Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/juD78ppTIudmNFDPL_lB1mWghkc.roa
File: juD78ppTIudmNFDPL_lB1mWghkc.roa (raw, json)
Hash identifier: VomrcCugovFaQhcK+t6PABI/5+GGhC4uaFA0j+HQ3mY=
Subject key identifier: 8E:E0:FB:F2:9A:53:22:E7:66:34:50:CF:2F:F9:41:D6:65:A0:86:47
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A47BD4D959A17EC1D9032D1BA5EFA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/juD78ppTIudmNFDPL_lB1mWghkc.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 163.5.113.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:47:bd:4d:95:9a:17:ec:1d:90:32:d1:ba:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ee0fbf29a5322e7663450cf2ff941d665a08647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:91:6a:64:fd:99:5b:02:a9:70:b0:41:24:
ed:3f:a6:b4:ed:09:b4:8d:64:bd:28:59:79:b6:7f:
ba:90:09:b2:10:c1:7f:57:90:82:d4:c7:98:e4:e9:
fb:e5:b2:ec:85:50:aa:98:e1:48:f1:17:f9:45:d1:
a0:ba:72:80:85:5b:15:ac:a6:68:4c:40:19:d7:0f:
f6:05:b5:4a:7e:95:27:99:e3:63:22:82:a7:89:c6:
4e:d4:d6:9f:3f:28:cc:83:67:12:ab:a8:6b:e3:d0:
49:03:7a:6a:1e:79:56:c6:0c:6a:c4:f8:04:63:47:
c6:49:9b:19:e6:1a:72:2d:fb:48:96:80:0d:bd:ea:
fe:ff:8a:f0:fb:a0:ba:fb:5b:d5:a8:7c:05:61:db:
26:62:da:7b:92:73:a8:10:c4:ad:5a:ef:85:63:ac:
cb:0a:77:76:25:fa:18:4b:01:03:57:16:62:94:44:
0a:3b:e8:19:e6:45:cd:3b:c9:7a:d9:fc:48:ec:04:
1e:af:43:a5:e4:f6:78:33:65:2f:1d:40:03:4e:0f:
3e:f1:23:20:69:4c:a2:34:b8:b6:18:ba:11:96:54:
00:2c:b4:9c:ca:92:dc:17:57:3a:7e:5d:e9:c5:95:
5f:6f:10:8d:d3:14:02:6f:4c:7a:c3:54:23:3c:e3:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E0:FB:F2:9A:53:22:E7:66:34:50:CF:2F:F9:41:D6:65:A0:86:47
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/juD78ppTIudmNFDPL_lB1mWghkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.113.0/24
163.5.146.0/24
163.5.224.0/24
163.5.234.0/24
163.5.236.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e0:2b:7c:d9:02:fa:73:cb:73:f3:29:95:17:6f:61:f3:f1:
36:1d:b3:06:5a:b5:48:aa:cf:0e:9a:b4:58:43:50:46:f0:7b:
3f:09:00:bf:2a:c4:af:a0:ea:f9:39:43:79:57:49:0d:d7:41:
d0:a7:3a:05:e9:3e:24:d9:57:ac:f8:71:e4:a7:b6:f4:16:6c:
b2:17:6a:67:a3:14:46:2e:fe:2c:c8:71:0a:a0:ed:fe:d2:2b:
5a:a3:6f:9a:37:83:af:61:91:dd:38:f5:42:7d:75:f4:a3:f8:
45:fc:78:1f:09:8e:bd:9c:7a:46:30:36:c8:74:28:04:b6:23:
d1:b9:7e:cc:54:0d:25:1c:96:23:c6:2e:d2:d4:3e:cb:46:93:
65:0f:e9:fd:25:7b:97:92:dd:fd:95:4c:72:4a:11:4b:83:5f:
40:12:33:ff:32:45:cc:63:99:9e:bb:7e:0b:aa:8a:1f:ca:f0:
43:d8:c2:ae:9f:02:0e:ce:2d:0c:3e:9d:e1:a2:2a:fc:fd:2e:
74:8a:ee:89:79:60:e8:51:92:d4:d7:d2:6e:a6:7c:dd:b8:46:
2e:b4:53:d8:d0:bf:39:d6:f9:5e:14:8d:18:03:61:41:48:ae:
f0:3e:e3:5c:18:84:a2:7d:af:b7:7b:d6:8a:c5:6c:bc:60:1c:
ba:21:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:57:37 2025 by rpki-client