Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UdVmu9fyjsm0JErOv4t_nlYBqMo.roa
File: UdVmu9fyjsm0JErOv4t_nlYBqMo.roa (raw, json)
Hash identifier: KXMhzP0L2Po5xXseR+GPWMSFTJX4EoFvbuobhf2iks4=
Subject key identifier: 51:D5:66:BB:D7:F2:8E:C9:B4:24:4A:CE:BF:8B:7F:9E:56:01:A8:CA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018E8F347BA1D8A6BE02939C9635B9B64C82
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UdVmu9fyjsm0JErOv4t_nlYBqMo.roa
Signing time: Sat 30 Mar 2024 11:52:45 +0000
ROA not before: Sat 30 Mar 2024 11:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 163.5.29.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8f:34:7b:a1:d8:a6:be:02:93:9c:96:35:b9:b6:4c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 30 11:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51d566bbd7f28ec9b4244acebf8b7f9e5601a8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:54:68:9e:f6:ee:88:4f:30:fb:b3:b9:1a:
42:48:18:38:21:55:de:6b:8b:17:5b:86:48:6d:45:
7a:49:22:08:2f:b9:a6:be:ef:d8:ec:82:8b:65:89:
23:c7:69:ee:7e:b2:36:7d:36:60:00:cf:89:7d:04:
83:3e:af:67:c0:ae:29:d0:e0:bd:a2:d6:49:b6:05:
16:bc:89:98:d7:b6:3a:14:68:4c:37:44:73:5a:5b:
fa:18:86:ac:4a:8f:65:0e:28:c3:b9:3e:57:c4:12:
4f:5d:74:b2:f9:f1:30:6f:f4:6e:07:5e:8c:f2:7e:
a3:8c:ea:45:ba:02:02:08:a3:43:58:92:58:96:af:
91:d4:3b:66:74:2e:48:cc:6e:7a:76:bb:a3:c2:75:
b7:78:61:54:79:02:e5:13:67:9b:e5:17:a1:bd:c9:
35:78:fe:10:75:8b:8d:2d:dc:a3:b6:3b:35:8e:2e:
c8:b2:cf:81:a6:2b:22:a9:bf:73:41:9c:f7:d5:59:
21:31:71:f0:47:cb:d3:9f:b3:3f:6b:49:00:5f:1e:
aa:54:d9:f5:41:a3:1f:bb:81:e4:71:3e:8f:af:66:
47:a4:47:df:e3:7b:70:1c:d3:9e:9e:26:76:1e:f2:
de:20:a6:a9:c4:1c:16:3c:d2:1e:60:54:46:7c:9a:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:66:BB:D7:F2:8E:C9:B4:24:4A:CE:BF:8B:7F:9E:56:01:A8:CA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UdVmu9fyjsm0JErOv4t_nlYBqMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.29.0/24
163.5.132.0/24
163.5.158.0/24
163.5.173.0/24
163.5.200.0/24
163.5.206.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e1:9e:14:1f:c4:27:2e:d6:18:69:c0:b4:05:1a:63:c1:32:
cd:df:3e:1c:3d:fc:42:f5:f8:b6:cc:bb:4a:6d:e7:7c:b2:12:
48:47:0b:07:4a:28:03:b6:33:06:e3:e7:ae:d0:bd:80:fd:7d:
7d:92:bd:15:d8:b5:6b:ee:fe:6b:bb:73:b6:1e:89:4f:2c:b3:
4f:99:ec:20:02:98:b4:5e:38:f9:e2:55:cf:80:4e:7a:e0:6b:
db:81:a3:48:47:36:07:94:87:ee:a6:5a:0d:86:a9:d4:d7:e1:
3f:58:ba:81:b5:e6:17:1a:92:e5:ce:65:bb:ad:5e:71:9a:35:
12:1c:b9:ec:82:61:c8:9b:c0:59:8b:0b:76:92:59:45:ec:6f:
41:f5:1b:74:a1:b8:19:76:42:4a:7e:41:89:e9:75:3f:9a:b1:
b6:46:40:4c:1e:23:04:80:c0:1d:d7:55:c1:4d:ed:cb:7d:7f:
35:2c:8c:23:05:b2:9b:9d:7b:68:e3:48:44:51:dc:c2:c3:c0:
7e:67:be:dd:6f:83:db:67:b3:c8:ce:b6:06:c7:7d:37:d3:8c:
05:0f:16:6b:f6:c0:33:fe:40:90:98:8d:66:b1:5f:e6:30:f3:
d6:19:ba:9d:73:35:ec:75:c5:5a:cf:4b:8f:9f:f9:f0:7f:48:
b7:0a:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:39:11 2024 by rpki-client on console-fra.rpki-client.org