Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7bmyPBvmIKFv-sEYC73AodUexKc.roa
File: 7bmyPBvmIKFv-sEYC73AodUexKc.roa (raw, json)
Hash identifier: GHy/t1CA+h906mceyL4J7rZO4DsNYHOW3iuPgZpkL+I=
Subject key identifier: ED:B9:B2:3C:1B:E6:20:A1:6F:FA:C1:18:0B:BD:C0:A1:D5:1E:C4:A7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D3121C0E2832C52CF9C75C354B1BE98D6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7bmyPBvmIKFv-sEYC73AodUexKc.roa
Signing time: Mon 22 Jan 2024 12:25:12 +0000
ROA not before: Mon 22 Jan 2024 12:25:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56339
IP address blocks: 163.5.2.0/24 maxlen: 24
163.5.5.0/24 maxlen: 24
163.5.10.0/24 maxlen: 24
163.5.11.0/24 maxlen: 24
163.5.12.0/24 maxlen: 24
163.5.20.0/24 maxlen: 24
163.5.23.0/24 maxlen: 24
163.5.24.0/24 maxlen: 24
163.5.40.0/24 maxlen: 24
163.5.41.0/24 maxlen: 24
163.5.42.0/24 maxlen: 24
163.5.43.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.45.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.47.0/24 maxlen: 24
163.5.48.0/24 maxlen: 24
163.5.49.0/24 maxlen: 24
163.5.50.0/24 maxlen: 24
163.5.52.0/24 maxlen: 24
163.5.55.0/24 maxlen: 24
163.5.57.0/24 maxlen: 24
163.5.68.0/24 maxlen: 24
163.5.69.0/24 maxlen: 24
163.5.80.0/24 maxlen: 24
163.5.81.0/24 maxlen: 24
163.5.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:21:c0:e2:83:2c:52:cf:9c:75:c3:54:b1:be:98:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 22 12:25:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb9b23c1be620a16ffac1180bbdc0a1d51ec4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:25:c3:3d:25:bf:15:a7:92:7b:ea:a7:a6:
62:30:f2:04:9d:26:50:be:b1:73:dd:94:cd:e3:89:
35:6f:a9:23:22:9c:96:61:97:04:66:b6:aa:1d:1f:
a5:42:4c:74:f2:ea:08:4c:32:de:cd:f4:d2:0d:8e:
06:5b:0b:c6:77:05:d8:08:6d:07:00:50:13:8b:9f:
62:a3:a0:83:ee:ad:4b:a9:bd:82:49:c4:58:cb:21:
7c:99:84:16:f2:e3:de:a5:fa:b8:c7:1c:74:d8:4d:
c5:8b:ca:de:55:d6:3b:9a:dc:00:ec:42:1d:ab:56:
5e:86:97:90:57:23:f7:19:bf:2b:ac:5e:90:12:20:
e7:e2:8f:b3:a7:a8:70:9e:d9:ad:c9:54:58:4c:22:
f1:31:66:a7:96:52:f1:21:f0:de:04:3b:65:32:dc:
6c:19:c9:b7:e3:e9:50:c6:04:11:36:36:e7:7f:41:
fe:4a:56:65:d7:38:ff:1a:19:a2:97:52:cd:5c:28:
d1:70:20:28:8a:d4:7c:7a:f7:48:0b:6d:1c:f9:3d:
99:45:0f:30:33:eb:26:4f:6e:50:13:da:84:4e:8e:
b5:6a:22:91:62:12:9c:d3:b9:c8:ce:5b:e5:13:25:
84:e1:9a:56:34:a6:61:31:a2:d3:3a:07:a5:df:dc:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:B2:3C:1B:E6:20:A1:6F:FA:C1:18:0B:BD:C0:A1:D5:1E:C4:A7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7bmyPBvmIKFv-sEYC73AodUexKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.2.0/24
