Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RSiyBv6_Li7ayvsjPop4CvBUyvs.roa
File: RSiyBv6_Li7ayvsjPop4CvBUyvs.roa (raw, json)
Hash identifier: 7PNYJtXuLQhFy+F1pR4KXzbcSHdJGWR2YOLtuKSODFw=
Subject key identifier: 45:28:B2:06:FE:BF:2E:2E:DA:CA:FB:23:3E:8A:78:0A:F0:54:CA:FB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC42552DE3765CF9C7C5EF777C9E7CD36
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RSiyBv6_Li7ayvsjPop4CvBUyvs.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22781
IP address blocks: 163.5.179.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:52:de:37:65:cf:9c:7c:5e:f7:77:c9:e7:cd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4528b206febf2e2edacafb233e8a780af054cafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:7a:eb:7c:d5:0b:18:62:ef:7a:0a:24:7d:
1f:24:74:d3:89:01:8b:78:ab:7c:00:64:3c:c1:4c:
d1:6a:d2:58:b9:19:5b:97:9e:a1:e2:62:58:25:90:
36:6b:7f:98:a9:63:a9:4a:87:ae:f2:dd:69:23:e0:
59:ea:10:4a:fd:ef:1d:3d:cf:d9:ad:98:4e:78:da:
4a:9b:b3:f0:e5:03:6c:03:ca:72:6b:89:1e:ef:a0:
b9:17:99:1d:73:ba:f9:fe:12:34:39:40:ea:e2:13:
f5:5b:d3:57:20:f9:cd:74:89:1b:50:53:da:63:56:
d0:55:77:4b:40:60:42:69:7d:f0:c0:87:fb:ed:a3:
b9:8f:a6:a1:39:f4:ff:20:09:33:51:6a:28:7c:1b:
8a:e3:59:e2:14:15:12:f5:6f:a9:23:ab:29:cf:95:
9f:08:e9:ef:23:5b:47:ac:9f:0e:a9:57:38:f1:30:
8f:dc:b1:c9:ee:31:c6:af:c1:79:44:6f:69:ef:86:
e6:53:71:86:a4:af:d5:98:4a:37:a9:23:47:1c:30:
76:d8:dc:7d:08:7c:cf:2f:bd:fe:03:db:87:6b:3c:
81:49:41:71:30:b8:1e:73:d1:a0:9b:88:52:f0:8b:
82:1b:19:e3:ae:8c:a0:9c:e0:10:df:0a:4d:a7:d5:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:B2:06:FE:BF:2E:2E:DA:CA:FB:23:3E:8A:78:0A:F0:54:CA:FB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RSiyBv6_Li7ayvsjPop4CvBUyvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
163.5.179.0/24
Signature Algorithm: sha256WithRSAEncryption
13:a1:a1:f7:9e:1a:36:88:02:a4:c4:c8:97:f2:34:d6:26:f7:
ee:4b:44:8a:71:27:f6:0b:d4:0e:ee:5a:47:f9:70:44:04:a1:
fc:a3:05:ff:95:af:5c:0b:d1:4f:49:dc:4b:b0:83:97:b7:ae:
e4:ab:66:f8:03:24:0f:34:ea:e2:92:b1:ba:b0:28:51:3d:45:
ec:6c:24:26:b7:99:b2:fd:6f:72:50:bb:c6:9d:88:86:ce:e6:
61:fe:1b:83:4a:62:8d:9f:08:67:e9:4d:39:23:04:7a:9b:cb:
f3:af:dc:db:20:e4:ee:ee:f9:e3:f4:22:d7:68:f6:94:bb:66:
f5:bb:b5:54:01:ee:bb:6f:39:c7:36:7c:cc:5f:97:2e:18:77:
4f:97:fe:f3:91:fc:0f:1c:88:ee:1b:85:63:d6:23:8d:ed:0b:
74:c7:08:f5:44:4b:fa:96:25:af:39:87:9d:c6:5b:78:84:9b:
d6:9d:c8:6f:6a:06:c0:ea:89:a8:b2:08:7b:5f:4e:f7:15:5e:
5e:50:27:20:79:52:d7:f1:56:6c:f8:f8:ff:7c:a0:23:4c:79:
65:89:e6:a9:8f:d3:69:13:26:13:ab:72:c5:02:bd:ea:07:0a:
8b:9e:e9:01:23:49:97:a6:c8:c7:2a:ab:72:58:7c:b4:68:77:
cd:f9:0c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:02:44 2024 by rpki-client on console-fra.rpki-client.org