Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lYSXaXt6peJwZm4r_-KsHiZq9uY.roa
File: lYSXaXt6peJwZm4r_-KsHiZq9uY.roa (raw, json)
Hash identifier: LRGHiWZ7DXJVUWM5QqXV4QdCl0bs+neoshSM942yX6M=
Subject key identifier: 95:84:97:69:7B:7A:A5:E2:70:66:6E:2B:FF:E2:AC:1E:26:6A:F6:E6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01946B05C12B0C3C31666F2D689D0CD3B827
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lYSXaXt6peJwZm4r_-KsHiZq9uY.roa
Signing time: Wed 15 Jan 2025 17:32:06 +0000
ROA not before: Wed 15 Jan 2025 17:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 163.5.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:05:c1:2b:0c:3c:31:66:6f:2d:68:9d:0c:d3:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 15 17:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=958497697b7aa5e270666e2bffe2ac1e266af6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:03:b3:c0:d6:ae:e1:9f:ae:98:12:e9:9c:
49:b9:8f:12:c0:5f:7f:c3:10:cd:d1:ef:18:36:64:
cf:b9:e1:3f:0f:e1:a1:dd:34:a3:ef:72:14:44:94:
60:14:4a:fe:14:b3:e0:fb:89:7b:67:38:11:5b:41:
05:6e:a4:97:ef:5b:b6:61:6d:a0:d6:56:d9:70:ca:
bd:11:fc:88:24:50:eb:d7:21:c2:e8:47:c8:8f:16:
06:b9:d5:f0:ee:f4:b7:f4:6e:41:4c:0b:29:2d:8a:
4d:e1:46:db:e2:d5:63:a9:3c:40:a8:ed:88:a6:df:
c4:26:3f:d5:13:3a:d0:f1:d8:d4:52:59:ee:9c:fe:
b8:71:8f:b5:b7:fe:eb:40:e2:31:db:57:46:06:77:
ba:c8:db:91:b5:bc:9d:47:b6:36:ee:cc:16:b2:34:
3e:c7:58:58:8a:43:c0:7b:f1:7e:92:35:ff:59:60:
bc:6b:d3:a8:22:03:0d:a4:7d:bb:20:e3:45:65:c5:
04:ed:55:8b:92:58:31:3e:9a:39:fe:4f:35:2b:40:
6e:7d:19:89:fe:fe:e5:53:30:2f:1e:7d:3d:8a:58:
a3:94:74:01:09:21:a4:db:29:d9:7e:ff:d3:50:21:
b1:00:d3:f7:18:90:86:be:17:ef:66:cd:a6:ac:27:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:84:97:69:7B:7A:A5:E2:70:66:6E:2B:FF:E2:AC:1E:26:6A:F6:E6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lYSXaXt6peJwZm4r_-KsHiZq9uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:87:e9:17:3f:80:55:de:36:bd:0f:26:20:68:98:0a:aa:f7:
43:ea:b9:dd:07:fe:c0:43:43:3d:6b:0f:91:af:4f:16:93:7c:
8b:69:c1:9c:ae:be:cf:1e:2c:51:ed:c7:74:aa:4b:89:d9:31:
21:13:cc:fe:81:0c:a2:31:e6:56:86:5a:16:f1:46:6d:0d:73:
5c:0e:5b:a3:3a:d8:ef:bd:96:c6:71:58:e3:16:cd:08:a7:1b:
44:86:78:04:ae:6d:eb:90:4c:70:bd:14:80:e6:56:13:d1:55:
c5:52:0a:e3:9c:4b:4a:6d:db:47:e6:cc:4e:3d:8a:50:8d:8b:
2d:3e:ed:c3:48:cf:b0:70:91:77:c9:79:26:02:63:10:26:c5:
8f:d7:6c:45:25:8c:27:92:63:ea:1e:b8:9b:0a:1d:9f:66:e6:
2a:a2:69:7b:45:a9:14:d3:42:e8:b0:f8:de:df:81:54:b9:c5:
27:9e:39:cc:aa:91:39:a2:34:8e:d3:26:ae:db:1a:25:12:fa:
6d:a8:e5:d7:23:9a:3b:17:07:bf:d4:4a:88:1f:d6:51:cf:c1:
94:de:56:39:24:17:75:5c:6a:2c:31:dd:79:43:32:e4:e0:25:
a6:7c:69:b2:d0:c2:ed:12:02:60:fe:b0:f8:32:f4:1e:76:c7:
6c:67:bf:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRrBcErDDwxZm8taJ0M07gnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMTE1MTczMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTg0OTc2OTdiN2FhNWUyNzA2NjZlMmJmZmUyYWMxZTI2NmFmNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodADs8DWruGfrpgS6ZxJuY8SwF9/
wxDN0e8YNmTPueE/D+Gh3TSj73IURJRgFEr+FLPg+4l7ZzgRW0EFbqSX71u2YW2g
1lbZcMq9EfyIJFDr1yHC6EfIjxYGudXw7vS39G5BTAspLYpN4Ubb4tVjqTxAqO2I
pt/EJj/VEzrQ8djUUlnunP64cY+1t/7rQOIx21dGBne6yNuRtbydR7Y27swWsjQ+
x1hYikPAe/F+kjX/WWC8a9OoIgMNpH27IONFZcUE7VWLklgxPpo5/k81K0BufRmJ
/v7lUzAvHn09ilijlHQBCSGk2ynZfv/TUCGxANP3GJCGvhfvZs2mrCc1aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJWEl2l7eqXicGZuK//irB4mavbmMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbFlTWGFYdDZwZUp3Wm00cl8tS3NIaVpxOXVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWIMA0G
CSqGSIb3DQEBCwUAA4IBAQAPh+kXP4BV3ja9DyYgaJgKqvdD6rndB/7AQ0M9aw+R
r08Wk3yLacGcrr7PHixR7cd0qkuJ2TEhE8z+gQyiMeZWhloW8UZtDXNcDlujOtjv
vZbGcVjjFs0IpxtEhngErm3rkExwvRSA5lYT0VXFUgrjnEtKbdtH5sxOPYpQjYst
Pu3DSM+wcJF3yXkmAmMQJsWP12xFJYwnkmPqHribCh2fZuYqoml7RakU00LosPje
34FUucUnnjnMqpE5ojSO0yau2xolEvptqOXXI5o7Fwe/1EqIH9ZRz8GU3lY5JBd1
XGosMd15QzLk4CWmfGmy0MLtEgJg/rD4MvQedsdsZ78J
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:47:02 2025 by rpki-client