8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:58:42 2025 by rpki-client