Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NzbsFZ601TZO9uUB5b7nJI2jkAs.roa
File: NzbsFZ601TZO9uUB5b7nJI2jkAs.roa (raw, json)
Hash identifier: WA7cXwMgb2VSl7BaSNJZ5C6MS8eYMbB2PFxWY+sG2kA=
Subject key identifier: 37:36:EC:15:9E:B4:D5:36:4E:F6:E5:01:E5:BE:E7:24:8D:A3:90:0B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC42550248E84703A8F801D68D5B3E4DA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NzbsFZ601TZO9uUB5b7nJI2jkAs.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 163.5.223.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:50:24:8e:84:70:3a:8f:80:1d:68:d5:b3:e4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3736ec159eb4d5364ef6e501e5bee7248da3900b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:d6:ac:13:0a:7a:35:ea:1b:f8:8f:c4:66:
04:27:f9:8f:2e:f3:61:0d:e9:57:f9:e7:a8:d6:88:
06:ed:3a:b1:3c:33:de:b9:4e:60:c9:ea:24:80:7a:
b5:a7:5e:92:93:a8:9e:b5:fd:68:d8:18:c0:d6:06:
d1:51:b8:e6:12:32:e0:bb:88:26:3b:a9:ce:2a:55:
8e:bb:6a:b4:32:1f:f4:10:90:aa:99:15:80:25:4f:
4a:8a:6b:53:39:6d:c7:8a:99:6f:5d:7f:80:99:2a:
94:c5:af:5a:cc:18:ed:88:d2:fe:9d:1e:68:91:67:
4f:6b:d8:a3:7e:96:79:25:a4:67:ed:43:ba:44:80:
cb:d0:36:a2:88:31:30:da:f3:89:c6:cb:de:a9:00:
72:07:3a:41:a7:64:b8:51:4a:3a:1d:e9:98:26:02:
8a:a0:49:e4:b2:a4:4d:20:8c:9c:50:1e:b3:fd:4b:
04:8c:bd:2e:a3:64:33:47:2f:7a:1d:f7:9c:10:59:
56:28:3d:6d:30:01:d9:f3:ce:b2:57:64:5b:dc:74:
fe:25:cb:6a:11:38:61:b3:26:b6:cf:35:31:f7:d7:
7c:a6:8a:25:63:b4:26:cf:a2:42:f4:a0:21:45:b5:
a9:d5:f6:4d:8f:49:b8:c7:4f:bc:2c:42:40:2b:e0:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:36:EC:15:9E:B4:D5:36:4E:F6:E5:01:E5:BE:E7:24:8D:A3:90:0B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NzbsFZ601TZO9uUB5b7nJI2jkAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.223.0/24
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6d:ed:9a:3d:72:8e:27:00:ed:ca:34:12:9d:77:22:47:93:
9a:97:41:5a:f5:9c:fb:36:01:56:d2:c7:e8:ee:96:9e:38:dd:
68:a6:da:88:23:1c:68:4d:be:b7:96:bd:e0:24:f0:91:9d:f6:
52:1f:7b:00:ec:20:8a:84:e8:db:87:f2:5b:af:3d:57:f3:f5:
1d:99:10:3d:31:49:59:98:46:2e:92:5b:8c:91:aa:78:63:59:
35:86:10:96:eb:5f:de:1b:66:fc:00:6d:8b:98:9f:16:3f:c6:
9c:a1:f0:7c:df:69:27:b6:ef:bf:34:f2:1b:dc:dc:f3:d4:33:
61:12:37:72:8b:c8:39:38:8f:e7:85:12:51:bf:1f:eb:94:63:
8f:6e:c3:cf:d4:7c:15:f2:a8:28:be:42:f8:99:f3:11:fc:80:
cf:cb:47:f1:e0:23:44:e7:8b:b2:03:72:6c:ac:6c:c0:49:b7:
89:0d:58:ad:42:ee:f5:8c:ad:8c:ab:f2:b2:95:01:88:1a:db:
21:7d:31:2f:42:b7:e9:e4:f1:11:62:28:cc:3d:44:32:5b:e0:
5b:66:38:ba:fc:28:88:b4:90:7c:fc:89:c0:2e:94:03:45:39:
b7:0a:e0:3e:52:40:2a:9c:7e:48:96:1b:4e:38:e5:54:c9:cf:
d8:6f:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:02:44 2024 by rpki-client on console-fra.rpki-client.org