Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PD2F_pOvs-bfSaMPIBF09gTE8Pg.roa
File: PD2F_pOvs-bfSaMPIBF09gTE8Pg.roa (raw, json)
Hash identifier: 8/S82vXQXgFKZ5rMj3DFTQ7ILwHWE3ngJsfxzFskqLs=
Subject key identifier: 3C:3D:85:FE:93:AF:B3:E6:DF:49:A3:0F:20:11:74:F6:04:C4:F0:F8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EE871590ED674BF5593FA1D207F42506F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PD2F_pOvs-bfSaMPIBF09gTE8Pg.roa
Signing time: Tue 16 Apr 2024 19:45:26 +0000
ROA not before: Tue 16 Apr 2024 19:45:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e8:71:59:0e:d6:74:bf:55:93:fa:1d:20:7f:42:50:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 16 19:45:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c3d85fe93afb3e6df49a30f201174f604c4f0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:d5:60:58:14:ff:42:5e:4d:7e:f6:3c:33:
50:ce:49:70:76:c5:03:96:9f:8f:a2:d0:d8:02:b9:
f4:8f:4e:15:f4:20:eb:d8:d4:6e:0d:a9:26:01:6d:
a0:dd:a1:b4:54:c1:dc:b0:7c:0b:40:27:10:9b:5c:
28:d6:74:c6:77:09:0f:86:7e:c5:27:9d:bf:e5:22:
94:b6:43:d4:e2:16:e5:3f:81:97:1b:74:eb:b0:55:
ed:e8:26:d9:d4:f2:48:4d:eb:92:4c:70:f8:24:7b:
4e:a7:67:d7:0b:ec:21:01:d2:84:79:98:51:3b:80:
a6:b6:a1:ae:88:4c:5d:1f:82:8a:39:5d:94:97:61:
8e:c4:19:3d:4d:be:22:6c:a9:c4:30:26:76:4b:ca:
cc:6a:5d:cb:a0:53:ae:b4:eb:1c:7c:ab:7b:79:4e:
31:12:6d:03:5b:73:ad:11:08:11:15:6e:e3:5e:54:
52:70:78:6a:5a:82:97:5e:75:43:45:bc:7f:a5:9a:
70:9b:41:70:02:a2:4e:ab:4c:89:5b:ee:15:70:f0:
74:2c:5d:c2:a6:05:d9:dd:d4:8d:57:03:38:3a:53:
76:bf:c3:f7:3c:db:ff:06:6b:2f:1b:ec:33:7e:e4:
4d:c1:63:a5:92:ab:51:84:f0:b3:ab:e3:21:e7:ed:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3D:85:FE:93:AF:B3:E6:DF:49:A3:0F:20:11:74:F6:04:C4:F0:F8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PD2F_pOvs-bfSaMPIBF09gTE8Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cd:fb:59:f7:66:dd:0b:9e:ee:6b:9f:b7:68:d5:b8:3c:9d:
a9:ed:ae:eb:37:13:f3:e9:ef:4d:53:cd:b4:58:11:73:0c:f9:
26:5c:10:56:64:da:d0:37:1f:fb:5a:d1:5a:df:00:c2:a6:00:
3e:fe:f2:ac:0e:37:90:89:c6:54:e6:46:f6:86:70:42:2e:9c:
12:cc:35:66:5b:4c:4f:74:23:51:3c:9f:dc:d1:4f:47:0b:ff:
ee:8f:19:15:a7:37:6b:21:e8:8c:a0:be:05:9f:9b:35:84:51:
ee:32:72:e6:79:d6:27:92:8e:9d:de:1a:96:12:93:9b:92:96:
70:be:22:78:76:ba:c1:59:b8:1c:d0:7f:12:1d:31:19:61:06:
ce:d0:ad:3f:92:b9:b2:d0:a4:1d:44:f0:a9:be:f7:59:55:4b:
d0:08:36:f2:04:bd:ff:bc:8c:e4:1d:72:cb:17:1e:b5:c8:51:
2a:b7:7f:a8:4c:33:c1:eb:fd:82:c7:06:b6:79:09:dc:92:55:
26:5a:a1:a7:94:d0:10:69:3c:9a:3a:3d:64:d5:2c:c7:09:e3:
6a:74:38:79:0c:84:56:bf:5c:50:27:15:f9:7b:4f:52:49:71:
cb:f4:4f:b6:34:95:dc:fc:ad:7f:30:33:87:72:b1:e1:ea:a3:
29:80:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:54:15 2024 by rpki-client on console-ams.rpki-client.org