Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/R9byz42I6wiP7DpK9i1IxgYFpPk.roa
File: R9byz42I6wiP7DpK9i1IxgYFpPk.roa (raw, json)
Hash identifier: 5tPjk51uapNqtfvAoepE8WqwcA1Uv+axJ1ijPbzElrY=
Subject key identifier: 47:D6:F2:CF:8D:88:EB:08:8F:EC:3A:4A:F6:2D:48:C6:06:05:A4:F9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018FC068771AEEA50422217DC0D32CFD0731
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/R9byz42I6wiP7DpK9i1IxgYFpPk.roa
Signing time: Tue 28 May 2024 18:13:42 +0000
ROA not before: Tue 28 May 2024 18:13:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199839
IP address blocks: 163.5.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c0:68:77:1a:ee:a5:04:22:21:7d:c0:d3:2c:fd:07:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 28 18:13:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47d6f2cf8d88eb088fec3a4af62d48c60605a4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:34:a2:8a:99:cd:f2:08:4e:40:f3:1f:e5:0a:
5f:b5:fd:a7:df:e6:69:ee:4c:8f:7d:10:e1:b5:1e:
bd:38:41:73:69:a3:f9:b6:a0:82:dd:71:a8:7c:fd:
6f:43:14:e9:4b:12:ab:2e:bd:cf:29:7f:19:94:7f:
20:af:42:93:8c:da:c3:2b:30:22:5e:fb:0b:c3:5c:
f6:af:cc:a2:f6:79:4e:fd:1c:d4:af:4e:35:db:dc:
95:60:cd:dc:62:ff:b1:a9:59:04:97:a9:51:9d:86:
6b:59:6c:4f:5b:a8:1f:fd:7b:ed:58:13:11:09:64:
09:87:7a:2a:a8:2b:73:3b:22:08:e9:c9:04:18:73:
c3:8f:a9:23:c1:66:7f:94:f5:b7:28:3c:86:e6:2a:
a1:fb:d9:80:ef:32:41:c7:8a:de:5b:8d:f0:ab:17:
35:0c:1b:c2:07:81:cd:27:6f:9a:91:f8:da:f8:50:
1a:69:d0:d9:93:24:e3:93:b9:6b:5c:a2:41:94:d2:
b6:44:1c:de:32:2b:83:b0:61:a7:46:b9:69:9d:ac:
6b:b1:04:29:96:6c:ce:02:fe:27:5b:c5:c9:f5:f4:
72:68:1f:bc:59:fe:70:7d:02:a8:1d:27:f5:4c:f9:
f6:3a:3b:15:d9:6a:08:76:aa:49:f4:d3:5d:e0:bc:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:F2:CF:8D:88:EB:08:8F:EC:3A:4A:F6:2D:48:C6:06:05:A4:F9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/R9byz42I6wiP7DpK9i1IxgYFpPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a5:82:66:40:f6:f9:c8:a0:05:2a:2a:02:a0:60:be:1a:82:
67:4d:16:eb:27:98:83:d8:5e:19:19:36:0a:73:b1:ad:15:b9:
0b:94:63:c1:cb:d3:be:ce:fc:f1:06:09:bc:d8:cc:87:dd:c2:
4c:0a:d0:08:f3:72:03:19:b5:41:f2:55:a7:77:6b:bb:c8:43:
36:0a:48:d3:24:e5:b3:d4:39:d6:71:df:db:31:85:72:8c:9a:
87:d5:55:1f:44:92:57:a9:ac:47:37:1e:c8:2c:b8:6d:3a:27:
50:25:e0:4b:ce:0b:47:54:c4:f4:1e:06:9f:b1:58:77:b0:dd:
9e:a5:8d:4e:4c:d0:e6:1b:a1:e6:b8:c4:67:2e:08:b5:7e:b9:
66:fe:7c:80:93:92:e3:ba:4e:4f:97:01:e6:26:aa:29:46:8c:
7a:67:8e:e2:58:ba:b3:56:ff:ab:80:66:17:46:2a:37:d9:e1:
60:3a:09:92:c2:b7:56:ee:6c:5b:78:b6:91:03:24:21:3b:60:
94:52:ce:12:91:84:3b:20:3a:d9:49:2a:d4:ce:64:d6:aa:0e:
b3:30:ba:e6:be:9e:51:33:04:ab:16:88:7d:ce:ad:cc:a7:5f:
2e:dc:1a:a6:db:40:c4:33:51:91:e2:02:b5:c6:d8:1e:33:d0:
a0:c5:d0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 12:08:56 2024 by rpki-client on console-fra.rpki-client.org