Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Z3fOgfMe8FQpAOZuaBj4M03QTv4.roa
File: Z3fOgfMe8FQpAOZuaBj4M03QTv4.roa (raw, json)
Hash identifier: cDswCdNtd0X23ZTy4/plNRTIC1XfSOIaOiJJ6GgxD1w=
Subject key identifier: 67:77:CE:81:F3:1E:F0:54:29:00:E6:6E:68:18:F8:33:4D:D0:4E:FE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EF570736671082AFCE9AE45D1E5A72F89
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Z3fOgfMe8FQpAOZuaBj4M03QTv4.roa
Signing time: Fri 19 Apr 2024 08:19:31 +0000
ROA not before: Fri 19 Apr 2024 08:19:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215672
IP address blocks: 163.5.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:70:73:66:71:08:2a:fc:e9:ae:45:d1:e5:a7:2f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 19 08:19:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6777ce81f31ef0542900e66e6818f8334dd04efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:1b:a4:2c:f8:09:4d:68:1f:b9:08:01:11:
61:4f:3e:b7:dc:f5:e5:4a:d2:f2:98:92:3e:34:bb:
a3:8f:30:50:f9:cb:43:67:3a:3a:88:52:6c:c4:17:
dc:a0:61:b1:70:b4:d6:ac:bd:08:e0:6c:30:cf:83:
e1:23:35:a7:95:18:16:3a:96:6a:86:69:fb:3f:c8:
26:44:ac:3a:7a:8f:09:22:1e:9b:d9:29:06:b7:81:
8c:0d:0a:04:f6:af:09:6b:4f:cc:d6:9a:92:37:6f:
2d:8a:89:b1:13:18:92:d8:2a:f6:36:84:fa:ad:17:
85:2d:f3:31:62:13:17:e0:d7:43:3e:5e:8c:af:e9:
8c:64:ec:b1:db:f2:69:ef:d0:06:51:f2:ba:dc:74:
ae:09:51:94:62:03:af:5b:28:34:3a:44:65:ea:58:
09:9f:a5:5d:7f:22:46:29:7d:7a:26:a2:04:6d:70:
7c:70:3c:fc:5e:2b:3e:9a:b8:bb:c8:e8:ac:c6:45:
c5:75:cc:4a:72:7e:3c:84:fc:cb:1d:c2:8e:6f:f9:
93:7e:61:2b:ae:f3:cc:2d:ae:6b:b4:da:a9:5f:39:
bc:07:7e:8e:88:f2:4e:2d:b1:48:30:03:2f:18:d9:
b4:9f:44:14:af:df:d5:6e:e9:32:68:52:2b:93:3e:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:CE:81:F3:1E:F0:54:29:00:E6:6E:68:18:F8:33:4D:D0:4E:FE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Z3fOgfMe8FQpAOZuaBj4M03QTv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f4:71:71:ba:1d:80:cc:d2:4d:fd:d1:ff:fb:ad:f1:85:49:
7e:f6:a1:31:19:9d:b9:ce:fa:72:a8:19:e9:b7:00:7a:ac:c1:
53:c3:bd:4f:ea:8e:07:6c:b1:60:f8:fb:3d:04:75:70:6d:be:
b0:c4:86:ce:e1:98:7e:57:1a:5f:60:18:b5:66:ef:c0:e5:39:
48:30:1c:86:1a:96:8a:8e:a3:32:f8:2e:b9:1d:ec:92:52:e5:
d2:30:f7:a1:95:56:4e:5c:6a:0c:d5:36:a8:03:bf:8a:4d:bc:
82:61:47:45:70:78:01:23:7b:67:6d:0d:f9:1d:a3:96:89:13:
a5:39:36:b0:fe:14:a4:92:28:b1:a4:a9:fe:6a:92:c6:e6:a3:
6f:5c:e1:9a:c9:dc:5c:6c:8c:8d:b3:6d:0a:c5:c1:2c:ba:9c:
bd:aa:61:0c:7d:2a:c7:5e:82:c8:63:c4:5d:f7:46:cb:f8:6a:
bc:eb:18:b3:e1:ef:59:fc:ac:6b:24:c0:40:f6:e2:fa:55:18:
34:f0:30:b1:c1:61:88:3b:60:31:7f:30:a1:98:c7:2d:f0:92:
8d:16:eb:95:73:46:b7:7a:05:ed:ea:20:3e:bd:1c:94:02:54:
7f:a9:60:2e:f4:2c:49:ef:52:31:23:33:0b:9a:14:5d:4e:18:
65:e5:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:02:44 2024 by rpki-client on console-fra.rpki-client.org