Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4F_veKdWYhn8wDEXswKbD7jJFlE.roa
File: 4F_veKdWYhn8wDEXswKbD7jJFlE.roa (raw, json)
Hash identifier: gYhsyFkjKgzyAnpds3LAJu/lTI29XweZPkKOaGN1qb0=
Subject key identifier: E0:5F:EF:78:A7:56:62:19:FC:C0:31:17:B3:02:9B:0F:B8:C9:16:51
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192C8E35FEFE504B363366C430FFFA04E83
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4F_veKdWYhn8wDEXswKbD7jJFlE.roa
Signing time: Sat 26 Oct 2024 12:53:17 +0000
ROA not before: Sat 26 Oct 2024 12:53:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60790
IP address blocks: 163.5.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:e3:5f:ef:e5:04:b3:63:36:6c:43:0f:ff:a0:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 26 12:53:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e05fef78a7566219fcc03117b3029b0fb8c91651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:d8:53:ad:d6:9d:65:e4:1e:8b:16:aa:73:
07:64:b7:c3:10:6d:56:e8:81:87:4c:6e:7c:09:9f:
2c:58:f5:62:5d:e8:9c:16:0e:3c:5a:f6:80:a9:08:
d2:14:e5:a8:24:bd:46:da:7b:a6:c4:c8:a9:88:82:
36:2f:36:51:2c:b9:72:21:9f:16:31:5c:6e:f5:b1:
91:bb:f1:f2:d1:4d:29:3c:9e:f9:d3:21:92:95:12:
22:13:e5:00:21:ec:e7:d9:83:a3:28:3f:03:9b:39:
c5:d7:6d:63:c2:f3:7d:95:26:3d:36:52:9d:ab:55:
7a:4c:c2:a9:d0:85:c6:ba:52:28:2d:18:c8:fb:35:
df:0b:66:b8:a7:ed:1c:69:90:ce:5d:99:6d:45:70:
2b:86:9e:3b:db:cd:54:84:48:47:f5:b8:7b:41:0d:
b5:05:f3:95:f0:d5:c4:2b:be:8a:e9:3a:a0:84:30:
e6:24:32:c6:87:1e:76:41:96:d7:b7:d0:4a:3c:10:
f4:26:99:f8:97:fb:c7:8d:38:81:85:65:33:3f:42:
58:f3:7f:78:6c:b2:bb:6d:b8:a0:06:e9:c5:34:a0:
34:28:90:7b:99:aa:82:f5:2b:34:78:43:9a:60:63:
6a:df:88:3f:65:cb:d0:91:ce:3f:62:a8:32:5d:90:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5F:EF:78:A7:56:62:19:FC:C0:31:17:B3:02:9B:0F:B8:C9:16:51
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4F_veKdWYhn8wDEXswKbD7jJFlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:85:a8:06:9b:98:8b:d8:04:32:8e:66:4b:87:fe:e4:f3:d3:
71:4f:da:8c:44:e0:d7:f8:f1:8d:b9:91:8a:d4:78:e9:13:9d:
e1:90:7e:a3:b5:b9:0a:14:a6:c0:c7:ef:8e:57:36:8a:40:07:
65:e5:07:f3:9d:d9:97:e5:9f:78:99:bc:bc:b5:dd:9f:31:ab:
f7:7d:51:bb:e6:ac:c7:2d:16:f6:73:b4:8d:40:16:ce:67:59:
85:99:d0:8b:13:24:91:8f:d0:22:e8:64:1a:b3:c6:5b:09:7a:
cc:b3:c2:32:c6:70:a8:da:9d:e1:ee:1c:14:b8:e5:58:e4:a6:
70:f4:9d:da:71:2f:22:02:b3:4d:56:55:c4:37:d5:d6:49:8c:
9e:07:2b:fd:3e:15:b8:2b:74:db:c8:ef:aa:5e:79:8c:53:57:
0c:77:3d:e0:95:5b:a9:91:80:78:11:8d:37:a4:89:1b:da:29:
16:23:9c:1f:b1:2b:eb:f9:92:70:78:ac:aa:93:a8:fb:08:ad:
e3:f0:1c:0e:7b:f1:a0:32:d0:c1:a3:ee:ca:02:eb:b4:3f:c8:
a6:05:a7:ca:d1:18:46:c6:87:95:f1:3c:74:d6:a9:0b:c3:b6:
af:ea:3f:ff:85:09:0b:ea:31:5f:a3:70:14:59:f3:e8:9a:6f:
6b:04:a2:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLI41/v5QSzYzZsQw//oE6DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMDI2MTI1MzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDVmZWY3OGE3NTY2MjE5ZmNjMDMxMTdiMzAyOWIwZmI4YzkxNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW3YU63WnWXkHosWqnMHZLfDEG1W
6IGHTG58CZ8sWPViXeicFg48WvaAqQjSFOWoJL1G2numxMipiII2LzZRLLlyIZ8W
MVxu9bGRu/Hy0U0pPJ750yGSlRIiE+UAIezn2YOjKD8DmznF121jwvN9lSY9NlKd
q1V6TMKp0IXGulIoLRjI+zXfC2a4p+0caZDOXZltRXArhp47281UhEhH9bh7QQ21
BfOV8NXEK76K6TqghDDmJDLGhx52QZbXt9BKPBD0Jpn4l/vHjTiBhWUzP0JY8394
bLK7bbigBunFNKA0KJB7maqC9Ss0eEOaYGNq34g/ZcvQkc4/YqgyXZCx4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOBf73inVmIZ/MAxF7MCmw+4yRZRMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNEZfdmVLZFdZaG44d0RFWHN3S2JEN2pKRmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWHMA0G
CSqGSIb3DQEBCwUAA4IBAQCahagGm5iL2AQyjmZLh/7k89NxT9qMRODX+PGNuZGK
1HjpE53hkH6jtbkKFKbAx++OVzaKQAdl5QfzndmX5Z94mby8td2fMav3fVG75qzH
LRb2c7SNQBbOZ1mFmdCLEySRj9Ai6GQas8ZbCXrMs8IyxnCo2p3h7hwUuOVY5KZw
9J3acS8iArNNVlXEN9XWSYyeByv9PhW4K3TbyO+qXnmMU1cMdz3glVupkYB4EY03
pIkb2ikWI5wfsSvr+ZJweKyqk6j7CK3j8BwOe/GgMtDBo+7KAuu0P8imBafK0RhG
xoeV8Tx01qkLw7av6j//hQkL6jFfo3AUWfPomm9rBKIa
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:08 2024 by rpki-client on console-fra.rpki-client.org