Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n0St1MSjbPZdcDLPDRMm7-7zsQ0.roa
File: n0St1MSjbPZdcDLPDRMm7-7zsQ0.roa (raw, json)
Hash identifier: D4S0kzJMAGZvLYqWk1G042rZkblWr6Bu/a/+H0AtauI=
Subject key identifier: 9F:44:AD:D4:C4:A3:6C:F6:5D:70:32:CF:0D:13:26:EF:EE:F3:B1:0D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A1CF23AB5BD678176DF3385288DF5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n0St1MSjbPZdcDLPDRMm7-7zsQ0.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 163.5.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1c:f2:3a:b5:bd:67:81:76:df:33:85:28:8d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f44add4c4a36cf65d7032cf0d1326efeef3b10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:7a:31:d7:dc:f8:a9:b4:6f:a8:75:75:19:
a6:34:c3:1c:cb:35:d8:9f:90:f6:9e:40:08:7f:40:
4c:a9:5f:2b:f0:e0:32:a3:b9:19:c9:34:fe:d0:d7:
3f:e3:e3:60:de:3d:a6:68:0a:40:96:96:da:5a:21:
39:50:7d:14:f0:81:85:e6:19:b0:08:bf:c1:47:14:
92:bd:97:9d:db:e4:86:db:f6:94:b1:2c:60:8e:a9:
8d:51:ac:a3:98:90:25:c2:1d:c0:49:70:e4:ff:02:
80:a1:96:0d:b5:da:c7:d2:bb:e4:01:00:e1:3d:5d:
cd:9f:c1:7e:f2:dc:fe:4a:b2:25:8c:3f:6d:3f:99:
0a:1e:5e:bb:9f:e6:ba:65:6c:04:62:23:28:f3:05:
15:c5:78:47:1b:93:95:e0:fe:f2:c3:4f:b4:3e:2c:
e7:81:a9:42:74:9a:c1:23:b6:38:d9:19:df:33:e6:
f4:37:f2:2c:bc:57:5e:1e:1e:4a:79:a2:a0:32:81:
4f:68:78:6c:73:7a:d7:f3:4c:87:c1:06:fa:d3:c8:
41:04:7f:f6:5c:04:cb:75:12:3d:10:11:8e:4e:be:
66:54:92:25:79:a4:89:bd:02:04:62:d8:5e:3a:04:
da:a8:9c:f4:92:1c:18:81:bf:06:08:69:e2:74:8c:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:AD:D4:C4:A3:6C:F6:5D:70:32:CF:0D:13:26:EF:EE:F3:B1:0D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n0St1MSjbPZdcDLPDRMm7-7zsQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.16.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d6:48:32:d5:6f:49:6e:c0:45:7d:00:e0:f7:b1:cd:60:6a:
46:20:84:37:e7:4e:72:75:96:50:f4:88:88:dc:0c:0e:c0:52:
e9:46:4f:78:6c:48:cf:76:80:8f:ee:76:fb:4b:57:c0:92:1a:
33:e0:f0:2a:47:59:d0:2d:b1:7c:a2:d3:59:fb:e9:98:48:07:
27:92:9b:53:d4:e5:1f:fe:51:3a:b3:3f:98:b0:cd:77:cf:65:
9d:9b:ec:8e:4e:09:0d:f2:54:db:b6:e8:b8:e5:a6:55:a4:da:
a0:e2:91:4f:49:3c:d8:07:77:08:73:28:ef:a8:26:d4:e9:de:
01:26:6c:44:70:ec:07:aa:9b:c3:2a:03:11:dd:87:99:b6:e8:
d4:08:96:c9:4e:8b:af:25:3c:7c:0c:4d:98:28:69:64:25:6a:
ba:5e:d7:e1:f3:7d:53:c7:1c:0a:12:31:ed:bd:c6:4b:bd:68:
20:4f:13:73:a4:04:cc:3d:34:24:a8:11:b4:92:1d:ef:53:91:
de:37:40:72:85:68:ef:86:50:e2:b6:31:48:fc:23:b2:9d:db:
6c:80:7f:6b:84:44:da:7e:13:48:fe:9c:e6:69:d9:62:a0:c3:
97:16:cc:8e:52:08:85:8f:ff:9d:4b:ed:5c:bf:92:48:4f:44:
6c:2c:39:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjahzyOrW9Z4F23zOFKI31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMTAxMTk0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjQ0YWRkNGM0YTM2Y2Y2NWQ3MDMyY2YwZDEzMjZlZmVlZjNiMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkx6Mdfc+Km0b6h1dRmmNMMcyzXY
n5D2nkAIf0BMqV8r8OAyo7kZyTT+0Nc/4+Ng3j2maApAlpbaWiE5UH0U8IGF5hmw
CL/BRxSSvZed2+SG2/aUsSxgjqmNUayjmJAlwh3ASXDk/wKAoZYNtdrH0rvkAQDh
PV3Nn8F+8tz+SrIljD9tP5kKHl67n+a6ZWwEYiMo8wUVxXhHG5OV4P7yw0+0Pizn
galCdJrBI7Y42RnfM+b0N/IsvFdeHh5KeaKgMoFPaHhsc3rX80yHwQb608hBBH/2
XATLdRI9EBGOTr5mVJIleaSJvQIEYtheOgTaqJz0khwYgb8GCGnidIxlxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9ErdTEo2z2XXAyzw0TJu/u87ENMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbjBTdDFNU2piUFpkY0RMUERSTW03LTd6c1EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowUQMA0G
CSqGSIb3DQEBCwUAA4IBAQCG1kgy1W9JbsBFfQDg97HNYGpGIIQ3505ydZZQ9IiI
3AwOwFLpRk94bEjPdoCP7nb7S1fAkhoz4PAqR1nQLbF8otNZ++mYSAcnkptT1OUf
/lE6sz+YsM13z2Wdm+yOTgkN8lTbtui45aZVpNqg4pFPSTzYB3cIcyjvqCbU6d4B
JmxEcOwHqpvDKgMR3YeZtujUCJbJTouvJTx8DE2YKGlkJWq6Xtfh831TxxwKEjHt
vcZLvWggTxNzpATMPTQkqBG0kh3vU5HeN0ByhWjvhlDitjFI/COyndtsgH9rhETa
fhNI/pzmadlioMOXFsyOUgiFj/+dS+1cv5JIT0RsLDmr
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:59:49 2025 by rpki-client