Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J6Z6VEDoaZJQkA3k_vXJJF_KM-Y.roa
File: J6Z6VEDoaZJQkA3k_vXJJF_KM-Y.roa (raw, json)
Hash identifier: a5arGVAqazsBtBcfjdXcxPHBHkvcjHBAaHwMyv5Kwio=
Subject key identifier: 27:A6:7A:54:40:E8:69:92:50:90:0D:E4:FE:F5:C9:24:5F:CA:33:E6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018DCD9A75BD30A56ACB851EF5F1F93E185B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J6Z6VEDoaZJQkA3k_vXJJF_KM-Y.roa
Signing time: Wed 21 Feb 2024 21:37:48 +0000
ROA not before: Wed 21 Feb 2024 21:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 163.5.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 17:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cd:9a:75:bd:30:a5:6a:cb:85:1e:f5:f1:f9:3e:18:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 21 21:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27a67a5440e8699250900de4fef5c9245fca33e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:cb:e5:aa:a6:c6:c9:35:f9:99:dd:c2:e3:
68:ba:b0:b6:cb:d0:18:6a:d3:84:d0:91:7c:bb:e0:
18:c7:d0:71:04:b3:27:7a:81:b2:80:95:ef:8b:3f:
d1:96:5d:23:81:0e:86:dc:e8:2e:cf:23:2d:8c:df:
61:ca:55:c8:e7:23:a1:1f:22:00:fa:c1:23:ae:71:
8d:85:0a:cb:7c:f7:80:66:d4:d9:6d:11:ce:a5:50:
9b:47:78:5c:fc:8a:a3:17:22:43:eb:52:62:d4:b9:
3a:19:8a:6f:28:fd:64:ea:44:d0:25:4d:b0:93:d6:
87:97:9d:60:9b:2a:40:c1:6a:35:5a:30:a4:32:a6:
7a:9e:d2:a9:5b:db:f1:58:50:45:d5:f0:7f:d3:fb:
18:26:8d:42:4d:0a:45:2a:db:ea:e4:ec:5e:01:ef:
7b:63:fc:00:a6:27:62:e8:bb:a1:85:a7:0d:32:9b:
ac:d4:07:0e:db:9a:9d:c7:85:f7:0f:15:28:44:29:
11:c7:d0:bc:b7:12:4e:ce:78:07:a3:66:b4:27:df:
a5:9e:f9:d2:a7:3e:52:19:1f:b2:b4:98:73:fe:71:
98:1f:1c:27:a0:ec:a0:34:ce:fd:6e:85:71:f2:2f:
0d:70:d1:79:59:86:e5:6b:db:3e:e7:18:ff:a7:cc:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A6:7A:54:40:E8:69:92:50:90:0D:E4:FE:F5:C9:24:5F:CA:33:E6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J6Z6VEDoaZJQkA3k_vXJJF_KM-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:59:23:7c:c0:f4:5c:81:85:a9:32:7a:b1:3e:81:40:49:04:
3c:cb:cc:27:8d:84:61:ee:af:60:cb:7a:97:4d:9e:71:6c:b0:
12:c7:f6:37:85:05:1b:01:77:49:7a:e7:5f:f4:37:00:cb:21:
1b:7e:92:ab:11:f2:57:25:71:d5:2b:7e:52:51:74:b3:51:58:
bc:55:4c:7d:9a:48:de:f5:c1:6c:43:de:2c:66:43:2c:74:6c:
e0:cf:1f:c1:bb:25:09:9a:c7:b4:c1:f4:4a:bf:e0:55:3c:b1:
c5:99:15:40:cd:81:83:6d:d3:68:da:40:81:4e:58:1e:3f:4f:
76:4a:81:da:51:b0:5e:6e:0b:2c:da:15:2a:e2:e7:9f:66:a8:
7c:77:8a:21:66:ff:d9:b4:0b:a5:a9:c6:47:e4:75:bb:10:f5:
f9:e7:5d:a0:07:fa:6f:96:53:89:52:5f:ef:4f:9f:a3:38:6f:
f4:1f:68:59:d2:81:1e:8c:80:20:99:50:46:30:cd:71:e9:c7:
96:61:31:dd:be:89:bd:32:a3:f0:0b:a2:71:8f:7f:ab:59:89:
ff:82:c3:b4:e2:b0:2b:00:49:bd:3e:6f:06:61:02:47:2c:74:
5a:d7:97:78:1c:e8:e1:86:55:c4:9e:93:c4:7d:2e:61:1c:7b:
07:ac:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:12:34 2024 by rpki-client on console-ams.rpki-client.org