Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0TXBE7urjom874v4Zl8rQhKmQ9E.roa
File: 0TXBE7urjom874v4Zl8rQhKmQ9E.roa (raw, json)
Hash identifier: 3fCQKxx1BMrK+ctlpPd/xWiyYvKY9xfDsOZYjsUrVU4=
Subject key identifier: D1:35:C1:13:BB:AB:8E:89:BC:EF:8B:F8:66:5F:2B:42:12:A6:43:D1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D6027EAEB40A60B4F649BC4E0BA2A1E2C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0TXBE7urjom874v4Zl8rQhKmQ9E.roa
Signing time: Wed 31 Jan 2024 15:34:05 +0000
ROA not before: Wed 31 Jan 2024 15:34:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 163.5.0.0/24 maxlen: 24
163.5.1.0/24 maxlen: 24
163.5.3.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
163.5.7.0/24 maxlen: 24
163.5.8.0/24 maxlen: 24
163.5.9.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.14.0/24 maxlen: 24
163.5.15.0/24 maxlen: 24
163.5.16.0/24 maxlen: 24
163.5.17.0/24 maxlen: 24
163.5.18.0/24 maxlen: 24
163.5.19.0/24 maxlen: 24
163.5.21.0/24 maxlen: 24
163.5.22.0/24 maxlen: 24
163.5.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:60:27:ea:eb:40:a6:0b:4f:64:9b:c4:e0:ba:2a:1e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 31 15:34:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d135c113bbab8e89bcef8bf8665f2b4212a643d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:6e:42:60:b9:d0:1f:0c:68:95:2b:31:85:
8f:f1:e9:17:70:f2:7b:17:00:63:1c:8e:9f:e0:3c:
83:80:02:34:65:e1:d3:6f:e1:c6:2d:c1:2a:55:ea:
5c:c7:1c:b8:e7:8f:b4:f5:7a:e2:61:7b:28:fc:c2:
93:52:7c:9a:a9:58:cf:8e:41:78:31:4e:a0:62:6c:
c6:cb:69:eb:52:d6:53:cd:27:70:31:ca:5c:d4:2e:
c4:bd:30:23:91:ea:5a:35:c0:c0:7a:ce:98:69:4f:
30:b2:34:5e:88:1e:89:f8:0d:07:f4:54:82:3e:3b:
0e:ae:f4:56:2d:23:ee:2f:ba:06:27:27:d6:85:16:
34:d0:c4:65:fd:a5:a9:c0:de:c7:df:38:b0:67:c7:
03:0e:72:46:fc:bf:5d:82:3f:1c:26:f5:b6:fe:6d:
5c:26:6e:07:89:1c:f6:5c:65:32:c8:4d:7f:4e:5f:
a0:d7:35:1b:39:c9:55:0c:7d:2a:db:0e:e5:db:3e:
1d:a7:48:64:a9:e1:99:72:6f:ef:bc:25:60:59:0d:
fb:20:c8:f8:16:87:9b:ad:d0:2a:bd:a2:cb:92:4c:
8d:16:96:b8:77:fd:bc:54:bd:2d:b0:79:d6:d9:6c:
47:3d:a1:3c:e5:24:39:d4:d1:98:44:71:02:b9:5a:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:C1:13:BB:AB:8E:89:BC:EF:8B:F8:66:5F:2B:42:12:A6:43:D1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0TXBE7urjom874v4Zl8rQhKmQ9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.0.0/23
163.5.3.0-163.5.4.255
163.5.6.0-163.5.9.255
163.5.13.0-163.5.19.255
163.5.21.0-163.5.22.255
163.5.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2b:00:ef:63:19:e9:89:f2:4f:25:29:91:5b:a5:e2:f0:af:
5c:6f:40:9a:8f:63:db:63:31:51:4d:3f:4e:64:2e:55:c9:6f:
d7:64:56:51:86:70:0e:96:c1:69:06:b5:6d:a4:00:be:9d:1f:
f3:f1:28:79:41:8b:c8:92:4a:b9:ec:3f:8f:87:68:7c:fc:2d:
e9:45:60:98:06:6a:ff:49:55:bc:c0:d8:e6:68:83:d8:59:1f:
71:38:c0:98:4c:5a:6b:a2:14:00:29:01:92:68:f2:69:04:2c:
42:33:be:0f:b8:1a:19:2b:45:7c:c7:10:ec:e3:33:a0:8b:32:
41:07:2e:4c:67:f3:d1:cb:6c:bb:77:bb:c8:c1:ab:bb:5f:00:
17:c1:13:57:23:2b:81:a8:a5:e3:a4:d4:07:d8:17:dc:2d:e2:
81:0d:00:90:76:89:b7:0f:5f:33:71:d6:6d:66:4d:74:02:2a:
95:9d:48:90:e1:af:c5:5a:f9:8e:c5:52:ab:c4:2b:5f:7f:74:
f0:bd:f7:62:98:1a:f6:27:29:b3:6d:07:25:9d:da:cf:81:5c:
e2:c6:c5:96:2f:c0:b8:75:24:3b:a5:2d:4e:45:27:55:15:a9:
43:20:21:6a:d2:05:d9:68:4d:7a:9d:4d:66:a2:2d:2a:1c:3e:
39:56:84:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:48:29 2024 by rpki-client on console-ams.rpki-client.org