Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hxikkDXBFMwTb-Q9_VSKKZnRHgM.roa
File: hxikkDXBFMwTb-Q9_VSKKZnRHgM.roa (raw, json)
Hash identifier: K3UoENww91kbricQ4dP+PDCMbkss2bQnh9rqfFYyQTA=
Subject key identifier: 87:18:A4:90:35:C1:14:CC:13:6F:E4:3D:FD:54:8A:29:99:D1:1E:03
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195712F9BAE6C654DB8F8BC69A1D017E224
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hxikkDXBFMwTb-Q9_VSKKZnRHgM.roa
Signing time: Fri 07 Mar 2025 15:18:20 +0000
ROA not before: Fri 07 Mar 2025 15:18:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 163.5.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:2f:9b:ae:6c:65:4d:b8:f8:bc:69:a1:d0:17:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 7 15:18:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8718a49035c114cc136fe43dfd548a2999d11e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:b1:37:9d:fe:8f:b2:c9:24:ca:96:f2:ce:
b1:9d:08:11:89:67:c7:0f:b4:06:c2:ff:20:72:17:
28:9e:76:7e:6f:2a:67:31:f9:73:74:26:7b:ab:90:
38:80:ea:db:cf:e0:c3:23:79:19:07:2a:1f:78:1a:
cf:a2:94:56:1c:89:a6:34:4a:d7:44:14:8c:9e:8f:
ca:52:a6:6f:72:db:86:0b:d0:2c:26:ee:9b:38:20:
c3:7c:46:bf:3c:31:9d:a4:65:d6:22:52:67:d4:21:
ed:01:16:00:87:64:20:1d:98:88:06:2d:25:53:1a:
e2:bc:19:df:5c:f8:90:66:a4:9d:5a:f3:b4:b9:ac:
04:5d:83:7f:ab:c9:ed:64:f6:f1:57:99:b6:72:91:
51:c7:5a:48:21:f3:df:df:bb:66:00:0e:d6:1a:19:
6b:d4:ac:ee:a5:da:5e:36:29:f1:12:a3:3b:3f:18:
e6:b2:fa:0c:2d:cf:80:bd:df:81:a9:e8:17:c7:cd:
5b:c6:78:fd:72:94:94:0b:9b:6e:3a:6d:c2:23:6b:
c3:ee:75:90:51:6e:4f:40:95:aa:aa:13:7f:ac:4e:
1b:02:64:6f:36:38:f7:c5:41:1f:fc:04:6d:9b:10:
04:80:56:be:f0:58:b0:7e:75:e3:4d:14:af:14:dd:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:A4:90:35:C1:14:CC:13:6F:E4:3D:FD:54:8A:29:99:D1:1E:03
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hxikkDXBFMwTb-Q9_VSKKZnRHgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f2:40:17:9b:0f:77:64:3b:95:02:c1:12:cc:5b:c1:7c:eb:
b8:01:a7:c9:03:a7:0a:c6:57:6a:5a:d3:05:60:28:e9:34:af:
04:7f:d1:1c:9d:5c:8a:c4:bb:ef:2a:d0:62:be:c1:87:64:47:
d7:59:45:1a:e5:e6:d0:2c:0e:b5:eb:e6:43:b4:01:b4:89:20:
95:6d:b3:4f:54:e7:8a:7f:44:16:41:08:3b:5c:5b:01:1d:ab:
7c:c9:9b:35:ca:bf:56:b2:4b:5d:0f:f7:52:57:fb:f6:74:c2:
35:24:49:7f:06:27:bf:a5:64:25:b7:05:38:05:c5:ff:66:20:
db:3a:76:36:3d:1c:a3:08:6b:a3:47:5c:b8:da:60:49:81:49:
16:8c:b1:1b:92:0e:57:b9:8f:0f:d4:88:8d:a9:e7:53:87:d8:
bd:f5:0e:39:e6:5e:d4:0d:54:d2:65:5a:68:8f:32:49:21:76:
1d:fa:41:89:f3:72:fb:e4:18:51:23:3f:b6:4d:dd:66:ff:8b:
c7:4e:5d:51:00:b5:a6:b4:2b:d8:25:13:d3:ae:58:4c:b6:e9:
c6:a4:d2:08:d6:9a:4f:bc:b6:26:79:c2:0d:ce:c6:93:6f:9b:
f7:7d:ec:b0:dc:9e:b5:4f:d3:9e:e1:c0:9e:b7:08:72:08:54:
f6:d2:e7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:29 2025 by rpki-client