Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/00dmv2j4sF9pBKLgTETqpij4lps.roa
File: 00dmv2j4sF9pBKLgTETqpij4lps.roa (raw, json)
Hash identifier: YSHnqyL6q3biBGnTOKXiC1HTDif9s8WjiDKYl8ph0vg=
Subject key identifier: D3:47:66:BF:68:F8:B0:5F:69:04:A2:E0:4C:44:EA:A6:28:F8:96:9B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01934515B3953D94E03AC1A59C84C13C7E64
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/00dmv2j4sF9pBKLgTETqpij4lps.roa
Signing time: Tue 19 Nov 2024 15:41:10 +0000
ROA not before: Tue 19 Nov 2024 15:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 163.5.0.0/24 maxlen: 24
163.5.1.0/24 maxlen: 24
163.5.3.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:15:b3:95:3d:94:e0:3a:c1:a5:9c:84:c1:3c:7e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 19 15:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d34766bf68f8b05f6904a2e04c44eaa628f8969b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:ad:3d:02:e2:6e:ff:c5:6d:ba:cc:5e:ff:
db:67:52:ad:03:e6:85:a4:5e:84:e6:b0:3e:5d:a2:
53:12:80:47:8a:64:da:c3:fa:36:df:55:c5:9c:fb:
fd:1e:e4:c4:9e:82:43:b9:47:14:44:82:89:ec:75:
26:76:4f:fd:d0:63:68:6f:81:ec:e2:7f:e6:f3:8a:
68:98:7e:88:7b:45:25:57:a5:c8:83:24:06:8a:1e:
cd:09:25:ec:25:a8:a3:29:8a:81:9d:40:f7:ad:3a:
71:91:03:6f:41:71:fb:7b:47:ee:2d:19:fc:ff:75:
ea:1b:8e:86:ab:59:95:3c:22:67:f2:75:ef:73:2b:
8c:4f:af:67:66:89:e7:97:69:eb:a8:38:e5:83:a0:
e8:ca:0b:00:1c:7f:27:03:ef:ce:fd:76:96:52:af:
fa:d0:38:53:e5:a8:a5:59:b5:24:d7:49:42:34:cf:
e6:12:38:6d:74:08:5b:6b:16:d4:64:74:bd:c8:6b:
bd:cd:9f:b4:ca:7c:10:30:ea:11:9a:eb:f6:ae:da:
97:23:54:ee:8f:b4:b1:92:b9:b3:48:6f:04:9d:6a:
50:84:63:a7:1b:cc:dd:3c:60:8d:eb:a3:0a:0f:22:
6d:a4:d6:52:90:b5:41:96:e9:2e:5f:c7:3d:86:17:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:47:66:BF:68:F8:B0:5F:69:04:A2:E0:4C:44:EA:A6:28:F8:96:9B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/00dmv2j4sF9pBKLgTETqpij4lps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.0.0/23
163.5.3.0-163.5.4.255
163.5.6.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a4:54:23:26:43:8c:0a:50:a6:da:6d:8c:bd:53:02:40:63:
c7:dd:ac:e8:71:18:fe:37:69:01:e2:80:94:81:c0:a2:44:1f:
d1:18:d5:9c:95:8a:2a:84:2b:75:47:73:7a:1f:56:93:3f:e2:
2d:c7:a9:0d:51:25:f6:0e:d4:d8:d0:a9:cf:08:e7:ad:2a:85:
f4:e2:81:7a:35:76:84:f9:36:51:c3:c8:ac:3e:7c:d2:55:29:
05:ab:c2:9d:33:4f:fa:31:8c:da:9b:45:28:b1:3b:02:ad:d8:
38:58:c1:46:72:87:e1:ed:14:1a:cc:7c:52:e1:d3:21:a7:41:
f5:b8:a4:1b:66:0b:f4:49:e4:a7:fe:89:aa:bd:a2:9c:af:5b:
3e:17:ae:ac:5d:ad:dd:33:54:43:c0:e5:3b:4b:df:1d:3a:4a:
c9:e7:11:5f:a3:82:65:28:39:d7:f1:70:cf:7e:b7:ba:fe:7f:
03:16:41:c8:e1:d4:18:ed:9b:3b:d5:b2:6a:e6:60:41:bf:37:
f1:86:d6:4f:5e:67:ad:b2:68:2e:31:c5:4a:9d:10:cd:69:b7:
cf:72:e8:16:4c:14:96:6e:ea:97:6c:a4:d5:8b:c0:3b:16:0a:
bc:fe:5f:d2:d2:c7:e7:8f:91:0a:68:c1:de:41:e9:fa:06:7f:
b7:45:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:57 2024 by rpki-client on console-ams.rpki-client.org