Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6xS03trbSeO53lcf3bmB8LF5qzU.roa
File: 6xS03trbSeO53lcf3bmB8LF5qzU.roa (raw, json)
Hash identifier: 57qzyf211Rbk/KwBliJUpNm/Y4MElXl80w//88he0Qc=
Subject key identifier: EB:14:B4:DE:DA:DB:49:E3:B9:DE:57:1F:DD:B9:81:F0:B1:79:AB:35
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191EB792AC722236B294333675CB0266E73
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6xS03trbSeO53lcf3bmB8LF5qzU.roa
Signing time: Fri 13 Sep 2024 13:01:12 +0000
ROA not before: Fri 13 Sep 2024 13:01:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 163.5.51.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:79:2a:c7:22:23:6b:29:43:33:67:5c:b0:26:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 13 13:01:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb14b4dedadb49e3b9de571fddb981f0b179ab35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:62:4c:a3:17:63:57:ee:06:4d:b7:20:a3:d7:
17:3a:05:92:6b:52:1c:b0:e9:5d:5c:a1:16:85:88:
3a:84:bb:fd:6e:df:16:7e:c1:00:cf:81:65:c9:8a:
9d:60:07:09:3e:93:88:46:4e:b8:c3:c6:4d:f0:7e:
5e:c2:3a:cb:54:79:c3:f8:13:33:5a:cc:c9:7d:93:
1a:c7:3b:c4:3f:e3:53:c1:38:34:27:d2:71:0e:43:
f5:7e:57:32:d8:a3:a7:44:29:95:3c:b5:4e:23:7a:
a0:9b:e1:f9:26:07:39:a1:15:b1:12:d8:78:c5:b7:
de:ce:57:f1:5e:46:9c:c0:7e:62:a0:b3:d4:3e:af:
3c:0e:2c:78:0d:48:38:70:e5:30:c7:32:25:8d:35:
1b:a3:ed:f4:d0:ac:90:f6:87:a9:87:a7:3a:4d:38:
c9:04:8f:96:0a:94:10:6d:f5:b3:db:53:fc:ad:a5:
61:a9:63:e1:60:12:c7:8f:32:41:2b:48:1c:1a:a8:
27:c1:87:a9:a1:ea:2c:4b:c2:b5:e9:01:ab:41:37:
50:fc:d4:cf:f0:85:5e:b6:47:3e:8b:48:c0:0d:ab:
59:c6:ac:9e:cf:d2:b8:fe:8f:f4:51:73:ec:6a:05:
8a:f3:24:c7:75:77:bc:9d:4f:d2:2a:95:5c:69:3c:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:14:B4:DE:DA:DB:49:E3:B9:DE:57:1F:DD:B9:81:F0:B1:79:AB:35
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6xS03trbSeO53lcf3bmB8LF5qzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.51.0/24
163.5.134.0/24
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
53:13:b4:bb:93:f7:84:eb:2d:a7:49:80:ff:29:02:06:1e:19:
bd:75:d1:fe:59:27:6e:5a:33:10:9d:4a:37:af:22:75:f4:4a:
30:ff:d6:f5:6f:b5:81:7f:b0:13:40:d1:0b:71:1b:84:5d:27:
35:5f:6d:d3:50:b5:bb:4e:0c:c9:18:f4:84:14:06:44:e5:3e:
b5:36:54:34:42:4a:c2:9f:c1:e5:9e:93:25:41:d5:cc:45:e1:
04:5f:c3:b4:e1:e7:96:43:d7:5c:31:6c:8c:09:4c:93:04:25:
b9:b3:0f:3d:c2:9c:3f:83:51:a0:c1:68:70:22:63:3d:26:a1:
21:0b:56:f0:a8:a4:30:cd:0e:00:de:ac:54:2b:a1:60:21:61:
b0:11:7b:a0:6d:3a:2b:41:2c:20:83:84:66:24:dd:72:e5:1c:
88:5b:c5:a7:15:e9:99:4d:bd:a1:ab:a2:43:33:1d:0b:d8:e4:
50:bf:5e:25:87:97:4d:92:ba:03:10:a7:f7:f8:2f:fa:54:41:
9b:1b:7e:1f:26:2d:73:b4:27:45:f1:01:14:6f:6b:b3:18:9d:
cc:1c:f4:a7:ed:85:f4:d7:80:9a:93:67:96:13:a4:87:71:43:
ca:77:59:b8:90:0a:1f:b1:8e:1b:03:e3:69:56:5a:c5:b3:27:
71:44:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:33 2024 by rpki-client on console-ams.rpki-client.org