Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0FdRy5f4HxFSnd8DuZ_xAp5DwDA.roa
File: 0FdRy5f4HxFSnd8DuZ_xAp5DwDA.roa (raw, json)
Hash identifier: YBvPQPUJgjsWqN9V+nq4/MhjAZke/tN0BySyU/ZiRNM=
Subject key identifier: D0:57:51:CB:97:F8:1F:11:52:9D:DF:03:B9:9F:F1:02:9E:43:C0:30
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC425636B99FCB50484654FC7A091C430
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0FdRy5f4HxFSnd8DuZ_xAp5DwDA.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205021
IP address blocks: 163.5.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:63:6b:99:fc:b5:04:84:65:4f:c7:a0:91:c4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d05751cb97f81f11529ddf03b99ff1029e43c030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:79:95:48:71:50:77:47:65:3c:ed:3e:60:
08:97:e2:77:79:7f:de:5e:c5:e0:e3:dc:c2:3c:38:
84:5f:e6:6a:77:21:f1:ba:c3:58:a1:19:aa:d4:a2:
c6:5e:32:60:5d:4f:cd:04:0a:65:a0:36:6b:1b:96:
8f:f2:d4:90:fe:be:eb:07:b2:b0:18:86:fd:4c:d8:
d5:ff:c5:fb:4b:29:ff:48:b3:d8:47:0c:cc:5d:c6:
40:42:5b:14:e9:a3:9a:ce:76:7c:9f:9c:32:af:38:
44:61:99:22:b2:24:62:98:d2:ab:c8:29:85:b2:2e:
42:9e:bb:a5:39:40:18:b1:76:4f:30:92:be:9f:0c:
c6:00:14:4f:f6:35:a1:bf:6c:e0:47:bd:02:f7:01:
32:86:62:6f:1b:4e:95:be:6a:a5:ce:cf:c4:67:a1:
e6:26:14:9b:d6:cf:09:10:b8:83:92:cc:3b:60:6f:
d4:07:e4:b4:72:33:74:1a:ab:9d:ec:f4:ea:20:aa:
de:58:e6:53:ef:86:3a:81:0a:26:c5:2f:22:3f:94:
7c:14:8e:7b:b5:24:79:93:d0:78:1e:8d:3a:e1:c7:
a9:4e:07:7f:04:e3:65:77:11:3a:3a:21:7c:e9:ce:
f2:83:c7:1f:55:f5:6c:3a:26:c7:63:05:4c:39:3a:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:57:51:CB:97:F8:1F:11:52:9D:DF:03:B9:9F:F1:02:9E:43:C0:30
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0FdRy5f4HxFSnd8DuZ_xAp5DwDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.107.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bc:e9:ee:f7:03:ef:b2:03:13:21:f7:92:f7:7f:a8:62:33:
59:08:a2:67:20:d4:4d:81:f4:25:22:c5:50:ae:26:d9:60:85:
af:42:f9:e5:40:5a:a2:e9:2b:2f:cc:3a:0c:71:8d:57:f3:6b:
ca:6a:ac:49:65:9b:35:71:e5:94:0b:2f:9c:2a:85:be:79:64:
1a:01:e5:5a:34:f7:63:4b:22:e6:c3:f3:a9:ca:8f:aa:ae:bd:
33:87:75:8e:57:b5:86:94:77:af:f1:ea:97:75:64:17:5a:7d:
20:d5:47:d1:40:9e:7c:08:48:73:e4:f1:18:ca:9e:1d:10:71:
3a:a2:69:1d:5e:36:8a:ad:d1:1e:09:93:a1:0b:18:6e:be:2f:
84:71:62:72:c5:e9:24:da:bd:31:17:e7:57:3c:7e:db:2d:d8:
f7:48:60:98:35:72:9c:cd:b4:31:19:d6:07:d6:b9:af:92:3d:
3d:58:00:43:31:2b:5a:1e:51:82:7d:38:63:8b:e4:42:1a:e5:
4b:6c:6e:fb:c3:46:22:98:cb:aa:83:98:38:57:31:2b:0a:86:
65:ca:b2:f1:4b:f0:95:10:b7:f8:67:17:19:ad:4d:2e:82:88:
49:66:81:da:f4:ab:f4:e8:44:25:28:46:9b:34:80:47:6d:fe:
01:bc:4c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:21:29 2024 by rpki-client on console-fra.rpki-client.org