Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lVG1otRzJ6cUA1XGvHBS6HgcnJo.roa
File: lVG1otRzJ6cUA1XGvHBS6HgcnJo.roa (raw, json)
Hash identifier: W+/sELR9eC4+r281SMUWV91BHauA/bUVXFrGoNhmJyI=
Subject key identifier: 95:51:B5:A2:D4:73:27:A7:14:03:55:C6:BC:70:52:E8:78:1C:9C:9A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A2A90BC8965DDBD8ACBD88954FAA7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lVG1otRzJ6cUA1XGvHBS6HgcnJo.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28708
IP address blocks: 163.5.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2a:90:bc:89:65:dd:bd:8a:cb:d8:89:54:fa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9551b5a2d47327a7140355c6bc7052e8781c9c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:4e:2c:85:99:9d:8e:77:98:29:20:5d:8d:
10:0b:bb:f2:ba:0b:3e:f3:f9:31:79:c0:90:63:e9:
6f:a2:88:7b:3c:f8:32:63:c0:b9:d0:96:28:c4:81:
d9:10:0e:59:8f:f5:4f:00:13:fb:33:98:da:ec:17:
f4:13:86:0f:36:eb:0c:de:ac:b2:ae:7a:22:b9:8b:
b2:e7:a4:f2:4b:11:81:64:b7:15:ae:b5:d7:94:b3:
2d:11:c5:67:53:3b:8f:be:9b:50:70:21:18:16:87:
48:d2:dc:95:3b:ae:ce:11:6d:a6:6e:72:3c:fb:34:
21:72:6f:07:96:86:d3:d4:af:7d:f8:02:67:a1:cc:
b0:64:fc:52:48:9d:f8:41:10:33:9f:1a:a0:d5:78:
07:31:82:8d:7b:ed:f8:6f:8d:bc:72:e3:ae:de:74:
24:23:d1:1e:ba:ad:a2:01:f1:ce:bd:7f:5d:1c:41:
7f:cd:ca:eb:88:8b:04:b3:cf:aa:87:0b:e1:5e:46:
5d:5e:bb:65:00:9d:15:99:be:47:90:42:ee:e8:4b:
9a:a9:1f:6f:b9:bd:e5:00:00:6e:66:65:80:c3:4f:
c8:94:f8:38:13:24:1b:62:f0:0b:b4:69:22:34:3d:
06:54:f7:19:7e:50:2f:fa:fb:83:a1:94:07:60:f9:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:51:B5:A2:D4:73:27:A7:14:03:55:C6:BC:70:52:E8:78:1C:9C:9A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lVG1otRzJ6cUA1XGvHBS6HgcnJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.49.0/24
Signature Algorithm: sha256WithRSAEncryption
60:03:e3:7d:ba:c4:7e:7e:03:64:a2:d4:24:82:15:33:f7:da:
48:ca:a8:65:ed:80:b6:4f:20:f2:c4:82:ef:40:45:fa:81:5c:
73:40:bf:b7:fe:c7:04:c4:c4:ef:66:3b:79:e5:ef:40:78:f4:
56:e4:38:47:72:7f:56:54:fc:c2:ed:dd:df:69:ee:f5:14:5f:
6c:e1:f3:3c:9d:4e:f4:ff:bd:48:62:7b:4f:04:be:7d:a0:f2:
22:ed:70:b1:50:ed:cb:fe:c2:62:99:63:1e:5d:6c:3a:fe:e1:
8b:30:9a:11:ba:45:8e:89:8c:a6:61:2f:d1:2a:86:b5:d3:3a:
b8:5d:95:e3:5a:c6:e5:a5:db:13:3b:4e:ad:32:0f:0e:2a:08:
99:13:93:c8:fe:5b:1d:64:61:73:13:76:d3:c6:4e:85:d5:cf:
a1:70:e3:07:30:13:3d:fe:5c:d3:5c:e5:9d:f3:3b:0b:94:84:
28:34:2a:07:a3:0d:5f:b0:f1:cd:4c:8b:72:10:ff:97:b4:90:
ce:74:12:ac:86:b9:10:6a:ff:b1:46:2a:8f:7e:d6:4b:4a:d3:
f8:bf:7b:9d:92:0c:8c:46:ec:fd:87:98:aa:4c:4f:1e:ad:37:
c2:b3:a2:a1:ec:e6:6d:bf:d1:d1:05:3f:e8:31:2d:07:d4:7f:
8b:78:0e:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaiqQvIll3b2Ky9iJVPqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMTAxMTk0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTUxYjVhMmQ0NzMyN2E3MTQwMzU1YzZiYzcwNTJlODc4MWM5YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHxOLIWZnY53mCkgXY0QC7vyugs+
8/kxecCQY+lvooh7PPgyY8C50JYoxIHZEA5Zj/VPABP7M5ja7Bf0E4YPNusM3qyy
rnoiuYuy56TySxGBZLcVrrXXlLMtEcVnUzuPvptQcCEYFodI0tyVO67OEW2mbnI8
+zQhcm8HlobT1K99+AJnocywZPxSSJ34QRAznxqg1XgHMYKNe+34b428cuOu3nQk
I9Eeuq2iAfHOvX9dHEF/zcrriIsEs8+qhwvhXkZdXrtlAJ0Vmb5HkELu6EuaqR9v
ub3lAABuZmWAw0/IlPg4EyQbYvALtGkiND0GVPcZflAv+vuDoZQHYPnHxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJVRtaLUcyenFANVxrxwUuh4HJyaMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbFZHMW90UnpKNmNVQTFYR3ZIQlM2SGdjbkpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowUxMA0G
CSqGSIb3DQEBCwUAA4IBAQBgA+N9usR+fgNkotQkghUz99pIyqhl7YC2TyDyxILv
QEX6gVxzQL+3/scExMTvZjt55e9AePRW5DhHcn9WVPzC7d3fae71FF9s4fM8nU70
/71IYntPBL59oPIi7XCxUO3L/sJimWMeXWw6/uGLMJoRukWOiYymYS/RKoa10zq4
XZXjWsblpdsTO06tMg8OKgiZE5PI/lsdZGFzE3bTxk6F1c+hcOMHMBM9/lzTXOWd
8zsLlIQoNCoHow1fsPHNTItyEP+XtJDOdBKshrkQav+xRiqPftZLStP4v3udkgyM
Ruz9h5iqTE8erTfCs6Kh7OZtv9HRBT/oMS0H1H+LeA6q
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:46:27 2025 by rpki-client