Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wXp5_vFpMY4Ol2OxHG9tpSn231g.roa
File: wXp5_vFpMY4Ol2OxHG9tpSn231g.roa (raw, json)
Hash identifier: xIfmfhT/VNwhDCF5PVZMTdS86MiZvM4alWTEDFNzCtg=
Subject key identifier: C1:7A:79:FE:F1:69:31:8E:0E:97:63:B1:1C:6F:6D:A5:29:F6:DF:58
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01946B04D8ADBAAB7021F2DBE8B3AB7FA944
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wXp5_vFpMY4Ol2OxHG9tpSn231g.roa
Signing time: Wed 15 Jan 2025 17:31:07 +0000
ROA not before: Wed 15 Jan 2025 17:31:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 163.5.103.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:04:d8:ad:ba:ab:70:21:f2:db:e8:b3:ab:7f:a9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 15 17:31:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c17a79fef169318e0e9763b11c6f6da529f6df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:46:3d:4b:76:a1:ec:1b:1a:0f:0d:72:dd:
47:b8:99:a9:7e:e7:82:72:3b:07:45:99:d8:7d:2a:
e6:7b:11:18:63:10:08:88:24:c0:33:80:e2:a7:7b:
34:bf:e0:c4:92:e6:e9:87:99:8c:9e:5d:8f:d0:1d:
6f:85:67:ee:fd:f9:af:72:8f:df:f8:08:37:15:db:
04:0e:41:1a:c5:48:2e:47:68:de:84:81:cf:6a:7f:
38:78:cb:47:67:c5:a2:26:20:60:30:e3:8d:09:43:
29:16:02:79:03:3b:65:f2:d4:64:04:fa:28:da:46:
f9:c6:97:ea:31:5a:a9:a8:18:bc:d3:23:08:74:97:
f2:be:f1:db:99:cf:10:a8:89:d5:fe:ec:f6:1d:20:
0b:89:90:85:14:bd:dc:fe:41:df:e3:1b:26:69:97:
db:5f:83:2a:e3:fd:10:7d:a4:3e:4d:97:91:6c:e8:
07:ba:e9:5d:98:bb:d9:b8:46:ae:9e:9f:be:ef:df:
96:1b:28:e7:cc:1d:0f:31:4a:2b:8e:48:b4:b2:52:
df:b4:b8:72:ca:6b:7e:cb:80:19:4d:c4:9e:5b:f6:
78:47:b1:88:7e:a3:b1:f4:ae:94:ed:5c:70:27:72:
15:bd:7a:2d:7d:7b:2e:fb:ca:09:1a:df:dd:94:5c:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:79:FE:F1:69:31:8E:0E:97:63:B1:1C:6F:6D:A5:29:F6:DF:58
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wXp5_vFpMY4Ol2OxHG9tpSn231g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.103.0/24
163.5.152.0/24
163.5.185.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7c:a3:b7:26:27:d8:e5:3e:c4:94:ee:9c:1a:74:9a:b9:a3:
00:93:ad:d4:05:06:59:4e:3e:6a:c4:66:98:91:92:66:f8:02:
3c:6e:d7:0f:56:d1:e4:01:b9:d2:d2:c1:e5:83:b9:bb:e0:4c:
01:95:68:d8:50:1f:a0:2b:d6:95:c6:68:f9:f0:c1:58:fa:70:
bb:f9:cf:ab:ee:fe:67:38:2b:ec:b3:8a:48:6a:3c:68:e3:0e:
0b:28:b0:e3:72:f6:ea:9d:92:d2:61:85:96:a3:cc:98:84:86:
ab:d0:c4:16:ed:ee:5a:01:28:6f:f7:c5:ba:09:6e:de:ca:3f:
0d:d6:27:f3:81:09:50:57:1c:60:fd:ad:e8:9f:82:49:29:0e:
7a:75:b6:d4:0b:63:73:cc:21:38:1b:86:b8:4d:36:8b:fa:de:
3e:4d:78:24:ef:b9:9e:79:a0:75:ac:3a:d1:03:f2:fa:54:bb:
fb:f3:cb:5b:bd:4c:e3:f1:a3:3b:33:14:cf:ec:5e:f7:3f:32:
e5:1b:7f:61:3b:46:bd:ab:f5:4a:25:b9:13:bf:b8:7d:e4:5b:
36:8b:33:b5:00:71:c5:4a:82:62:e7:48:b2:18:5d:44:50:a2:
ab:65:d1:73:55:d3:d9:db:0c:ba:a9:5c:c8:07:e6:fc:83:6c:
ba:a9:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:59:32 2025 by rpki-client