Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W4c1e3Ln2Vv9ntRkHNIkqAWenLA.roa
File: W4c1e3Ln2Vv9ntRkHNIkqAWenLA.roa (raw, json)
Hash identifier: oyIkRjcxK4r1SPMjw4457PRORPRDdacUUGNtc13yIaE=
Subject key identifier: 5B:87:35:7B:72:E7:D9:5B:FD:9E:D4:64:1C:D2:24:A8:05:9E:9C:B0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4256952E610A36A7AC9CCEC9892F3A3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W4c1e3Ln2Vv9ntRkHNIkqAWenLA.roa
Signing time: Mon 01 Jan 2024 08:30:35 +0000
ROA not before: Mon 01 Jan 2024 08:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 163.5.137.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:69:52:e6:10:a3:6a:7a:c9:cc:ec:98:92:f3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b87357b72e7d95bfd9ed4641cd224a8059e9cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:f2:e0:ad:89:08:21:e0:4f:5f:d4:8b:7f:
17:0a:69:03:fa:22:6b:97:36:12:93:1b:32:ec:7f:
f3:85:66:21:04:8c:6b:17:67:0c:e1:cc:02:99:21:
b0:7e:8b:f1:09:62:72:b9:e7:bb:8d:3d:f7:39:d8:
0a:37:5b:da:34:a2:6b:62:7e:6a:0b:f9:d6:b3:8d:
93:0d:7c:c8:d2:a0:7d:30:2f:dc:cd:0c:f1:94:25:
3b:39:62:1f:f1:83:ab:f5:15:eb:49:48:90:a8:c8:
d0:61:aa:d3:eb:dd:b2:21:08:6b:78:88:5e:1c:fd:
fd:6c:a0:24:f4:65:f9:52:b0:cd:a8:3c:3e:85:65:
ee:24:06:bd:21:db:45:4b:fa:f4:2c:29:9d:7b:63:
16:4a:05:3e:06:dc:10:69:4e:86:f2:f0:d6:c7:3b:
9f:55:b6:39:77:81:0c:d6:cb:ff:e7:46:b5:0b:cc:
77:a7:c0:73:c8:97:ff:29:e7:f9:b7:f7:cb:a6:f8:
bc:0c:8f:0b:d0:dd:cd:21:ed:32:68:b5:7d:f2:e0:
69:c8:7b:6b:49:a0:45:9d:0b:4b:13:0d:48:c9:fd:
c9:2f:2e:8a:fd:74:36:05:a8:43:f7:79:5a:bd:03:
a1:ef:b8:52:36:91:08:58:d2:5d:2c:42:e8:1c:f6:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:35:7B:72:E7:D9:5B:FD:9E:D4:64:1C:D2:24:A8:05:9E:9C:B0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W4c1e3Ln2Vv9ntRkHNIkqAWenLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.149.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:85:b0:53:87:88:81:b8:c4:15:c0:54:ca:e0:10:41:81:64:
bd:1c:2a:9a:37:7f:d4:ed:00:84:de:4b:9d:96:55:ee:9f:f0:
6a:01:11:38:4d:b0:1a:88:98:4e:b3:fd:59:58:88:f0:1f:a7:
2b:95:f5:22:1e:f4:bc:a8:44:ac:77:40:ca:a2:3b:ce:ef:6d:
68:ed:21:10:e1:ac:84:7d:2b:46:3e:8c:ef:e8:4a:03:77:8e:
50:6d:e1:2b:f7:13:7e:11:21:3e:65:aa:50:cb:87:36:fb:68:
31:ed:49:5e:6b:7f:e1:38:10:42:d9:17:93:5d:35:7f:10:4d:
37:07:83:2c:f0:a1:d2:0b:7f:51:49:f5:ae:04:57:4c:29:67:
b9:e5:7e:93:70:37:31:cf:10:94:7b:93:d9:63:2d:7a:33:11:
e8:b0:3f:6e:12:c2:00:a8:53:58:c0:f5:f7:b1:e1:2d:10:47:
fb:0c:fd:4f:db:c5:71:7f:c6:c4:36:69:3f:4c:39:8f:6c:59:
6b:68:6f:7e:2f:b4:8a:29:0d:06:08:f9:2b:e6:da:4e:32:b7:
c4:22:68:01:8b:5b:3b:ea:d5:06:9c:39:77:0b:06:e4:3d:0f:
87:e4:5e:ea:53:de:e5:dd:10:57:02:b5:28:e7:9a:10:be:e0:
36:b6:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:29:09 2024 by rpki-client on console-ams.rpki-client.org