Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ij5E0k3qdkCCClpjQPhinF76oSo.roa
File: Ij5E0k3qdkCCClpjQPhinF76oSo.roa (raw, json)
Hash identifier: a2EsU121kBsu5umEjWw5+h18Ae1Tg1aQPD4J4UsX04g=
Subject key identifier: 22:3E:44:D2:4D:EA:76:40:82:0A:5A:63:40:F8:62:9C:5E:FA:A1:2A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4254F11F959284A28514258A2DF157F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ij5E0k3qdkCCClpjQPhinF76oSo.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 163.5.220.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4f:11:f9:59:28:4a:28:51:42:58:a2:df:15:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=223e44d24dea7640820a5a6340f8629c5efaa12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:1d:4a:b6:a6:69:c7:44:1f:6f:17:1d:59:
52:06:54:90:9e:ef:6f:86:88:37:dd:d6:6e:d2:fa:
db:0c:1c:8f:ba:13:c8:8c:d2:ea:22:88:2c:b8:f5:
31:d0:3b:56:26:8d:7a:bd:9f:22:27:05:01:57:20:
66:b1:fe:65:0b:33:3a:5d:80:ec:20:d3:ff:b9:f3:
e0:76:e2:f0:82:55:34:04:79:86:65:d0:6e:83:5d:
d6:fa:26:ad:a4:e7:6a:97:b9:23:99:8f:2b:c7:b3:
08:e1:6a:7e:eb:19:bf:5e:73:a0:b6:a3:1a:f7:e5:
69:de:3d:6f:b7:9e:0a:ab:36:ac:82:1d:ab:43:81:
cb:bf:eb:14:ff:f2:3e:69:01:66:61:98:10:bb:c2:
bf:5d:cd:c0:9f:1d:04:c3:cc:69:4a:70:30:0a:99:
fc:d8:3b:f9:30:b5:1a:c0:a7:69:61:5a:2c:1e:17:
e4:99:2e:b5:91:f4:55:00:39:9b:ac:3a:5b:f5:ef:
2e:11:ca:e7:14:ce:8b:f1:f5:30:e1:d6:e4:69:d0:
f9:7c:b2:6e:ca:67:60:39:f0:d1:de:af:2e:f9:6f:
71:64:96:66:8f:2f:84:3c:c2:65:5a:9c:2a:cf:4d:
d5:b0:0f:e8:db:89:91:f5:93:de:0b:11:56:72:98:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:44:D2:4D:EA:76:40:82:0A:5A:63:40:F8:62:9C:5E:FA:A1:2A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ij5E0k3qdkCCClpjQPhinF76oSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.155.0/24
163.5.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:8b:e4:9a:ed:15:57:a1:20:8e:5b:44:dd:fb:21:64:30:f9:
59:0a:67:81:e6:96:f2:82:b6:5c:5c:0c:85:62:c9:b2:9f:5f:
7f:1d:a1:62:15:c7:6b:b2:59:70:e8:7c:d0:c3:02:16:53:74:
0a:b4:2a:e1:a8:08:a2:d7:95:1a:b6:2b:d6:94:34:df:62:c9:
9c:e9:02:b2:5c:0b:5d:24:ea:8a:dc:0f:b8:71:30:27:c3:e7:
ee:d2:2f:61:08:b7:cf:86:02:7c:45:ce:f2:35:9d:40:28:48:
87:d7:1f:01:50:57:84:ee:f9:75:a7:63:82:32:e5:64:94:9c:
86:fa:f9:c6:4e:6a:8a:0d:cb:dd:7e:47:1e:7d:92:48:55:d5:
b7:ae:b2:47:8e:2b:6e:5b:9c:fc:90:f9:e5:a3:c7:9b:1b:6b:
68:46:43:57:14:ed:d2:19:3a:0d:4e:0a:9f:dd:bf:b2:ed:04:
45:71:ea:c8:ab:f7:bd:4e:ed:c9:22:6d:dd:ef:28:93:49:58:
3c:09:5a:e5:89:f0:68:22:cc:23:e3:75:2a:7f:05:46:de:68:
f5:9f:d5:e6:86:04:2f:ad:f8:1a:f0:7b:0f:96:81:29:fd:65:
29:45:30:14:01:79:20:b3:58:c3:c1:16:bd:1f:4b:da:d4:ad:
c5:ad:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:06:51 2024 by rpki-client on console-fra.rpki-client.org