Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Bdb3Y2_U6uq12Xm6oXZ0228sBJQ.roa
File: Bdb3Y2_U6uq12Xm6oXZ0228sBJQ.roa (raw, json)
Hash identifier: xsBfVEZLyFTdtsos4sy+2slfHUOL9HJWvZeU4jIxwoo=
Subject key identifier: 05:D6:F7:63:6F:D4:EA:EA:B5:D9:79:BA:A1:76:74:DB:6F:2C:04:94
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0190C4B5E9B4E0311EFCE8AC76FFB05CA8DB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Bdb3Y2_U6uq12Xm6oXZ0228sBJQ.roa
Signing time: Thu 18 Jul 2024 07:19:34 +0000
ROA not before: Thu 18 Jul 2024 07:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 163.5.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:b5:e9:b4:e0:31:1e:fc:e8:ac:76:ff:b0:5c:a8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 18 07:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05d6f7636fd4eaeab5d979baa17674db6f2c0494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:7a:d6:aa:b5:f5:ad:7e:d7:3c:68:c1:46:
bb:50:84:c7:fc:cb:72:4b:01:56:fa:09:4f:24:ea:
4f:51:5f:6e:0e:ec:db:a5:7a:78:c3:ef:41:14:1f:
da:0d:3c:2e:b4:4b:83:10:ba:08:8d:b0:80:1b:03:
16:2e:61:12:45:85:0f:56:19:f1:08:c1:71:55:e7:
2d:31:47:5d:8f:d5:31:58:7a:ad:5e:e8:24:d6:e7:
ef:b6:c8:c6:42:90:e1:b5:6a:7b:c6:e6:ac:74:91:
cf:11:7c:ab:d8:af:37:fa:ad:ca:e7:d2:3a:1e:7e:
61:b4:6f:c8:66:3b:0f:13:e9:d8:aa:fe:7a:24:3c:
ed:a5:8c:0a:e9:ab:3b:a8:35:42:74:28:c0:5b:fa:
31:98:36:f5:a9:b7:60:1e:48:ca:74:08:40:6b:96:
7f:9c:b1:60:f2:b8:6f:98:8e:f9:f8:2b:48:bb:71:
d1:52:63:32:9e:d0:38:8e:4f:34:fe:14:6a:8b:f9:
80:69:36:b4:d5:3a:cc:ea:18:af:56:d3:19:55:c9:
4c:b2:b5:10:50:f7:0e:63:a7:bb:c7:82:e1:17:72:
a4:65:c4:38:81:ad:ff:70:ce:35:27:37:aa:4e:b8:
07:ac:9a:5a:df:1f:a6:bc:11:ab:b1:5f:ba:2b:6a:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:F7:63:6F:D4:EA:EA:B5:D9:79:BA:A1:76:74:DB:6F:2C:04:94
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Bdb3Y2_U6uq12Xm6oXZ0228sBJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a6:5e:b4:08:7c:d1:41:e9:9d:e7:9a:bc:54:02:e4:79:7e:
3d:69:85:72:a7:58:0f:b6:d6:3a:ef:94:6d:87:8b:a5:cb:25:
37:e8:c1:db:af:33:f5:b8:62:51:3a:f6:0c:d6:97:e4:ff:dd:
93:10:40:00:f7:dc:85:7a:81:07:89:d1:0f:ce:a1:d5:b9:02:
00:54:ea:80:85:c5:32:e5:56:e2:77:5f:3e:04:df:59:76:66:
64:91:9c:71:e9:c0:f0:8b:3d:67:84:82:dc:75:60:28:3f:ac:
f3:a4:f0:33:df:92:90:b1:98:37:c2:c8:4a:f1:c8:35:3a:f6:
e2:f9:b0:ab:ca:5a:7a:11:cc:4f:14:43:f7:eb:4d:c7:5c:66:
7b:26:a4:54:03:61:4e:ba:ce:f3:06:59:2e:26:c0:fb:2a:36:
52:37:77:73:79:38:76:cc:85:52:78:5c:a1:51:cd:95:30:d4:
d9:c8:7a:30:63:62:86:9b:2a:a8:dc:e0:14:92:c1:40:b8:df:
9c:e1:bb:8c:24:2f:04:42:fd:b1:44:e7:12:f4:11:f0:b7:73:
36:0c:cf:46:ac:39:64:de:0b:96:98:66:04:19:c4:99:9a:65:
88:89:62:dc:bd:48:26:c0:dc:23:f2:41:0e:4a:83:61:a7:8c:
71:a9:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:30 2024 by rpki-client on console-fra.rpki-client.org