Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I_I_FUUSUkx7rqPG8sZy2Q4RxUE.roa
File: I_I_FUUSUkx7rqPG8sZy2Q4RxUE.roa (raw, json)
Hash identifier: 5NxGRZy7rFD8DD25rvPslTRvJgJJiLNiSxP6WMGl7BQ=
Subject key identifier: 23:F2:3F:15:45:12:52:4C:7B:AE:A3:C6:F2:C6:72:D9:0E:11:C5:41
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019078BFDEA0DA5352F9150BBE60E566879A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I_I_FUUSUkx7rqPG8sZy2Q4RxUE.roa
Signing time: Wed 03 Jul 2024 13:19:18 +0000
ROA not before: Wed 03 Jul 2024 13:19:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49434
IP address blocks: 163.5.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:bf:de:a0:da:53:52:f9:15:0b:be:60:e5:66:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 3 13:19:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23f23f154512524c7baea3c6f2c672d90e11c541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:d6:71:bb:52:6e:9b:cf:5d:4a:46:c1:9a:
7d:f5:5b:60:db:64:8e:4b:82:b8:c0:e2:44:97:fe:
2f:23:d3:64:cb:cc:65:01:4e:05:24:e5:bc:30:16:
75:a1:92:b3:57:cb:37:a2:ef:b3:b0:4c:9f:50:48:
01:7f:e9:6c:ef:b3:73:b1:7f:d8:91:2a:06:d8:2a:
f3:7f:e7:2f:0c:8e:7f:07:ad:6c:5c:1f:a5:8b:63:
83:8d:d7:8a:60:83:ee:3b:d1:68:e5:05:d0:c1:1e:
5a:08:4d:13:60:85:4a:26:cc:3c:73:7a:bd:27:b3:
2e:92:b5:05:ac:13:90:a9:cc:31:01:18:be:69:a7:
eb:98:7a:20:88:a9:39:ad:9e:62:67:93:db:f9:e7:
45:ed:3a:ae:b3:a7:48:2c:ee:a7:98:1e:b6:3b:3b:
b0:31:40:2c:82:75:65:b7:fe:13:4e:cb:ae:83:d3:
13:da:e8:48:22:8b:f0:3d:13:59:4d:ac:9f:b9:97:
45:fd:bd:0d:2a:b4:0f:1a:65:ca:ce:ec:f5:a8:d6:
4d:4f:73:6f:29:c2:66:1e:b1:e3:39:b4:a2:15:b5:
14:0b:19:aa:7f:dd:b7:81:f2:be:72:74:22:40:bf:
63:80:39:15:ed:c5:ba:62:f2:ba:bd:18:a4:6a:da:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:3F:15:45:12:52:4C:7B:AE:A3:C6:F2:C6:72:D9:0E:11:C5:41
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I_I_FUUSUkx7rqPG8sZy2Q4RxUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
45:da:53:66:78:fa:47:09:f8:1d:6f:d2:83:cd:31:36:ac:f3:
08:36:83:2b:db:06:09:bc:d0:79:79:10:41:ff:26:43:4b:f8:
f6:f9:7d:45:13:a8:f1:a2:0c:cd:bd:cf:97:18:43:6a:49:f4:
0a:8e:7b:c3:3f:16:5b:96:87:98:f5:82:35:aa:73:4f:f3:a2:
a9:bf:66:c7:c7:55:0c:b0:a9:9f:c5:ab:61:df:24:a4:34:3e:
31:f8:49:44:bb:13:82:67:8a:44:c4:d0:9d:35:cf:cc:3a:1f:
41:5c:3e:8a:b6:56:8e:5f:65:36:e1:76:ed:e0:71:de:95:67:
87:ba:e6:5d:1c:8a:58:3a:0b:ea:2e:47:20:b3:b2:e3:3e:5d:
b8:5f:7d:de:5f:f0:b2:11:4d:7b:d2:44:02:69:58:88:f4:b7:
94:d3:07:1c:a8:c2:28:cf:20:dd:9f:a2:ea:6c:d0:a1:b8:60:
88:05:5f:ca:92:53:91:09:13:8a:7b:6e:f5:33:b0:2c:9b:c6:
3d:be:63:dc:79:48:f9:71:5b:b7:50:99:11:ed:ad:00:8b:8c:
05:d8:7c:96:37:69:e7:f1:3b:fa:6d:74:95:46:7c:15:0b:3d:
08:d4:be:de:df:88:b2:4e:ab:35:90:af:d3:cd:2a:da:fe:57:
25:2e:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:25 2024 by rpki-client on console-ams.rpki-client.org