Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IeNNolTJayyHSiUxRBWVwH1vUXk.roa
File: IeNNolTJayyHSiUxRBWVwH1vUXk.roa (raw, json)
Hash identifier: viBcJ/eGFYWy3ixFYXrV0rohSjEvqkw9MgjJZW/H+HQ=
Subject key identifier: 21:E3:4D:A2:54:C9:6B:2C:87:4A:25:31:44:15:95:C0:7D:6F:51:79
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EB968C2ED9DEE64E3E2CA34B19D3718BC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IeNNolTJayyHSiUxRBWVwH1vUXk.roa
Signing time: Sun 07 Apr 2024 16:33:54 +0000
ROA not before: Sun 07 Apr 2024 16:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b9:68:c2:ed:9d:ee:64:e3:e2:ca:34:b1:9d:37:18:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 7 16:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21e34da254c96b2c874a2531441595c07d6f5179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6f:a2:1e:5e:be:cf:8e:c5:7f:67:ba:06:be:
93:20:de:c4:6b:af:47:4a:76:42:68:5d:99:61:66:
e5:f2:65:57:2a:d1:25:60:63:99:1d:ce:eb:cc:37:
bf:28:b7:95:58:17:79:b9:a1:5e:2b:b8:ea:3a:ea:
32:c5:db:1f:0d:1a:ac:55:df:e6:b2:f9:54:66:9c:
9e:5a:78:18:5e:b1:86:9d:37:76:f9:30:fc:09:45:
26:1f:6a:09:f5:b7:57:4a:fa:aa:52:d1:86:bf:10:
ad:8a:30:12:7c:82:87:25:fe:7a:b7:bf:b7:03:79:
a5:1e:5a:dc:c4:63:18:74:d6:32:a7:ae:a3:f5:5e:
29:5e:f1:ef:ea:ad:70:f4:d9:1e:54:83:3b:bc:41:
15:60:97:15:fc:ba:2b:ef:b2:55:ae:ee:71:13:95:
b6:85:c8:5a:09:3d:f2:03:98:bc:e6:3f:87:d6:1e:
5f:42:f7:15:fb:21:e5:7b:a3:f7:ec:3d:dd:33:38:
15:e2:3b:9a:40:c7:2f:b2:8e:67:91:e2:88:68:5f:
db:9e:5d:9a:01:20:11:0d:06:9f:15:3c:27:cc:38:
96:08:57:0f:19:ae:e4:5c:c0:15:17:10:16:1f:f5:
6f:90:8c:4a:26:2c:1e:d3:28:cb:e7:6a:8c:34:ca:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:4D:A2:54:C9:6B:2C:87:4A:25:31:44:15:95:C0:7D:6F:51:79
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IeNNolTJayyHSiUxRBWVwH1vUXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.192.0/23
163.5.195.0/24
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
3c:a0:fe:64:e0:94:74:5e:b4:9a:91:8d:ad:5a:e9:d2:2a:c4:
0c:a9:29:d9:bf:cb:97:a5:dd:48:1f:df:aa:35:12:4f:a8:66:
41:84:c7:d1:ca:9e:4f:f6:f6:db:56:da:0c:82:ce:bf:a6:b9:
2f:b2:f0:3f:1e:2d:c0:b1:a1:e4:e2:ff:4a:2b:bb:12:54:12:
1e:07:22:19:e0:53:9c:01:04:4f:4c:e6:c3:52:97:ed:2d:07:
22:fc:f4:99:d8:0e:ff:e9:26:f1:bd:e3:91:c7:9c:ad:23:e6:
42:7f:71:02:79:ce:42:a4:24:5f:90:44:48:49:47:f0:a1:d9:
18:f8:57:03:e9:f9:60:47:3f:d7:4a:9e:20:eb:6c:55:a0:86:
20:32:2d:66:c5:58:2d:7f:dd:8d:76:b5:ab:29:36:13:49:16:
f2:81:52:bc:d8:6f:b1:9e:01:16:1f:41:89:c7:16:15:11:11:
c8:ed:19:62:35:7d:a3:7e:07:e6:b8:a0:dd:cf:3a:c9:12:77:
86:3a:e1:1b:00:9a:d5:8c:b7:55:5a:88:b7:42:dd:e5:82:44:
f1:07:67:1d:21:0b:63:fa:91:62:ab:86:06:fc:23:8c:e1:2e:
a3:51:fa:28:a9:b8:7b:af:7e:91:2a:3b:81:77:f8:27:29:8c:
e5:fe:e3:14
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY65aMLtne5k4+LKNLGdNxi8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwNDA3MTYzMzU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWUzNGRhMjU0Yzk2YjJjODc0YTI1MzE0NDE1OTVjMDdkNmY1MTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m+iHl6+z47Ff2e6Br6TIN7Ea69H
SnZCaF2ZYWbl8mVXKtElYGOZHc7rzDe/KLeVWBd5uaFeK7jqOuoyxdsfDRqsVd/m
svlUZpyeWngYXrGGnTd2+TD8CUUmH2oJ9bdXSvqqUtGGvxCtijASfIKHJf56t7+3
A3mlHlrcxGMYdNYyp66j9V4pXvHv6q1w9NkeVIM7vEEVYJcV/Lor77JVru5xE5W2
hchaCT3yA5i85j+H1h5fQvcV+yHle6P37D3dMzgV4juaQMcvso5nkeKIaF/bnl2a
ASARDQafFTwnzDiWCFcPGa7kXMAVFxAWH/VvkIxKJiwe0yjL52qMNMqJywIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCHjTaJUyWssh0olMUQVlcB9b1F5MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvSWVOTm9sVEpheXlIU2lVeFJCV1Z3SDF2VVhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBowXAAwQA
owXDMAwDBACjBdUDBACjBdYwDQYJKoZIhvcNAQELBQADggEBADyg/mTglHRetJqR
ja1a6dIqxAypKdm/y5el3Ugf36o1Ek+oZkGEx9HKnk/29ttW2gyCzr+muS+y8D8e
LcCxoeTi/0oruxJUEh4HIhngU5wBBE9M5sNSl+0tByL89JnYDv/pJvG945HHnK0j
5kJ/cQJ5zkKkJF+QREhJR/Ch2Rj4VwPp+WBHP9dKniDrbFWghiAyLWbFWC1/3Y12
taspNhNJFvKBUrzYb7GeARYfQYnHFhUREcjtGWI1faN+B+a4oN3POskSd4Y64RsA
mtWMt1VaiLdC3eWCRPEHZx0hC2P6kWKrhgb8I4zhLqNR+iipuHuvfpEqO4F3+Ccp
jOX+4xQ=
-----END CERTIFICATE-----
Generated at Fri May 3 13:05:40 2024 by rpki-client on console-ams.rpki-client.org