Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q93BDYitX72-4vqm82WJvkFPzNE.roa
File: Q93BDYitX72-4vqm82WJvkFPzNE.roa (raw, json)
Hash identifier: Orp2Zii+3qJV/PP3lbD9f9Jrm0CGUx3abjV5KDZUWnU=
Subject key identifier: 43:DD:C1:0D:88:AD:5F:BD:BE:E2:FA:A6:F3:65:89:BE:41:4F:CC:D1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019138CCB337FB8559342F19516B65508589
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q93BDYitX72-4vqm82WJvkFPzNE.roa
Signing time: Fri 09 Aug 2024 20:20:24 +0000
ROA not before: Fri 09 Aug 2024 20:20:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 163.5.135.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:38:cc:b3:37:fb:85:59:34:2f:19:51:6b:65:50:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 9 20:20:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43ddc10d88ad5fbdbee2faa6f36589be414fccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:22:8e:60:6a:5e:e2:6e:21:e3:22:8d:15:
2a:dc:80:79:43:0a:61:3d:f6:cf:7a:be:a5:08:2d:
cf:cc:c0:b4:3f:6f:cf:a0:56:d3:9c:7c:4b:a7:8a:
96:33:5d:98:7b:6d:a6:f1:d2:f9:16:ff:df:68:f4:
41:e1:e4:d5:a5:b4:1d:65:7a:5e:85:8a:08:6c:7f:
32:fd:2d:1d:60:00:44:e7:5a:fe:b6:a0:06:d4:52:
2e:c5:78:05:11:47:2f:de:5e:aa:bc:e3:08:24:13:
a7:8d:69:aa:ab:7d:47:56:e7:c9:4e:36:77:44:13:
ba:07:34:2b:b0:c5:7d:58:92:c3:4d:ef:e6:10:d3:
ad:d8:65:22:b2:29:66:fd:50:99:0e:cb:e8:28:fa:
ba:ba:d1:9f:01:e1:e8:90:5f:aa:fb:c7:33:65:1d:
f4:49:18:06:c3:98:06:69:2c:7a:fb:96:67:f0:7b:
a0:0e:5d:7d:0b:e2:b5:7c:8d:f5:22:29:0a:43:82:
4f:ff:59:a7:f9:1c:ff:8e:5e:a6:03:a8:be:01:47:
d0:30:98:99:12:90:a6:c4:d6:ad:6b:46:79:ad:2a:
43:95:80:96:1e:da:71:60:9e:84:53:fa:62:c7:e7:
6d:94:c8:cb:a3:62:ac:6d:81:00:cc:95:b8:66:aa:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:C1:0D:88:AD:5F:BD:BE:E2:FA:A6:F3:65:89:BE:41:4F:CC:D1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q93BDYitX72-4vqm82WJvkFPzNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.135.0/24
163.5.175.0/24
163.5.185.0/24
163.5.209.0/24
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
45:24:ff:75:32:c3:c8:bc:00:24:c2:81:22:df:00:b9:08:db:
b8:27:1a:4b:66:8a:5d:84:07:f0:86:ea:7e:4f:53:b0:75:91:
61:94:c9:e8:e6:ea:e9:8f:0a:ac:26:8e:dd:b4:39:5e:e8:bb:
1e:90:54:44:09:e0:f1:07:f8:88:5b:e7:47:86:46:e6:75:a4:
4e:2f:10:6c:e7:4b:fb:49:ca:72:fd:b0:a9:cb:fc:65:ef:0a:
e5:f3:f0:fd:1b:1b:0c:79:79:a3:5a:78:b0:0a:75:ba:06:99:
0b:1e:d2:2a:a2:9b:ee:38:be:a7:48:23:87:b2:75:85:ca:51:
5d:04:32:b7:4f:b7:0b:97:51:2d:45:41:45:77:8f:5b:a7:61:
2c:9d:2b:14:e5:19:f6:ee:5c:3a:45:3c:59:44:43:2f:b1:8d:
3a:bd:4b:be:2d:ff:89:53:51:a4:c0:a2:71:49:27:50:70:42:
e7:c7:38:72:10:0e:93:25:88:a0:ed:19:97:28:e0:f2:f2:30:
cc:f5:d1:34:dc:fa:f9:62:7a:c8:7b:07:90:0c:9a:65:40:52:
23:ef:ad:14:4c:38:e9:00:18:a9:b0:c4:68:60:79:5d:61:27:
d8:19:39:54:9b:b5:cb:d3:9b:f9:e9:4f:c1:eb:92:f1:b4:66:
be:f1:9e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:29:42 2024 by rpki-client on console-fra.rpki-client.org