Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LzQSpLk5-uPMzQ6rfCmTM4LbDQY.roa
File: LzQSpLk5-uPMzQ6rfCmTM4LbDQY.roa (raw, json)
Hash identifier: QEV1N5JoTqeYJ17oonjnwV0W3RO2ja8GV7dNeKbnv4c=
Subject key identifier: 2F:34:12:A4:B9:39:FA:E3:CC:CD:0E:AB:7C:29:93:33:82:DB:0D:06
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193603ABEF5EB3E34F46E683A5E89A51791
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LzQSpLk5-uPMzQ6rfCmTM4LbDQY.roa
Signing time: Sun 24 Nov 2024 22:11:22 +0000
ROA not before: Sun 24 Nov 2024 22:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 265919
IP address blocks: 163.5.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:3a:be:f5:eb:3e:34:f4:6e:68:3a:5e:89:a5:17:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 24 22:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f3412a4b939fae3cccd0eab7c29933382db0d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:26:16:5a:06:31:f6:a0:b5:fb:ff:2c:33:
1b:f0:1d:07:5d:21:65:10:24:e6:86:45:65:e0:25:
4a:1c:1c:ac:7e:7f:9f:fc:ae:4c:96:3c:0c:b9:1e:
47:cd:d8:a8:b2:e2:1a:3a:a0:9d:ce:a4:c6:cd:f3:
d3:f0:df:47:6f:cc:00:4e:d3:50:6b:ab:3e:0a:07:
5e:53:05:73:8e:ef:e6:bb:3c:11:55:74:d7:df:db:
30:14:36:05:fc:f8:7f:3a:54:c5:06:76:1b:87:fb:
27:b5:c3:8c:17:d8:ee:87:9d:ea:de:4f:15:5d:b0:
1c:53:9d:00:e4:b9:55:92:bd:30:d7:21:2b:92:54:
fa:2a:4c:20:a5:ce:b4:56:1c:ef:b0:cc:27:c7:9e:
cd:bf:8e:46:6f:f0:85:30:64:7c:78:3a:26:b1:2e:
3b:83:8a:b8:6a:34:6a:c4:4e:2d:6b:97:1e:1d:a8:
c3:39:a2:7b:87:ac:74:d0:13:ee:40:c2:8e:f9:86:
2c:3d:af:6c:82:f7:c3:e9:3a:f9:43:cd:48:fb:01:
11:f0:9f:6d:e8:9e:ed:b7:d6:33:c8:ce:c0:37:75:
88:62:a8:ef:4f:d5:4b:b0:64:78:22:6a:83:55:e7:
5a:1c:d4:d2:7d:e7:a3:ad:30:fa:2e:31:4a:f6:e4:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:12:A4:B9:39:FA:E3:CC:CD:0E:AB:7C:29:93:33:82:DB:0D:06
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LzQSpLk5-uPMzQ6rfCmTM4LbDQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2c:f4:4f:06:c4:71:32:b0:ed:19:81:ff:d9:9c:3e:a5:83:
7c:19:e1:27:b2:6b:1f:9e:42:84:a6:7f:b0:f7:79:ba:f2:ca:
ac:4d:37:b9:9e:82:eb:bc:3b:25:20:b3:d5:bf:6e:41:37:9d:
5c:b7:67:47:b7:62:0a:7a:fe:05:a7:1b:92:78:be:ea:97:a3:
41:3c:14:94:50:49:ad:60:e4:a5:e5:bb:30:c4:09:7d:8f:9a:
a9:b1:9e:6b:ff:25:26:87:92:be:e8:23:b5:3b:ab:38:1a:e9:
34:49:fa:2b:2a:69:4c:b0:96:6d:d2:88:6b:b1:d6:2f:26:4a:
7a:be:84:1c:4a:26:a2:1b:f3:9f:88:a0:32:c0:a9:39:a2:63:
8a:c0:8e:b2:ed:0c:bd:58:93:41:84:41:dd:21:c1:88:5a:7e:
d5:26:a1:6a:c3:9e:7a:09:7e:c9:95:6f:49:86:fb:01:14:c0:
da:51:e7:0c:ce:6f:ea:d4:f8:cd:c8:85:9d:77:62:2b:28:fb:
9e:2a:d1:23:a8:08:5b:10:6a:a1:61:f9:e9:f6:db:4b:6e:4b:
54:ea:42:7f:44:6f:9c:c7:7e:14:05:85:e4:7f:9a:14:0a:ba:
96:cc:ea:4b:05:22:1e:2e:aa:11:e5:32:e4:04:cd:57:41:49:
84:7d:20:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNgOr716z409G5oOl6JpReRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMTI0MjIxMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjM0MTJhNGI5MzlmYWUzY2NjZDBlYWI3YzI5OTMzMzgyZGIwZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi0mFloGMfagtfv/LDMb8B0HXSFl
ECTmhkVl4CVKHBysfn+f/K5MljwMuR5HzdiosuIaOqCdzqTGzfPT8N9Hb8wATtNQ
a6s+CgdeUwVzju/muzwRVXTX39swFDYF/Ph/OlTFBnYbh/sntcOMF9juh53q3k8V
XbAcU50A5LlVkr0w1yErklT6Kkwgpc60VhzvsMwnx57Nv45Gb/CFMGR8eDomsS47
g4q4ajRqxE4ta5ceHajDOaJ7h6x00BPuQMKO+YYsPa9sgvfD6Tr5Q81I+wER8J9t
6J7tt9YzyM7AN3WIYqjvT9VLsGR4ImqDVedaHNTSfeejrTD6LjFK9uRzcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC80EqS5OfrjzM0Oq3wpkzOC2w0GMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTHpRU3BMazUtdVBNelE2cmZDbVRNNExiRFFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowV8MA0G
CSqGSIb3DQEBCwUAA4IBAQCBLPRPBsRxMrDtGYH/2Zw+pYN8GeEnsmsfnkKEpn+w
93m68sqsTTe5noLrvDslILPVv25BN51ct2dHt2IKev4FpxuSeL7ql6NBPBSUUEmt
YOSl5bswxAl9j5qpsZ5r/yUmh5K+6CO1O6s4Guk0SforKmlMsJZt0ohrsdYvJkp6
voQcSiaiG/OfiKAywKk5omOKwI6y7Qy9WJNBhEHdIcGIWn7VJqFqw556CX7JlW9J
hvsBFMDaUecMzm/q1PjNyIWdd2IrKPueKtEjqAhbEGqhYfnp9ttLbktU6kJ/RG+c
x34UBYXkf5oUCrqWzOpLBSIeLqoR5TLkBM1XQUmEfSBM
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:37:54 2024 by rpki-client on console-ams.rpki-client.org