Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2ZTHRMHZ9N_wVz-fRq0sU7w_fXQ.roa
File: 2ZTHRMHZ9N_wVz-fRq0sU7w_fXQ.roa (raw, json)
Hash identifier: thXFNRCqmPp87gWPfLWlGmt6yvRys0Wx74kW3dXxI1I=
Subject key identifier: D9:94:C7:44:C1:D9:F4:DF:F0:57:3F:9F:46:AD:2C:53:BC:3F:7D:74
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01967B99AB91B41333F159D83456AF92D0A9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2ZTHRMHZ9N_wVz-fRq0sU7w_fXQ.roa
Signing time: Mon 28 Apr 2025 08:53:10 +0000
ROA not before: Mon 28 Apr 2025 08:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 163.5.72.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:99:ab:91:b4:13:33:f1:59:d8:34:56:af:92:d0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 28 08:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d994c744c1d9f4dff0573f9f46ad2c53bc3f7d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:99:b2:c0:fa:80:c8:b0:1c:68:68:d2:51:
d5:4d:a7:bc:52:35:14:01:59:ef:4c:42:1c:9f:b1:
ba:4f:1d:1f:3f:b9:35:94:e0:fa:8d:0d:b4:67:84:
89:c6:f9:2d:9b:d9:5c:79:6e:be:10:a0:69:af:c5:
49:c7:84:7e:ca:b1:39:33:85:5f:73:31:02:e5:bc:
b2:b3:9b:c6:5e:85:d6:9b:5f:1c:0d:52:f3:b8:4f:
a9:41:47:ef:b7:6b:91:3d:31:03:e3:87:f0:d2:c5:
00:5d:12:e0:56:2b:c4:2b:3a:8e:33:0c:78:19:37:
21:6f:f5:a1:66:9a:7c:f7:7a:d0:b8:aa:81:00:76:
c1:53:11:51:b4:47:cc:84:b6:01:03:9b:24:8a:20:
41:a0:fd:34:67:8e:8f:01:f9:f4:4f:1a:24:ba:a0:
07:e3:c0:45:a0:55:41:c9:d5:0c:47:09:bd:f6:7e:
b0:09:e5:51:8f:0f:84:03:7c:b2:23:51:7e:b2:37:
55:03:7c:55:43:c7:0f:a6:c2:83:df:42:06:ce:b2:
67:25:40:a6:eb:b5:2f:7c:71:65:32:28:ad:a8:d2:
08:a0:33:32:92:61:22:03:69:8c:c4:87:bf:27:9d:
a1:83:0e:cf:92:ac:a7:e8:1c:4b:88:f4:4e:e6:cc:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:94:C7:44:C1:D9:F4:DF:F0:57:3F:9F:46:AD:2C:53:BC:3F:7D:74
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2ZTHRMHZ9N_wVz-fRq0sU7w_fXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.72.0/24
163.5.77.0/24
163.5.158.0/24
163.5.163.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f9:64:cf:c4:67:e2:5a:fd:60:a3:b1:84:6f:19:a0:9e:13:
b7:bd:ea:b6:51:af:bb:9b:2e:7a:52:28:f0:81:e7:16:97:32:
76:72:a0:2e:3b:55:c7:33:4e:61:c5:88:77:5b:e7:5c:65:c6:
c5:0e:0a:a0:0f:01:f7:f0:b0:b9:a6:1d:28:76:1e:a5:8a:a6:
e5:29:f3:12:3a:96:3c:8d:97:dd:d2:e2:8b:97:9c:56:e9:f3:
2b:ab:22:8d:e8:db:9d:ee:1c:6f:1c:d9:e3:56:f8:2b:7c:1a:
d0:1e:59:2c:90:48:36:07:bf:4b:7e:f0:29:bd:4f:fa:fd:99:
01:de:51:c2:7c:bc:db:eb:31:d3:40:3a:0e:58:b3:ce:aa:59:
03:a5:ec:1e:07:5a:5e:2c:02:6b:d3:55:de:9b:42:d3:73:5a:
7e:ab:aa:5b:bc:3a:58:a7:c8:c8:5b:39:90:81:1f:18:24:f9:
3f:bd:b6:cc:d8:87:47:eb:e0:f8:dc:2d:03:39:de:6d:ed:67:
57:36:43:d2:56:ea:45:4c:14:3b:0b:70:b7:24:19:c4:7a:a0:
1e:59:f4:38:f6:51:14:1f:c5:7f:c5:a5:37:70:ea:7b:7c:b1:
db:34:1a:48:81:3e:9a:53:ff:be:11:69:fc:24:c9:f6:5e:fc:
af:23:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:52:39 2025 by rpki-client