Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u4zuQef4ifciVqSNg7HPyDZoVC0.roa
File: u4zuQef4ifciVqSNg7HPyDZoVC0.roa (raw, json)
Hash identifier: 1s5Um5RTSxJzM0Tl9IjC0vJX0/RiOszAtADkUFvDYBI=
Subject key identifier: BB:8C:EE:41:E7:F8:89:F7:22:56:A4:8D:83:B1:CF:C8:36:68:54:2D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A28CD1612A2C43AA4A7B6AA27033F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u4zuQef4ifciVqSNg7HPyDZoVC0.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24875
IP address blocks: 163.5.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:28:cd:16:12:a2:c4:3a:a4:a7:b6:aa:27:03:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb8cee41e7f889f72256a48d83b1cfc83668542d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:ff:27:13:bc:f1:8a:12:76:96:54:9b:2c:
dc:45:45:65:11:af:fc:33:43:ea:a8:01:1b:d9:8a:
37:be:63:b0:27:02:d6:0a:a1:c7:ce:b0:4c:c9:2e:
07:d5:27:d9:42:2f:67:c9:97:c9:1d:23:b4:3f:c5:
5e:64:31:89:0e:0a:ab:3c:92:6d:ba:d5:15:d9:db:
07:aa:a3:93:89:0f:6c:da:4c:46:9f:92:d0:cf:95:
9e:8a:f1:89:16:9c:1f:47:e4:a0:a9:7b:29:6b:8a:
4e:8b:24:47:d2:3d:db:c5:25:48:63:73:b1:14:d2:
43:09:45:e0:0c:01:d5:1c:4b:23:12:df:3f:30:d8:
f5:d9:a9:b8:90:87:d1:64:90:23:ff:df:80:ca:c7:
7a:4f:98:e9:4c:90:67:72:17:3a:f5:f1:1d:53:41:
14:61:ac:9c:18:31:64:36:2f:98:6a:7d:d3:4d:66:
d9:8c:c7:3b:8f:1c:7f:bd:ec:23:77:fb:e1:80:e9:
ea:9d:77:fc:90:75:46:3b:5c:17:53:84:8a:b1:41:
a3:45:56:b1:f1:14:f2:20:d4:7e:44:01:fc:84:c7:
a1:2a:a4:8e:31:66:bb:b9:6d:17:b9:a7:5f:2e:dd:
94:86:64:3b:90:e4:41:ed:c3:9d:ec:ef:ca:d2:4f:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8C:EE:41:E7:F8:89:F7:22:56:A4:8D:83:B1:CF:C8:36:68:54:2D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u4zuQef4ifciVqSNg7HPyDZoVC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
93:30:fe:e5:d3:fd:53:0e:f2:a0:54:80:44:5c:62:e3:5c:a1:
7e:75:13:41:31:74:cb:e9:51:7b:cd:ef:dd:21:ea:e6:8f:01:
0f:60:ad:aa:51:99:04:0b:e4:bb:f4:7d:08:c1:1e:b8:d2:be:
a7:51:3a:90:1e:b5:3f:12:f7:49:f6:87:7c:eb:5e:30:10:7e:
71:5c:18:ca:91:21:9f:16:36:ae:2e:aa:b8:5b:d0:00:cf:c3:
04:70:77:fd:1e:87:f4:2f:27:98:d4:17:9b:d2:b4:9d:5e:3c:
36:13:52:a1:88:c0:4b:74:7f:3e:0e:bf:b5:ec:03:f2:dd:41:
c7:c6:02:50:47:36:86:4a:b4:68:8b:6d:8c:8b:23:fb:0b:c1:
11:3e:b8:bd:78:17:f2:f6:8c:e8:d3:5c:f8:ad:76:ba:f1:89:
c9:0e:e1:b7:73:64:e0:e3:7d:73:91:11:91:fb:31:1b:e7:b2:
46:bc:58:dd:0f:78:4a:4d:12:95:f9:55:16:2c:70:8e:32:2c:
f3:ae:91:90:b2:23:7a:0c:4b:bd:7e:c4:5d:b9:68:85:77:92:
cd:e8:f1:bd:85:7a:95:27:12:43:b4:3a:69:86:20:95:8c:97:
19:00:50:32:3d:53:ab:5a:60:d7:f3:b0:7e:fc:8c:27:ff:f0:
b8:77:5e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:55:18 2025 by rpki-client