Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ph6NbJGJ5yf1IyY9gne3qy5R6Co.roa
File: ph6NbJGJ5yf1IyY9gne3qy5R6Co.roa (raw, json)
Hash identifier: tY9heoMeHKw+afSlR6h2/V6ZwG80tjZQaSukoLNRx6s=
Subject key identifier: A6:1E:8D:6C:91:89:E7:27:F5:23:26:3D:82:77:B7:AB:2E:51:E8:2A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A4A1E7683CD615BF6FAA355A6325B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ph6NbJGJ5yf1IyY9gne3qy5R6Co.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214411
IP address blocks: 163.5.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4a:1e:76:83:cd:61:5b:f6:fa:a3:55:a6:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a61e8d6c9189e727f523263d8277b7ab2e51e82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:9c:0d:a4:e5:a8:7e:a8:9c:12:7a:ec:2c:
10:18:5c:81:47:1b:42:31:18:a2:bd:2c:6c:32:4a:
3a:86:ae:f4:4e:6f:d9:a9:70:83:bf:34:70:cd:04:
67:f2:7e:64:d5:62:ba:1e:4a:ab:c0:0d:ad:8d:c9:
92:c3:b4:0f:60:c1:46:0c:53:e9:4f:69:e9:ea:ad:
af:b9:e1:1a:93:2f:0e:09:03:26:dc:01:5c:5d:22:
1f:0f:db:e3:76:26:0d:9b:4f:55:14:e9:bd:3e:46:
68:43:99:46:67:2f:04:72:94:f6:e2:db:b4:c6:3b:
06:3e:82:c6:4c:20:99:43:0d:aa:e0:67:ed:a1:d4:
60:bf:21:0a:ed:e0:2a:1a:47:85:fc:ed:5a:33:cd:
6b:b2:b4:27:b9:16:9e:e5:b6:2c:8c:ad:52:d5:bb:
8d:0c:b7:28:9d:11:4f:65:fd:cf:04:c9:99:89:af:
08:5e:77:bd:0f:18:ba:6b:68:b3:26:2d:93:ca:9f:
cc:3e:0c:a4:73:49:c9:47:34:03:68:5a:5e:0c:b5:
9e:a4:58:d5:7c:68:5a:99:a7:fc:a7:d2:52:3a:9b:
79:b9:47:85:20:48:05:ff:25:71:d4:79:32:97:76:
0d:b5:af:7f:6f:5b:d9:6f:44:cd:41:38:58:80:42:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1E:8D:6C:91:89:E7:27:F5:23:26:3D:82:77:B7:AB:2E:51:E8:2A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ph6NbJGJ5yf1IyY9gne3qy5R6Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.157.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:bd:68:9f:1a:7f:af:64:dc:53:98:5b:76:c7:9e:bb:40:bf:
37:1a:c2:a4:79:87:35:3d:4b:01:53:b2:ec:c9:93:7d:05:19:
28:c5:56:be:b4:39:db:53:e1:76:dc:66:0e:43:ab:29:08:d1:
21:be:7f:4e:ab:31:20:a2:77:ee:84:9f:22:72:ce:6f:50:2f:
24:c7:c5:06:7a:f0:31:78:e4:36:6d:cf:dc:8e:49:6e:3c:7b:
81:20:12:22:5c:e0:92:53:56:64:76:7b:39:78:0e:9d:30:55:
4d:13:93:0f:86:fc:43:5f:cc:53:c7:e7:72:92:30:d7:d6:eb:
6b:10:f1:6f:bb:c2:fb:28:95:f0:d9:89:0d:45:d0:a0:fe:cd:
b9:dd:d1:84:78:19:d1:40:2b:36:c8:e6:2c:ad:e8:80:65:1e:
c9:7d:e5:25:b5:7d:4e:3c:b4:ba:a2:44:29:16:51:be:14:42:
67:34:94:7b:1f:6c:c5:80:f2:f7:48:d9:fb:01:ca:ee:04:a9:
f4:93:2f:f2:f0:58:c2:a5:d0:67:f9:cf:d5:56:b5:95:ef:1e:
78:78:ce:a4:5b:4d:e7:ae:74:64:cf:cc:0b:eb:b6:8a:48:3a:
91:cf:54:e0:94:5e:55:13:ad:78:55:65:3b:e2:1c:40:57:05:
8c:50:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:43:56 2025 by rpki-client