Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gU6WhBlAYG81SwsGNonoegNV3s0.roa
File: gU6WhBlAYG81SwsGNonoegNV3s0.roa (raw, json)
Hash identifier: kYccgXK/D6W9IgTsE4mx04d2lIrt7UjCWHQ3AnNW2ys=
Subject key identifier: 81:4E:96:84:19:40:60:6F:35:4B:0B:06:36:89:E8:7A:03:55:DE:CD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A4E2DC63680E35B165D527153A64C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gU6WhBlAYG81SwsGNonoegNV3s0.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216089
IP address blocks: 163.5.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4e:2d:c6:36:80:e3:5b:16:5d:52:71:53:a6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=814e96841940606f354b0b063689e87a0355decd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:06:5d:81:79:fe:ef:ce:6b:23:8c:8d:5f:
7e:85:b2:90:f7:1a:f5:c7:26:0e:91:0e:8a:87:28:
84:dc:b4:6a:89:a5:ae:56:08:c2:29:0c:09:ea:7b:
3b:ae:df:f3:7f:02:f6:c0:49:43:ed:53:3d:41:94:
c4:e8:74:5b:19:4a:ee:88:e1:6d:e6:fc:d2:a5:d4:
4f:08:cd:08:ef:1b:fd:89:1d:1f:22:1b:55:70:d3:
62:31:cb:d9:cf:b1:fe:56:87:34:8f:11:06:3c:ca:
a6:10:cf:ff:85:88:da:4b:a0:0a:e5:bf:14:9c:a2:
47:6b:81:d9:ef:78:ca:14:f7:b1:1c:1f:28:92:ba:
5e:49:48:14:fa:19:c6:3b:e6:2e:ac:16:98:0d:b5:
fe:1f:1a:c2:34:93:70:4c:ac:4a:57:bd:14:48:95:
dd:d7:4e:43:6a:38:bb:58:16:6f:c6:6c:f4:dc:fd:
b6:ce:29:02:ed:79:ef:26:98:e7:58:62:0e:2e:e0:
cd:3e:65:34:61:e5:bb:ea:71:e0:d5:22:74:b8:5b:
8e:b3:c8:99:4d:53:20:9a:fb:64:81:6e:dc:de:54:
f7:82:3a:5b:9d:31:8a:89:bd:4b:87:0b:da:4b:0c:
bf:b7:51:cf:c1:76:a0:ed:0c:e2:10:4c:17:79:51:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:96:84:19:40:60:6F:35:4B:0B:06:36:89:E8:7A:03:55:DE:CD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gU6WhBlAYG81SwsGNonoegNV3s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ce:8a:24:b4:75:a1:e6:d9:71:0c:61:61:2a:1f:c7:1d:9c:
e6:fa:4f:aa:df:aa:07:9b:aa:cf:2e:81:3a:45:4e:7e:07:5b:
1d:ac:55:de:98:a5:29:6d:3c:46:6b:85:cf:9d:5a:d6:c2:75:
03:a4:d1:dd:cc:c5:57:cf:13:3e:bc:1d:91:2d:cf:64:c1:b1:
60:75:8b:de:a8:f1:50:77:08:16:57:21:c6:5b:b4:9d:5a:cb:
db:4f:3a:25:14:ae:ae:35:6a:d1:dc:ff:5e:39:ff:44:f4:9f:
95:f8:2c:ed:45:5b:0f:e6:65:ed:ea:e7:b5:1c:38:58:22:19:
da:50:69:d0:a3:ea:c0:fc:15:76:40:ff:19:51:e9:40:5b:16:
e2:be:ed:01:5f:d7:a1:a3:2a:96:47:01:c9:25:6a:b1:c0:47:
0c:a7:ce:e7:c4:b1:75:85:b0:a5:82:1c:a1:53:1e:3f:e7:93:
8d:00:c1:6c:4c:e4:09:29:e1:29:6e:b8:3e:cf:e9:5e:ec:0a:
bb:39:eb:0d:bf:2c:40:c8:ad:f8:54:5d:9c:44:70:4e:e2:6d:
ed:fa:dd:52:01:d1:51:d1:c1:3f:74:21:a8:98:17:ba:9d:7a:
a9:2f:6e:76:fd:26:af:1d:c6:e6:c3:26:b3:42:ad:26:ac:65:
54:20:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:48:13 2025 by rpki-client