Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5zVR9ynSUpd-cVjLxbr4ibhB-NA.roa
File: 5zVR9ynSUpd-cVjLxbr4ibhB-NA.roa (raw, json)
Hash identifier: ClWCwWjRRvIaFzYeWNM1XZJDv78N6bpPpd+1tJ5JRAg=
Subject key identifier: E7:35:51:F7:29:D2:52:97:7E:71:58:CB:C5:BA:F8:89:B8:41:F8:D0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CDAF4D95198446922736B769B2DF54623
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5zVR9ynSUpd-cVjLxbr4ibhB-NA.roa
Signing time: Fri 05 Jan 2024 18:48:48 +0000
ROA not before: Fri 05 Jan 2024 18:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199432
IP address blocks: 163.5.84.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:f4:d9:51:98:44:69:22:73:6b:76:9b:2d:f5:46:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 5 18:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e73551f729d252977e7158cbc5baf889b841f8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:cd:78:4d:2c:63:4e:0c:cf:2a:15:38:ba:
7c:2b:18:fe:a3:6f:9d:b2:16:b5:aa:88:04:c7:b7:
a4:b2:5c:83:89:d9:80:c9:0a:48:33:35:09:fb:ba:
9d:2a:94:b4:7f:78:6b:d5:51:cf:e7:29:57:ff:c5:
df:e8:4c:15:67:82:a7:fe:00:4e:2d:4e:bf:44:84:
f3:48:bd:7e:fa:7c:94:6c:ce:c9:8e:b2:69:6f:e1:
12:f1:e7:22:22:12:3f:44:75:01:3a:42:f8:52:95:
0e:9e:e3:24:96:ca:f8:18:4d:46:8b:21:2c:8b:3a:
b2:be:e9:44:91:e2:67:8e:a8:a8:e5:c1:5b:4a:4a:
94:a3:5d:3d:ac:e2:eb:0c:0f:58:14:c2:1d:e1:b5:
88:19:d3:8f:bb:e9:31:93:00:99:59:66:fd:cd:d1:
e2:f0:19:a4:9f:ea:d5:0c:40:56:31:b8:e5:32:c7:
b2:34:d6:e2:6b:1e:04:78:d3:d5:25:70:87:d9:26:
0a:78:7a:cc:03:4f:32:26:c3:6f:0c:28:06:77:6c:
51:0b:29:4d:3b:4e:b7:d5:1b:e0:65:62:40:87:a5:
58:0b:61:63:89:20:98:27:1b:7c:c3:72:73:9b:ca:
7a:e8:3d:d8:38:dc:bf:eb:d4:65:69:92:53:5e:cd:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:51:F7:29:D2:52:97:7E:71:58:CB:C5:BA:F8:89:B8:41:F8:D0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5zVR9ynSUpd-cVjLxbr4ibhB-NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.84.0/24
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a1:e0:74:51:49:4b:63:45:ae:36:ef:48:46:33:3d:37:e5:
31:77:24:c9:79:8b:4a:fd:26:78:db:2c:ff:cd:78:9e:51:42:
6e:ae:31:7f:5f:88:ba:6e:f5:e0:9b:2b:c4:9d:af:fa:e5:b3:
bb:4f:6c:87:8d:d5:47:c0:a7:e0:ee:69:19:ca:e4:7a:be:ca:
7d:20:8a:36:e5:19:cc:2f:01:d1:db:29:45:79:82:c0:ae:9f:
4c:df:4b:dd:d7:56:22:67:47:10:ea:17:e3:e2:60:8b:61:c6:
00:b4:5f:52:17:13:d6:96:ff:96:df:fb:9d:e7:42:5e:05:97:
71:e5:40:b2:97:dc:fc:aa:ac:ac:96:e0:34:b5:a6:f2:15:29:
73:0c:19:b4:86:69:07:e2:d9:10:50:34:2d:45:50:9b:1f:7a:
ae:71:55:2f:c7:bf:90:2b:18:45:c2:4e:e7:8d:58:d5:f4:e7:
5a:6d:0d:36:89:cf:0a:39:f9:ef:05:fc:ed:dc:c1:e6:26:ee:
ec:e6:0b:ac:be:ea:db:e2:83:27:00:da:b1:2c:63:96:e7:ca:
d3:5c:ec:00:ca:fc:e9:a9:6d:67:ce:44:99:c8:50:60:7f:21:
d2:75:43:d0:ad:e0:84:6c:f8:ce:0b:48:43:19:cd:d7:12:1b:
53:dc:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:25 2024 by rpki-client on console-ams.rpki-client.org