Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZhpWhAO75BwL-vCUMANYwS2l_ww.roa
File: ZhpWhAO75BwL-vCUMANYwS2l_ww.roa (raw, json)
Hash identifier: mBDUgShZnhKGs3/4i7D3ADAv2uVja9571RaXmUOiyy4=
Subject key identifier: 66:1A:56:84:03:BB:E4:1C:0B:FA:F0:94:30:03:58:C1:2D:A5:FF:0C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC42567EFCB1E266202D32EA32F729695
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZhpWhAO75BwL-vCUMANYwS2l_ww.roa
Signing time: Mon 01 Jan 2024 08:30:34 +0000
ROA not before: Mon 01 Jan 2024 08:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 163.5.75.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:67:ef:cb:1e:26:62:02:d3:2e:a3:2f:72:96:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=661a568403bbe41c0bfaf094300358c12da5ff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:31:5d:83:d7:a3:40:d8:bc:83:2d:ef:be:
80:92:36:e0:61:1e:ef:0a:38:92:2a:18:70:70:d9:
76:0c:f0:75:4f:7e:72:1d:13:21:1a:58:f5:0e:ac:
f6:00:39:35:d2:90:3c:20:19:d5:29:ae:41:9c:4a:
68:cc:4b:86:14:67:d7:5c:ea:f1:6c:93:d8:cf:c0:
c9:9f:65:a6:3b:0b:2c:69:55:b4:7f:8e:dd:df:58:
31:d2:23:43:2d:cb:4c:09:bc:8b:64:29:16:85:02:
0a:c3:6e:e3:a6:07:2c:b8:4c:f3:84:3c:e9:35:6e:
f7:17:03:cb:ff:81:a4:8d:2f:28:5b:76:60:e2:bc:
28:b0:e5:c9:71:9c:5d:e1:12:76:ec:ed:36:1a:d7:
2d:32:7b:a6:92:1e:06:11:79:4a:2e:ac:fd:91:61:
3f:81:72:b8:9d:84:0b:9d:6f:e6:50:f5:ab:9f:ac:
a7:4b:97:3f:d0:d4:fa:13:96:07:7d:d1:db:25:5d:
98:e1:e1:69:10:c8:31:14:bc:d2:ba:10:83:48:b8:
e4:37:28:9e:fb:ed:00:62:06:70:10:2f:19:0a:8e:
da:81:c8:86:14:f8:3a:96:d7:11:5f:f7:8b:b2:f8:
af:3d:94:76:46:8a:77:01:2c:66:f5:f1:4f:ae:a3:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1A:56:84:03:BB:E4:1C:0B:FA:F0:94:30:03:58:C1:2D:A5:FF:0C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZhpWhAO75BwL-vCUMANYwS2l_ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.75.0/24
163.5.78.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5e:d3:51:cc:ec:1d:72:ea:5e:94:59:40:05:07:f5:53:50:
94:9d:78:65:14:e8:e3:db:22:e1:12:99:55:bb:3a:60:f1:66:
95:a9:31:71:cd:3d:26:f4:07:ee:8a:d9:bb:6d:5d:a0:10:07:
a8:db:fc:32:b7:cb:bc:b4:95:1f:ec:2d:4a:b1:ab:63:4d:5b:
01:fe:6a:4c:44:fe:eb:30:1c:19:85:e2:51:3b:9b:98:0e:ac:
9f:16:86:ef:23:77:9a:a4:46:b4:a3:ec:72:e2:c9:7f:1c:fc:
17:57:9d:4e:d9:8c:00:aa:67:36:e6:a5:5f:04:e4:30:0e:31:
f4:6a:69:e6:21:43:0f:28:89:8b:88:c4:dc:ac:f3:c2:fa:1e:
70:24:7f:07:2d:22:17:f3:f4:1f:14:96:dc:28:5c:6a:3a:a4:
ea:27:2c:dc:73:c5:6c:04:26:1f:d4:a3:b4:b5:c0:31:28:dd:
97:c2:e3:22:99:e7:3a:dd:7e:0a:4f:fe:ed:31:1e:f5:fd:97:
29:6f:51:3f:c2:32:56:ef:35:54:2a:ae:5c:c8:58:6b:30:97:
da:d8:81:a7:90:7d:4c:d3:14:bc:5a:bd:25:d6:8d:21:26:54:
aa:3a:c4:9b:0a:e2:36:81:e6:f0:63:77:1f:50:97:04:5b:19:
a6:36:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:23:24 2024 by rpki-client on console-ams.rpki-client.org