Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/04bTFE_Vk8wbt5ad9rco4vRT0zo.roa
File: 04bTFE_Vk8wbt5ad9rco4vRT0zo.roa (raw, json)
Hash identifier: Ck88CVnBYaVmJ6srxTrixhPlIhz7Zmh7tafdsSxNQX8=
Subject key identifier: D3:86:D3:14:4F:D5:93:CC:1B:B7:96:9D:F6:B7:28:E2:F4:53:D3:3A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EB968C2B44801F57F4B6CCBD6BBBEFD6D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/04bTFE_Vk8wbt5ad9rco4vRT0zo.roa
Signing time: Sun 07 Apr 2024 16:33:54 +0000
ROA not before: Sun 07 Apr 2024 16:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212815
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b9:68:c2:b4:48:01:f5:7f:4b:6c:cb:d6:bb:be:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 7 16:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d386d3144fd593cc1bb7969df6b728e2f453d33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:50:3f:7b:c6:b2:b5:3a:85:7a:59:69:66:
9b:01:9a:1f:ff:7e:f3:e3:a2:e0:a3:45:be:89:81:
c6:15:86:17:c4:4e:48:e6:ba:d0:94:36:8a:b0:a3:
4a:96:9a:fa:a6:52:da:0c:54:4a:f1:d4:0c:fa:9e:
95:39:8e:dd:17:87:cc:3a:3a:4c:cd:f3:f6:51:f8:
e5:93:d7:ce:f9:3d:68:6e:01:83:71:22:61:88:e8:
52:4a:ea:1b:83:21:0b:07:01:a2:11:27:89:b0:3f:
64:d6:a3:5b:6f:eb:34:6b:d0:a1:a6:fc:50:cd:fc:
7d:df:bb:e2:64:57:04:89:49:93:c2:9b:8e:39:75:
d7:8e:d1:4f:5a:97:ec:d6:f2:84:d0:53:2e:4d:34:
6d:5e:73:84:8f:73:e0:e7:2f:12:36:1d:f8:ba:19:
5c:fa:8b:e1:b4:f9:d5:fa:e1:10:1a:c0:99:49:69:
be:af:c8:08:57:2e:75:57:dd:a5:e9:c7:7f:fc:b0:
f0:a3:07:d4:80:f7:d0:de:a6:c1:0f:25:11:44:db:
50:33:6b:b1:3e:32:9e:09:ac:d5:c9:1b:78:c3:42:
e0:1a:da:ad:0b:9b:04:2c:cb:de:f0:3d:41:44:5d:
75:8b:85:de:c6:6a:ed:8c:21:97:de:83:cd:2f:1e:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:D3:14:4F:D5:93:CC:1B:B7:96:9D:F6:B7:28:E2:F4:53:D3:3A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/04bTFE_Vk8wbt5ad9rco4vRT0zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.59.0/24
163.5.62.0/24
163.5.99.0/24
163.5.142.0/23
163.5.192.0/23
163.5.213.0-163.5.215.255
163.5.221.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
24:49:76:ee:6c:f6:59:74:59:55:e9:6e:73:18:b0:9a:e5:eb:
98:2d:66:22:12:b4:d3:c9:37:28:68:4e:56:4e:22:df:dc:1f:
73:a8:2e:25:27:fa:96:d8:24:00:c5:53:08:8b:a9:e6:a7:84:
19:1b:a5:d6:cb:17:74:ae:a8:70:06:78:95:f9:63:c0:42:33:
77:46:cc:92:f4:ab:e9:8d:27:87:13:b7:77:61:17:78:14:69:
bb:06:34:2e:9a:e5:c2:a4:fb:c6:91:a5:33:92:1c:52:4a:8f:
82:52:48:eb:9f:ee:8d:fd:81:4e:d3:a9:71:29:ec:66:19:f7:
df:a6:11:9c:d0:e5:36:54:2c:03:72:e1:08:9e:e6:18:8a:d4:
da:e1:d9:4d:99:e5:00:3b:7d:ae:bb:0d:3f:d8:74:c7:5a:14:
0d:ff:39:a9:69:4e:e4:55:fa:c9:2a:ac:e8:a5:0d:4b:5b:f0:
41:8f:bb:11:ac:fb:32:77:34:4f:ec:21:55:52:bb:44:15:54:
eb:2f:c2:60:3d:d5:7d:00:f7:fc:cc:c5:14:ba:21:61:f1:84:
b3:6a:30:6f:a1:d9:f7:ec:c6:c2:c9:87:58:74:82:0a:68:76:
2a:03:98:4c:9d:dc:81:63:ef:7e:7f:e7:2c:5a:69:49:43:1b:
e6:a3:2b:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 3 02:02:43 2024 by rpki-client on console-fra.rpki-client.org