Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HwEdPXUG6lvbg5qVHPPPERnF3pM.roa
File: HwEdPXUG6lvbg5qVHPPPERnF3pM.roa (raw, json)
Hash identifier: b2s4MKDZPcwQ2Hwrj+2ypMm2LX8D5+LHnELMVWY2+nA=
Subject key identifier: 1F:01:1D:3D:75:06:EA:5B:DB:83:9A:95:1C:F3:CF:11:19:C5:DE:93
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0197371CB69342BBB42049F04F774083C49B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HwEdPXUG6lvbg5qVHPPPERnF3pM.roa
Signing time: Tue 03 Jun 2025 18:45:17 +0000
ROA not before: Tue 03 Jun 2025 18:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 163.5.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:37:1c:b6:93:42:bb:b4:20:49:f0:4f:77:40:83:c4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 3 18:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f011d3d7506ea5bdb839a951cf3cf1119c5de93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:c1:6c:de:b6:d2:f4:b8:81:55:42:39:8e:
03:c1:c3:a4:fb:87:21:4f:c0:7f:7d:d4:dc:1f:67:
18:ec:d2:48:30:80:6c:5d:0e:3a:1b:52:8a:9e:f1:
60:c8:4c:77:d7:50:87:db:c3:28:a9:ca:74:9b:cd:
fa:8e:d0:d2:ba:7a:d1:1d:ab:d2:7e:6e:98:61:17:
6b:6c:cc:b2:5a:c4:6d:9f:67:ac:04:b1:12:3f:50:
4f:34:83:9b:a9:d9:fc:0d:81:d9:2f:47:c4:51:ad:
99:8a:62:76:25:c6:22:33:a8:14:ed:ec:ed:fd:93:
45:68:56:59:6c:e9:24:60:d8:02:f9:e5:55:84:2f:
a4:59:2d:c4:e6:1a:8b:7a:75:98:28:6e:8e:de:45:
31:26:89:ec:a6:12:7b:a2:52:79:8a:76:7b:01:19:
78:47:70:81:bd:41:7f:44:b8:d2:fe:40:a8:14:8c:
fe:a8:6c:f0:df:b3:2e:26:63:01:34:8e:61:d7:4a:
60:b0:5d:11:84:fe:18:03:08:af:01:39:4e:50:c6:
2b:66:79:37:72:bb:7f:62:9f:d2:cb:7c:d7:ed:f2:
2f:01:e9:14:90:1d:9f:3f:75:8b:c2:52:d5:17:ab:
a6:d6:5a:88:01:8e:12:52:5c:c2:2c:5f:8b:2f:25:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:01:1D:3D:75:06:EA:5B:DB:83:9A:95:1C:F3:CF:11:19:C5:DE:93
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HwEdPXUG6lvbg5qVHPPPERnF3pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4b:e1:fa:92:22:b3:b1:af:40:32:ae:99:da:a3:ef:3f:f0:
cf:a9:db:c9:2a:7f:9d:b8:bb:89:e3:ba:52:f0:70:c8:2a:04:
e8:7f:75:cd:0e:05:97:c3:b0:94:57:a9:aa:2d:65:4a:52:47:
02:8a:08:d1:ce:3f:d8:a8:e7:5f:98:e9:04:b5:bf:66:ad:76:
ec:9d:3c:38:4b:49:6c:7a:3b:b7:09:cc:b6:a2:45:c6:d6:4c:
a0:e1:a2:25:63:09:ed:89:6e:c4:90:b7:42:78:4d:88:03:4b:
26:aa:5c:4c:be:1e:5e:8d:79:03:24:d7:cd:d2:75:21:e8:d6:
fd:5d:9b:a4:78:20:15:5d:42:36:7f:f7:4a:8f:38:a5:6e:06:
51:38:37:c4:70:90:09:98:fa:e9:9b:36:ac:fc:8a:b5:e6:20:
62:0a:56:32:ea:26:3b:35:db:af:af:76:e9:af:d3:50:af:b2:
38:13:b4:1f:8a:26:b1:bf:ce:1e:6c:7e:80:8a:4d:c1:1d:c2:
5c:51:e3:20:92:8d:92:87:4b:88:54:6c:b0:17:13:e3:4e:b8:
4f:9f:09:ad:f6:fc:ae:ae:7e:8e:49:c6:e0:82:b8:3c:0a:0e:
65:4f:b5:fd:63:a8:14:f6:7f:35:34:cf:66:5e:fa:4e:0c:ac:
ad:94:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:44:29 2025 by rpki-client