Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GGrlfsuVODWNedj4vy6eR46XP4k.roa
File: GGrlfsuVODWNedj4vy6eR46XP4k.roa (raw, json)
Hash identifier: V/4T/TMYyP/Mrr5WvU8vmcSUZxtZBA8zMElkaaa+RmM=
Subject key identifier: 18:6A:E5:7E:CB:95:38:35:8D:79:D8:F8:BF:2E:9E:47:8E:97:3F:89
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192DE5C6EAE88E82CD0A56A3469215CD53B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GGrlfsuVODWNedj4vy6eR46XP4k.roa
Signing time: Wed 30 Oct 2024 16:57:32 +0000
ROA not before: Wed 30 Oct 2024 16:57:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 163.5.61.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:5c:6e:ae:88:e8:2c:d0:a5:6a:34:69:21:5c:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 30 16:57:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=186ae57ecb9538358d79d8f8bf2e9e478e973f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:d6:c7:d9:07:d6:a8:42:4f:65:0d:02:92:
46:da:1f:27:48:56:b6:4b:37:9b:91:5c:f6:51:48:
fd:67:0b:43:dd:cd:9c:0b:d5:a8:c6:0b:a5:4b:52:
fe:fc:0a:a2:14:c4:8a:f2:25:ea:05:e6:d3:de:68:
12:9e:32:6e:e0:e0:e9:ec:24:43:5a:f4:04:6d:a2:
27:71:52:c5:fe:bb:a4:3c:fd:43:c0:19:36:8d:21:
3a:d1:06:85:1f:45:72:13:12:a5:c7:06:6b:3a:1e:
de:d4:2c:ab:8b:6b:eb:9d:24:d7:be:7f:a7:64:30:
fb:db:85:f0:b8:bf:c4:9c:76:82:07:f9:82:9b:30:
f6:a1:dc:40:46:c0:72:e3:f5:eb:3a:57:75:78:1c:
4c:54:81:c4:94:9b:c4:b2:6f:7d:6c:95:1f:e6:85:
ed:dc:86:e5:60:03:9e:5f:b5:99:ba:d2:bf:52:5f:
a0:4a:15:ff:f4:43:91:a9:21:40:ef:98:38:f2:f2:
28:bd:33:ea:6f:10:2b:ac:19:63:e0:d8:0a:28:71:
6e:bf:bc:a2:f9:e9:94:91:9d:83:de:f5:8d:69:59:
92:77:b3:37:8b:cb:d9:e8:00:30:da:dd:0a:16:6a:
77:51:5b:73:4a:f7:e5:2d:e4:f0:8e:71:05:a5:ac:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6A:E5:7E:CB:95:38:35:8D:79:D8:F8:BF:2E:9E:47:8E:97:3F:89
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GGrlfsuVODWNedj4vy6eR46XP4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.61.0/24
163.5.91.0/24
163.5.140.0/24
163.5.215.0/24
163.5.239.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e4:85:35:4f:a9:44:6d:89:fe:51:1d:d6:3e:0c:41:61:d4:
21:e0:8a:ce:fa:f7:00:5c:54:eb:c4:5a:0c:05:66:d7:c5:6f:
f4:9c:06:b4:ec:3e:f3:7a:84:0c:9b:04:0d:4e:3d:e6:ce:7a:
81:70:5e:ec:ca:5a:47:28:a8:c1:56:d7:fd:a1:1a:08:f0:d1:
dd:d9:e8:4d:95:35:30:a2:be:ef:de:9c:3c:74:4d:97:d4:02:
7d:b4:c3:5a:f9:69:d2:80:b4:48:44:9b:0b:21:38:53:f6:e4:
50:98:2b:de:55:dd:0e:f6:b0:1f:3c:1e:c5:a1:d2:c8:6a:05:
d6:8b:f2:e9:66:4d:6f:31:69:1a:02:7c:a7:d0:72:48:49:db:
be:88:9a:dc:6e:78:95:83:70:b5:e0:2b:8c:d1:72:77:c0:a7:
e8:21:ec:a0:a3:c5:e4:4c:5e:28:6c:b6:b9:e0:5b:b7:7b:db:
f6:68:f9:f9:e3:d6:c7:ce:9f:2f:6c:a6:8f:82:e2:a4:a6:3d:
4a:a0:85:a0:d0:b3:41:92:65:60:8b:45:ee:76:37:2e:b9:84:
33:5e:a3:fe:70:67:ff:31:8f:a0:8d:88:ba:53:03:49:6a:2c:
9c:b5:0d:13:59:fc:c7:ad:63:99:54:60:0d:96:de:5c:04:de:
88:22:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:26 2024 by rpki-client on console-ams.rpki-client.org