Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9E2gA-jObqv9Gt0iKqjRkVHBYE0.roa
File: 9E2gA-jObqv9Gt0iKqjRkVHBYE0.roa (raw, json)
Hash identifier: gGJMkozngzqYhcdbshJVyiatGlA2mjuNh+ujk4pV49M=
Subject key identifier: F4:4D:A0:03:E8:CE:6E:AB:FD:1A:DD:22:2A:A8:D1:91:51:C1:60:4D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EC2E8FC3CE80DF25605835950EBC64D0C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9E2gA-jObqv9Gt0iKqjRkVHBYE0.roa
Signing time: Tue 09 Apr 2024 12:50:32 +0000
ROA not before: Tue 09 Apr 2024 12:50:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59538
IP address blocks: 163.5.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:e8:fc:3c:e8:0d:f2:56:05:83:59:50:eb:c6:4d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 9 12:50:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f44da003e8ce6eabfd1add222aa8d19151c1604d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:56:d0:1b:2a:f1:30:dc:a8:c8:ad:8e:8a:
66:1a:1e:f3:cc:6c:44:7d:46:5a:b9:3a:37:c1:05:
ff:03:e8:cf:c6:61:76:f6:93:4f:87:4a:fa:6e:b9:
da:2d:fe:5e:3e:cf:63:11:68:a4:86:fe:8f:a6:86:
b5:ce:e6:bb:33:18:1d:13:f0:90:09:34:98:1d:f3:
d6:f4:c4:cb:48:79:0b:aa:3b:e7:64:67:d1:a8:38:
da:09:11:c9:cd:c2:68:86:35:85:8c:41:27:7f:89:
90:f2:2d:a0:4d:cf:6a:a3:89:60:b3:53:a7:4a:02:
28:68:bd:ef:62:4e:c9:5d:dd:b6:2c:f9:68:6d:d0:
d7:c1:f5:0e:19:ea:70:9b:af:33:00:21:53:bc:22:
8a:30:a6:a7:d1:ed:e4:db:68:77:2d:a1:bf:7a:2a:
92:17:6c:0b:ad:d4:e1:9c:b8:f0:e7:88:a0:6c:cd:
c8:9c:25:f5:65:11:64:01:e6:6f:4e:55:b2:69:63:
3e:aa:63:db:c0:22:e9:e1:00:57:84:9f:f5:07:a2:
94:91:7b:01:09:e3:a2:60:61:a5:5b:14:87:c2:37:
43:65:e3:f7:0f:dd:d9:ab:f2:01:85:dc:0e:4c:a5:
2c:54:96:6a:10:90:1b:d6:6d:c8:93:e5:e9:71:9c:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4D:A0:03:E8:CE:6E:AB:FD:1A:DD:22:2A:A8:D1:91:51:C1:60:4D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9E2gA-jObqv9Gt0iKqjRkVHBYE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:72:f4:8f:4a:9b:5f:0c:65:9a:82:84:5b:bc:8f:3c:10:cb:
41:6d:84:fb:54:cd:64:fe:15:e6:4f:28:2c:9e:f5:8d:65:6a:
76:31:1e:f7:91:36:7c:19:cb:50:a3:34:d0:a5:28:32:a5:fe:
fa:3d:8a:80:c8:20:fb:e0:c8:45:fc:cb:f1:d7:01:97:dd:3f:
ee:bc:d6:1a:df:9c:17:bf:d3:73:ae:de:57:be:9f:d6:c3:ad:
8d:d2:a4:5a:7b:b3:0e:a4:76:c7:d8:27:c6:ca:42:2c:2d:69:
c1:d3:5e:e1:e6:8f:d1:73:33:45:1c:64:58:43:52:d9:30:d2:
c7:54:56:37:ba:12:8a:78:b1:1d:90:c0:3c:ae:87:55:45:8e:
69:f3:17:4f:88:9a:b2:1c:a4:00:c2:e6:a2:13:76:b4:c6:75:
7a:0c:26:44:11:49:9b:d0:21:97:70:29:62:ef:ab:c8:ce:b6:
19:00:6e:94:d4:df:a9:9f:d3:c6:58:77:a4:02:cd:52:c6:bc:
4f:5c:55:5d:ae:68:a0:86:45:a0:ae:33:ed:5e:6b:e5:6c:03:
d7:b9:dd:e8:64:6c:42:8d:2b:6e:d4:a1:47:13:95:06:cb:74:
3c:be:7a:eb:27:7c:25:05:b2:33:dd:f4:f0:9e:44:f8:74:47:
40:b4:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:39:10 2024 by rpki-client on console-fra.rpki-client.org