Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I501CowaWnR1r89zcfm6yeZcg8Q.roa
File: I501CowaWnR1r89zcfm6yeZcg8Q.roa (raw, json)
Hash identifier: CS4uuNnmuzEqEL4dN2sV1nIvOZMtP44Kip4KLtbaKwU=
Subject key identifier: 23:9D:35:0A:8C:1A:5A:74:75:AF:CF:73:71:F9:BA:C9:E6:5C:83:C4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019650E6461E5243A3A46BCFF4F71BC570F0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I501CowaWnR1r89zcfm6yeZcg8Q.roa
Signing time: Sun 20 Apr 2025 01:53:10 +0000
ROA not before: Sun 20 Apr 2025 01:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 163.5.94.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:e6:46:1e:52:43:a3:a4:6b:cf:f4:f7:1b:c5:70:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 20 01:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239d350a8c1a5a7475afcf7371f9bac9e65c83c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:94:cd:a1:e8:fd:44:88:af:d0:e1:f3:4b:
4a:8f:c2:7d:24:b4:f4:5a:2c:37:fb:27:6b:65:22:
3a:78:eb:ca:a3:62:09:1a:1b:98:1d:0e:13:1c:14:
d8:53:6a:60:eb:7e:3f:a3:4f:02:e1:3b:c4:97:ef:
58:fe:5e:4f:60:b2:d0:a2:02:e0:cf:f4:be:c6:30:
d9:23:e1:69:5b:43:17:1e:6a:b2:d4:6d:f7:5f:c9:
f7:e0:51:81:92:aa:3a:87:30:b8:6c:48:6a:81:33:
b8:6e:9d:12:11:2f:05:22:d1:bd:a2:bd:64:9e:a0:
e6:d6:a9:69:10:b7:e6:b8:14:a0:f4:35:81:49:a9:
47:48:68:70:1f:fc:ed:12:91:3a:b3:a3:78:b5:25:
2e:4e:fe:c7:38:a8:67:e0:76:ce:19:a6:d2:ad:8d:
ba:a4:87:33:c8:9f:29:ff:59:b4:31:8f:86:5f:17:
c9:1f:5c:92:30:19:05:db:9f:db:36:c2:ad:55:86:
5a:f3:4e:43:db:b6:15:75:92:a2:2d:22:6d:21:96:
18:3a:2d:e3:0a:a7:33:1e:8e:80:93:17:c6:e4:d9:
29:1e:35:e9:30:f2:1f:7f:dc:bd:58:d5:b8:25:d7:
77:de:70:0c:93:ca:11:30:6c:3f:59:65:01:3a:f2:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:35:0A:8C:1A:5A:74:75:AF:CF:73:71:F9:BA:C9:E6:5C:83:C4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I501CowaWnR1r89zcfm6yeZcg8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.94.0/24
163.5.97.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8d:a2:ca:e4:16:6c:85:4d:87:df:a2:4d:a0:5a:64:fa:96:
e2:d4:e1:ab:9d:bb:58:b6:0e:49:7b:94:ba:80:c7:98:a9:ca:
22:d1:81:dd:cd:c8:d3:b3:fa:f7:42:71:6a:60:60:1a:50:16:
f6:41:08:68:e1:8a:ec:97:37:96:92:73:ad:79:cf:41:c7:85:
fa:fd:b1:9d:1a:df:0b:ec:5c:37:0f:b8:49:d9:e4:8a:75:6e:
70:0d:74:f5:0e:0e:18:94:6d:be:16:49:a3:79:79:b8:ae:00:
85:ee:7e:ec:e6:98:ff:b9:f3:e2:76:3f:31:26:cc:b4:cd:a2:
87:04:f1:44:82:27:28:b2:6c:a7:8c:2c:ca:1d:0b:5a:74:37:
1e:3c:5e:f7:6c:f3:50:c5:89:a7:7a:a9:f9:da:3c:59:e7:7b:
7d:2d:21:78:28:6e:ac:40:7d:11:94:10:e0:d3:ec:a8:b7:35:
cf:d0:56:6b:7c:98:ea:5e:90:18:c9:4a:e5:a8:a1:84:da:19:
b1:21:8b:c0:a0:08:aa:03:10:c3:4a:f4:f3:62:5b:d4:88:bd:
d1:73:06:bd:ca:ab:26:d2:f1:b0:ce:29:49:df:5f:80:01:ba:
41:23:84:88:4e:83:d0:37:47:03:44:f8:f0:a8:0d:13:a2:0b:
5e:f2:89:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:06:17 2025 by rpki-client