Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tnfurmP0bnEoUsuCt8XFDwNhOEQ.roa
File: tnfurmP0bnEoUsuCt8XFDwNhOEQ.roa (raw, json)
Hash identifier: ahx4oO/hstaeDWE0xj6Z44Ls2rGQQCt9qTrTxwl4JhA=
Subject key identifier: B6:77:EE:AE:63:F4:6E:71:28:52:CB:82:B7:C5:C5:0F:03:61:38:44
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A3FF5F0264215E30FB1AB580444FA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tnfurmP0bnEoUsuCt8XFDwNhOEQ.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202736
IP address blocks: 163.5.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3f:f5:f0:26:42:15:e3:0f:b1:ab:58:04:44:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b677eeae63f46e712852cb82b7c5c50f03613844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:31:ea:d1:10:82:10:51:75:fb:47:ab:ad:
ad:3b:d7:97:b4:15:e2:d3:be:47:e1:32:0e:21:a5:
9a:02:89:6f:18:dc:3b:95:26:ab:3a:8a:77:50:36:
e4:94:32:04:1d:21:b7:4d:8d:6d:73:1a:b2:59:29:
e3:8f:0a:07:9d:61:82:b2:18:d2:0c:42:5d:31:5c:
c3:2d:ba:7a:5e:33:02:fa:b0:13:e1:11:be:68:3e:
ac:12:57:aa:01:13:2e:4c:08:14:b1:53:23:8f:98:
19:18:70:12:2b:fb:58:72:6f:b7:29:9f:8f:47:c4:
81:a8:ff:13:56:5b:60:df:f4:e0:23:72:94:98:97:
d9:0c:ac:a9:31:1f:1a:1a:5f:93:9c:5b:90:f5:45:
ce:84:4b:0f:c9:57:7a:3f:6b:d6:b4:67:af:b2:63:
9b:da:8c:ec:1b:32:c6:8a:5e:eb:b9:37:62:86:22:
12:fe:fe:84:19:37:40:fe:14:0d:ac:64:8d:4d:c5:
73:20:99:0c:93:4e:e9:cd:8d:bf:43:86:74:d1:01:
c5:9f:38:be:c1:5d:4c:70:ec:42:0e:47:f6:f2:78:
71:c0:1a:62:ec:f8:ff:26:50:32:02:f7:60:2a:f6:
14:26:82:64:4e:1f:53:2f:06:eb:65:ce:36:2b:ba:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:77:EE:AE:63:F4:6E:71:28:52:CB:82:B7:C5:C5:0F:03:61:38:44
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tnfurmP0bnEoUsuCt8XFDwNhOEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.230.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5f:2e:2f:eb:2d:31:98:31:d3:87:cf:f1:a6:6c:36:29:3c:
31:a3:f4:2e:c2:49:71:11:f7:d4:e3:d0:2f:12:88:99:b0:1b:
c6:ea:83:cf:88:11:d2:bf:55:54:fb:e9:20:d9:ff:88:4b:cd:
f5:e8:ae:91:0d:26:be:68:67:e0:1f:24:36:01:1a:bb:6d:59:
c5:e9:5e:8f:9b:69:11:69:16:94:39:1a:c1:41:24:85:70:8f:
2a:41:66:79:53:d0:58:4c:ea:a2:86:a6:d5:f0:0a:71:6d:8d:
af:9d:e6:2c:98:83:7d:fb:13:66:d9:62:d2:ea:fd:12:62:04:
d1:c0:96:8d:55:bd:ed:fc:18:a3:7e:d4:ca:5f:04:80:3c:a6:
b6:28:e4:38:54:97:81:4d:06:e5:c3:40:fd:c1:3a:81:fb:ff:
72:a3:a3:5a:c1:ed:8e:d2:1b:bd:c8:3a:0c:03:78:9f:5f:4d:
4e:b8:39:12:5a:0a:0b:17:ea:a0:05:6d:83:90:af:2b:c3:0f:
b7:72:55:05:8b:c2:05:33:ec:5c:3f:19:3a:0a:5c:25:2b:9f:
6e:75:e8:5f:d6:f5:f5:67:de:41:3b:41:2a:b2:ce:7f:41:bb:
fb:59:1b:b0:74:f4:8d:e2:e5:26:58:67:c5:cd:4a:ef:49:92:
c3:60:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:51:07 2025 by rpki-client