Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6ImA3VLWhiTjYSJR7Q8Y58nU98E.roa
File: 6ImA3VLWhiTjYSJR7Q8Y58nU98E.roa (raw, json)
Hash identifier: F/7lBVBoWkoZKw8jo1Spt91eI2nxAUTKGlRKJEzN/8w=
Subject key identifier: E8:89:80:DD:52:D6:86:24:E3:61:22:51:ED:0F:18:E7:C9:D4:F7:C1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255567620C26C567BD9C07E59284B1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6ImA3VLWhiTjYSJR7Q8Y58nU98E.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39120
IP address blocks: 163.5.205.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:55:67:62:0c:26:c5:67:bd:9c:07:e5:92:84:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e88980dd52d68624e3612251ed0f18e7c9d4f7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:31:30:43:5e:ba:35:30:da:41:d4:f8:4b:
bf:89:e6:f1:55:73:6b:a5:c3:00:e3:17:2e:d9:87:
55:70:67:75:37:45:5d:d7:df:de:5a:29:79:a5:74:
4c:8d:54:34:81:24:0c:01:f0:42:68:93:61:c4:19:
2d:07:7b:a1:e0:72:2b:b6:9f:5a:20:26:fd:ab:9b:
ae:40:f1:fe:37:7a:01:d9:f5:e9:5a:86:6e:dc:62:
fa:f4:f2:3f:d4:b9:9f:66:3e:69:70:e6:a5:50:51:
cf:85:6f:12:74:88:57:cf:ef:79:48:8c:30:f9:d1:
ed:b2:bb:c2:1b:ef:c4:2d:36:84:91:10:e9:5e:15:
36:f2:50:a4:79:38:05:ff:e8:76:9e:40:22:c5:c0:
0e:c3:43:f6:75:87:77:36:16:12:54:e7:cc:06:7e:
6c:5a:6e:b4:17:8b:70:46:cc:a3:6a:87:fc:86:3f:
b4:fc:9f:3f:9d:15:b4:6a:a5:e7:61:ae:45:f2:51:
3d:aa:05:fb:16:77:f3:ff:ea:75:da:58:01:59:a5:
c3:24:bc:4f:ca:c7:e5:f4:f3:11:8e:8a:94:83:e2:
70:b2:1e:24:b6:21:0f:aa:37:89:f4:ba:4e:ba:6d:
be:cc:50:47:19:f0:bb:98:b0:2c:42:44:11:bd:87:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:89:80:DD:52:D6:86:24:E3:61:22:51:ED:0F:18:E7:C9:D4:F7:C1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6ImA3VLWhiTjYSJR7Q8Y58nU98E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.201.0/24
163.5.203.0-163.5.205.255
Signature Algorithm: sha256WithRSAEncryption
a8:11:b9:0a:e9:01:69:4c:dc:75:1a:29:e8:f7:69:ef:de:54:
aa:cc:e4:cd:da:83:aa:20:d4:92:75:e3:35:0e:3c:06:39:7a:
08:d7:47:a1:92:bc:1b:37:f7:e6:0c:9d:90:6f:a1:11:69:39:
8a:32:12:d3:1e:27:c4:ad:e3:df:d3:45:e2:16:34:1d:33:26:
b8:07:2f:c2:8f:0c:fa:e9:2d:a1:41:87:1c:30:de:a0:77:b2:
c3:23:cb:04:bb:4f:a6:3b:d1:c9:df:f5:49:b5:27:f9:be:8c:
4d:82:84:65:44:17:db:de:db:17:1b:38:1f:39:a4:e0:c2:21:
37:e2:05:b0:84:89:0b:23:82:12:cb:ce:3c:c6:4e:7e:de:e7:
ed:0d:d8:86:75:27:78:b1:26:cf:67:ba:a0:64:e1:8b:93:90:
75:d0:f3:f2:2e:64:89:d9:19:4f:42:a3:d8:cf:05:af:14:74:
07:c0:f3:fb:b9:40:1a:b3:7a:c6:9b:b2:19:2b:d9:7c:da:5a:
53:5d:a0:98:cf:13:9e:9b:c9:4d:7d:43:5a:9b:e2:a8:d3:16:
fc:54:29:6a:1f:68:0a:2b:71:50:ce:44:97:d5:df:ff:d0:2e:
4a:ff:9a:06:8e:3a:ab:02:1e:1a:62:67:e1:c1:bd:35:6b:e1:
3a:4a:a2:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:08 2024 by rpki-client on console-fra.rpki-client.org