Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3nHnchmAyEG2HbHNuLybNIO9NGU.roa
File: 3nHnchmAyEG2HbHNuLybNIO9NGU.roa (raw, json)
Hash identifier: MUtwKDxDl/30qeXt1e6LyzPZwWRIEAPRMXoAOics0SI=
Subject key identifier: DE:71:E7:72:19:80:C8:41:B6:1D:B1:CD:B8:BC:9B:34:83:BD:34:65
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255A10AB77FB0F0E79DCF3F5535D8D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3nHnchmAyEG2HbHNuLybNIO9NGU.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 163.5.178.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5a:10:ab:77:fb:0f:0e:79:dc:f3:f5:53:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de71e7721980c841b61db1cdb8bc9b3483bd3465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:56:45:71:8b:90:42:04:a1:a6:8c:53:56:
39:b3:c9:ed:da:6e:cd:40:a6:61:0d:35:62:7d:da:
58:df:e8:14:dd:2d:f8:d9:3a:d6:29:33:20:22:ee:
a7:9e:54:3d:b8:51:2b:a0:c4:fb:4a:d1:b3:d8:91:
0d:ea:72:cc:0c:fd:0f:29:51:93:58:c1:95:a5:f0:
6c:cb:92:4f:7b:e0:5a:2f:e8:09:41:8b:82:c3:a5:
a1:37:6e:70:3d:ce:d4:49:74:f8:5c:2c:f2:6d:e1:
40:52:e3:a0:f2:e0:1d:27:55:f6:e4:64:02:cd:7c:
46:c4:13:bd:46:28:2f:11:19:f3:64:1e:58:38:aa:
87:de:ef:89:08:fd:06:82:cf:7a:b1:f0:a2:30:95:
9a:a8:31:7f:14:f9:49:ae:6d:25:0d:d3:32:0c:af:
cd:97:04:5f:e9:1e:50:b7:37:17:62:cb:8c:9e:f5:
4d:71:de:9a:92:ba:f7:69:24:31:8b:e6:58:f5:02:
be:b1:c9:9f:e4:80:57:8b:9a:d3:a3:cb:bb:d1:83:
b0:5d:1f:f3:51:ed:31:14:04:6f:a8:68:56:ee:c8:
bc:62:a3:99:4f:b7:eb:6e:e1:74:ca:ab:b3:ba:ab:
6e:ea:b7:8c:4d:ec:33:75:b0:60:f2:bb:c3:f0:10:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:E7:72:19:80:C8:41:B6:1D:B1:CD:B8:BC:9B:34:83:BD:34:65
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3nHnchmAyEG2HbHNuLybNIO9NGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.178.0/24
163.5.184.0/24
163.5.188.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b1:a7:65:99:6b:28:06:62:00:54:3d:48:27:c3:19:a8:b0:
83:29:13:59:32:dc:d8:28:41:40:19:84:9c:62:27:c6:8b:45:
9b:cd:a5:b9:94:f5:03:f4:aa:c9:48:27:a7:89:b7:83:4f:1d:
bd:5e:a3:c8:6d:5e:d7:37:74:05:00:59:68:a0:9a:0c:85:ae:
f2:6e:25:69:9b:37:7a:e6:e3:a9:9d:96:e5:df:47:c9:28:b8:
f1:94:09:88:d4:54:71:f6:f2:a7:6f:39:c7:e9:2b:43:f1:53:
40:6e:fd:9f:c8:19:44:c2:63:b4:1c:cf:46:07:4b:28:c3:ae:
8d:9e:5a:9b:ce:67:d6:2d:97:0f:fc:30:c3:7f:48:0a:07:25:
4d:7f:a3:78:af:6c:c9:31:aa:a5:9a:ea:06:d1:34:35:b1:26:
6d:77:f8:77:2c:2a:ce:81:17:a9:90:ad:41:03:d0:5d:c4:42:
b8:8f:1e:cc:a7:4b:06:54:ef:0a:2d:25:91:df:a1:48:e9:80:
e3:a6:11:39:05:5e:24:44:ed:38:68:66:1e:56:5a:b8:1f:a2:
7a:7d:7e:7e:a5:52:6e:cd:1c:4d:9a:4c:a6:99:20:00:6f:75:
01:67:af:c2:ac:2b:a6:95:03:33:b3:c9:89:09:ab:ef:35:c3:
4e:46:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:19:24 2024 by rpki-client on console-fra.rpki-client.org