Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xGWz8KGiE2X4hMKJpzNARZU_-2c.roa
File: xGWz8KGiE2X4hMKJpzNARZU_-2c.roa (raw, json)
Hash identifier: v6OgO0+9/BUJuFzeQ3V/IZmGMgomhMUV9xru4B5r1wA=
Subject key identifier: C4:65:B3:F0:A1:A2:13:65:F8:84:C2:89:A7:33:40:45:95:3F:FB:67
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0197D72F2E291A6631429B1D8E3881FB15A9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xGWz8KGiE2X4hMKJpzNARZU_-2c.roa
Signing time: Fri 04 Jul 2025 20:44:42 +0000
ROA not before: Fri 04 Jul 2025 20:44:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:2f:2e:29:1a:66:31:42:9b:1d:8e:38:81:fb:15:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 4 20:44:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c465b3f0a1a21365f884c289a7334045953ffb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:73:1c:56:6b:cc:77:a1:aa:ff:9b:5b:15:
54:bd:97:66:0a:2c:98:15:ef:85:a7:c0:76:94:c9:
28:51:ad:f5:8d:63:50:16:5b:c9:7c:a5:e3:b0:92:
a9:1f:64:13:8a:dc:7b:ef:d5:32:cb:d5:b1:e1:d7:
6c:94:ee:98:c4:46:bd:1a:81:72:28:e3:e2:14:c4:
62:01:ae:35:4e:cf:08:ec:40:87:35:5e:cf:ba:be:
c7:d5:81:02:f0:7f:b2:fa:a6:a6:e6:27:c4:d1:bb:
16:30:da:eb:de:5d:7f:03:3c:37:d3:33:30:a5:cf:
d5:f0:26:c7:b2:d9:9e:07:89:18:54:76:e4:6e:44:
d0:fb:fc:81:74:e0:06:72:be:22:9a:1f:ca:5e:b9:
3f:4b:ea:da:e8:dd:bb:37:11:64:1c:35:06:f5:d4:
5c:c5:e5:ce:b7:ec:55:4e:a4:29:c3:36:b2:bd:0a:
55:08:9d:69:6a:2e:a7:95:5e:7d:87:bb:9b:3f:1e:
e8:67:70:50:9a:95:78:79:7f:67:9f:19:da:90:50:
be:5b:df:96:14:75:c1:04:22:39:73:57:a9:85:2c:
40:75:86:1b:ae:18:bd:e9:22:9f:a2:d4:3e:23:6b:
3a:8e:30:43:b6:ff:cb:35:50:70:84:65:16:8b:6b:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:65:B3:F0:A1:A2:13:65:F8:84:C2:89:A7:33:40:45:95:3F:FB:67
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xGWz8KGiE2X4hMKJpzNARZU_-2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.89.0/24
163.5.112.0/24
163.5.121.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.201.0/24
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.218.0/24
163.5.221.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.237.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c0:cc:3e:59:a7:c7:ef:9d:de:b5:ed:0f:d4:23:5b:ed:03:
93:61:c6:f4:ce:e4:7b:bd:43:92:8d:99:40:cf:b7:dd:8b:5c:
ca:bb:8c:62:92:de:55:25:58:51:42:1c:16:05:66:3d:4e:7e:
96:7c:11:d0:b8:f7:66:6e:76:2d:f4:37:8b:8a:78:91:b1:49:
ee:c7:a3:1e:12:52:2d:03:a8:ee:ce:f4:08:d1:af:73:3d:4e:
79:d2:cb:ed:93:55:7c:7d:ca:43:28:6d:46:ff:7a:da:fc:33:
2c:93:ac:fe:35:43:14:d2:06:a4:2d:6b:3c:c9:ab:f6:20:aa:
08:59:d3:ad:cd:d4:c6:13:dc:a4:22:74:85:80:2e:41:68:a5:
e0:7d:cd:73:55:7a:7f:f4:11:4b:72:95:19:24:3f:d3:00:46:
1a:da:21:d5:42:15:da:29:2f:2e:1e:6f:db:e7:62:17:bf:62:
1f:3b:23:19:11:75:d6:8a:1b:c2:e2:86:62:7a:be:5f:bf:18:
a4:25:cc:d8:15:73:59:42:b9:df:22:15:62:5b:e7:0c:ba:b5:
fb:e1:d6:97:e9:94:36:9f:fe:58:f5:1f:29:1b:73:73:dc:c4:
ea:74:45:dd:5c:eb:3a:1d:2e:ac:18:6a:5a:39:6f:de:92:7c:
b8:15:90:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:00:24 2025 by rpki-client