163.5.5.0/24
163.5.10.0-163.5.12.255
163.5.20.0/24
163.5.23.0-163.5.24.255
163.5.40.0-163.5.50.255
163.5.52.0/24
163.5.55.0/24
163.5.57.0/24
163.5.68.0/23
163.5.80.0/23
163.5.85.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c1:c0:8c:d1:2b:ce:54:16:9c:4a:57:29:5a:19:91:d7:cd:
42:18:0b:fc:1b:d5:62:3d:9b:2c:7f:08:b3:a3:ae:e5:b8:aa:
27:fc:7d:70:67:47:4f:cb:79:6d:28:5e:e8:d9:d5:57:18:0c:
f4:96:84:77:9e:f6:08:de:ff:0f:7d:e8:90:08:a5:57:5a:7c:
a7:60:dd:63:ee:34:0c:f3:fe:c2:71:8c:e4:9c:d5:a6:33:53:
7f:cf:2b:3d:31:0d:78:c1:af:60:79:fa:61:d7:28:6c:8c:53:
d3:2c:e9:db:0c:0d:c6:23:59:f7:3e:68:fc:50:7e:6c:93:99:
7d:08:3b:dc:16:42:cb:54:4a:4e:f2:a7:c9:6c:f4:4a:29:84:
23:ac:b5:ec:76:77:c2:ee:ba:58:78:48:72:ff:a7:c6:4e:7f:
54:28:09:0c:27:24:5d:4d:b4:bf:72:2a:95:f1:a6:30:d1:bd:
3b:ec:ea:81:7a:35:c5:c3:21:f9:03:34:4e:cb:a7:e0:fe:97:
29:bd:04:59:f9:94:29:97:e6:b1:45:d8:62:2d:a3:48:cf:f5:
da:77:22:6d:b0:58:37:24:40:05:9e:9d:b1:68:5c:f3:2d:64:
08:8f:14:c6:59:5c:df:a9:33:6d:02:2e:0d:26:c9:2a:fb:91:
60:ed:d3:cb
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAY0xIcDigyxSz5x1w1SxvpjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwMTIyMTIyNTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGI5YjIzYzFiZTYyMGExNmZmYWMxMTgwYmJkYzBhMWQ1MWVjNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa4lwz0lvxWnknvqp6ZiMPIEnSZQ
vrFz3ZTN44k1b6kjIpyWYZcEZraqHR+lQkx08uoITDLezfTSDY4GWwvGdwXYCG0H
AFATi59io6CD7q1Lqb2CScRYyyF8mYQW8uPepfq4xxx02E3Fi8reVdY7mtwA7EId
q1ZehpeQVyP3Gb8rrF6QEiDn4o+zp6hwntmtyVRYTCLxMWanllLxIfDeBDtlMtxs
Gcm34+lQxgQRNjbnf0H+SlZl1zj/Ghmil1LNXCjRcCAoitR8evdIC20c+T2ZRQ8w
M+smT25QE9qETo61aiKRYhKc07nIzlvlEyWE4ZpWNKZhMaLTOgel39yM7QIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFO25sjwb5iChb/rBGAu9wKHVHsSnMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvN2JteVBCdm1JS0Z2LXNFWUM3M0FvZFVleEtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAowUCAwQA
owUFMAwDBAGjBQoDBACjBQwDBACjBRQwDAMEAKMFFwMEAKMFGDAMAwQDowUoAwQA
owUyAwQAowU0AwQAowU3AwQAowU5AwQBowVEAwQBowVQAwQAowVVMA0GCSqGSIb3
DQEBCwUAA4IBAQADwcCM0SvOVBacSlcpWhmR181CGAv8G9ViPZssfwizo67luKon
/H1wZ0dPy3ltKF7o2dVXGAz0loR3nvYI3v8PfeiQCKVXWnynYN1j7jQM8/7CcYzk
nNWmM1N/zys9MQ14wa9gefph1yhsjFPTLOnbDA3GI1n3Pmj8UH5sk5l9CDvcFkLL
VEpO8qfJbPRKKYQjrLXsdnfC7rpYeEhy/6fGTn9UKAkMJyRdTbS/ciqV8aYw0b07
7OqBejXFwyH5AzROy6fg/pcpvQRZ+ZQpl+axRdhiLaNIz/XadyJtsFg3JEAFnp2x
aFzzLWQIjxTGWVzfqTNtAi4NJskq+5Fg7dPL
-----END CERTIFICATE-----
Generated at Fri May 3 01:07:48 2024 by rpki-client on console-ams.rpki-client.org