Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i67Hnho0pWrXKhTBbey0mK3trJk.roa
File: i67Hnho0pWrXKhTBbey0mK3trJk.roa (raw, json)
Hash identifier: 8lZuaO5AE/8mJlZHZQZ2zFyU+XmxJDTiPzQqbCyhlAo=
Subject key identifier: 8B:AE:C7:9E:1A:34:A5:6A:D7:2A:14:C1:6D:EC:B4:98:AD:ED:AC:99
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196B3A05422506E0730510EA21308875EEB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i67Hnho0pWrXKhTBbey0mK3trJk.roa
Signing time: Fri 09 May 2025 05:59:11 +0000
ROA not before: Fri 09 May 2025 05:59:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 163.5.75.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a0:54:22:50:6e:07:30:51:0e:a2:13:08:87:5e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 9 05:59:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8baec79e1a34a56ad72a14c16decb498adedac99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:67:9b:33:f5:6b:89:e4:88:31:67:6d:e3:e7:
f0:e9:15:e0:c3:d3:78:c6:3e:66:d9:19:c8:54:81:
10:a6:9e:c7:60:4a:ef:30:80:22:4f:14:0e:1b:52:
52:66:65:37:0c:3c:ab:5a:06:80:ce:40:85:b1:ad:
8c:94:eb:80:4a:42:35:68:09:4a:5b:33:23:49:46:
2e:da:aa:39:f5:e7:da:f9:ae:f9:2e:8d:3d:45:c1:
8f:fd:f5:ad:00:50:12:dd:f0:9c:17:d6:bb:2a:57:
bc:99:37:3c:76:8d:28:68:cc:1d:b2:df:ca:01:b2:
0d:13:44:52:88:0f:07:9a:08:2b:43:06:78:8b:7e:
93:80:12:94:27:ac:31:49:13:a8:5e:f5:ee:7c:71:
6a:79:15:97:a4:bd:10:8d:65:6e:61:26:4e:fc:c2:
72:e8:c2:b8:de:5f:39:94:e1:fd:0f:b2:57:45:1d:
da:99:aa:3a:e0:cd:7e:66:b0:b8:09:2e:8c:0d:61:
dd:f2:ca:f6:7f:e7:4a:66:fe:ec:bb:1a:42:d2:2b:
08:d2:86:a2:91:31:7e:fa:0d:29:67:9b:c5:2d:d8:
0d:c4:a1:8d:dc:c5:d9:b9:44:a8:e5:39:27:f8:89:
5e:a5:7b:22:44:a9:e4:12:b2:c9:80:db:45:67:47:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AE:C7:9E:1A:34:A5:6A:D7:2A:14:C1:6D:EC:B4:98:AD:ED:AC:99
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i67Hnho0pWrXKhTBbey0mK3trJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.75.0/24
163.5.78.0/24
163.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:58:b5:74:e9:67:9f:42:fa:22:00:4a:a1:49:39:5e:45:0f:
b6:87:45:98:ce:86:7b:b3:88:de:cc:24:1a:fb:93:f5:61:26:
82:5a:7f:f1:9a:51:74:ae:57:05:1e:78:fc:15:6e:5f:63:48:
c9:a0:c5:63:9b:b4:35:e1:40:83:58:54:e4:3c:2a:c1:5c:f1:
f8:fe:e1:34:21:db:dd:b8:5c:d3:80:d6:3e:e5:01:67:63:e1:
46:10:57:4a:1a:af:dd:b9:3d:e7:68:b3:ca:ea:45:be:74:23:
41:92:43:f0:15:cb:4a:4e:b2:03:0b:f8:f5:93:bc:30:c5:e5:
33:78:d7:0f:c0:f9:8e:ca:43:74:69:99:cd:f9:47:09:2a:6f:
88:7c:c5:b1:67:8f:d2:b1:4e:1e:41:13:81:1d:5a:7e:d9:8a:
61:cb:7a:df:28:53:62:9e:2b:ab:cc:04:8b:74:8d:6b:9d:b2:
72:27:7c:d8:47:89:cc:16:c8:b8:8d:01:28:ab:4d:bc:66:b2:
06:24:a3:f1:34:dc:d0:6d:b9:03:ea:4b:02:d0:73:16:b4:d4:
06:39:ad:bb:c6:bd:0e:b3:f1:3e:48:3a:ae:11:2e:81:a6:43:
34:79:af:02:77:d5:10:ef:b8:8a:6b:d5:2d:17:dc:aa:5a:d8:
f4:56:e1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:12:56 2025 by rpki-client