Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_Njtc5VBwiI01A5EuFjBuqFClW0.roa
File: _Njtc5VBwiI01A5EuFjBuqFClW0.roa (raw, json)
Hash identifier: Xtx4MkzmoqnC60Sukspm0aZZxV2EaoQCxUkhLLlc7Fw=
Subject key identifier: FC:D8:ED:73:95:41:C2:22:34:D4:0E:44:B8:58:C1:BA:A1:42:95:6D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193507169EB564687470D6A61E5864275CF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_Njtc5VBwiI01A5EuFjBuqFClW0.roa
Signing time: Thu 21 Nov 2024 20:37:10 +0000
ROA not before: Thu 21 Nov 2024 20:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.7.0/24 maxlen: 24
163.5.8.0/24 maxlen: 24
163.5.9.0/24 maxlen: 24
163.5.12.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.17.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:71:69:eb:56:46:87:47:0d:6a:61:e5:86:42:75:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 21 20:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcd8ed739541c22234d40e44b858c1baa142956d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:26:4e:a4:3d:fa:12:6e:a8:87:e9:6a:fe:
80:86:68:69:7d:c9:c6:b9:99:30:97:a1:4d:49:a2:
ba:ca:e0:9a:d2:08:6f:ff:cb:34:5e:a6:c7:a1:b0:
dc:d3:e4:64:b3:16:87:32:26:6f:67:a0:b3:98:a0:
00:81:c6:ca:4c:2f:6a:d3:12:a5:c3:94:d2:c9:45:
d6:6d:41:7b:a6:83:9c:67:03:85:de:35:9f:f3:83:
03:67:27:8a:24:65:30:1d:3b:ef:46:ff:61:4c:97:
f9:f1:da:0b:8c:15:78:0f:77:14:ca:8b:f4:08:0b:
ec:5f:28:50:de:58:4a:51:b8:c3:f3:a5:83:f6:2f:
bb:8d:92:7a:a4:e7:d8:44:1d:5b:35:ab:9d:0e:a5:
c5:17:36:a3:6c:90:a7:92:ad:d3:8d:76:f3:28:fc:
ca:2a:8b:64:20:16:78:d5:a4:bf:85:cd:1d:06:46:
1c:1a:eb:b3:ae:37:c2:c2:d3:8d:e1:d0:06:25:29:
00:fb:9b:c2:54:7b:49:f2:14:bd:ba:37:f1:52:39:
c2:67:5a:23:27:58:24:41:e3:40:1e:70:d9:d4:f9:
c9:6e:4d:73:b4:3c:7e:f7:1c:16:2d:3d:1b:19:d2:
3d:68:cd:a0:01:de:b8:4d:9b:2f:21:de:6f:c3:83:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D8:ED:73:95:41:C2:22:34:D4:0E:44:B8:58:C1:BA:A1:42:95:6D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_Njtc5VBwiI01A5EuFjBuqFClW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.7.0-163.5.9.255
163.5.12.0/23
163.5.17.0/24
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.124.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f8:3c:ef:a5:a9:88:10:d7:6b:38:5a:1e:98:77:91:e4:0c:
3f:45:ed:02:52:22:14:9a:33:f9:5f:1e:86:aa:55:03:44:aa:
8e:49:a1:61:4b:89:af:24:23:f7:63:ec:3d:ac:a2:4e:b4:af:
44:75:dc:7c:de:e6:76:f3:ea:4e:51:c2:09:61:1c:bc:f3:c3:
a9:33:11:cc:ca:a8:29:54:de:f9:3e:0b:89:fa:10:42:36:47:
b6:04:e5:bf:39:6b:52:f2:6d:23:6f:00:c7:8f:a1:b9:13:b1:
f6:c5:c2:29:15:8e:1c:df:cd:d4:a1:b4:b1:11:92:55:de:af:
87:4c:fd:d2:5f:47:50:62:7f:8a:3e:a8:3b:db:b8:71:bf:5a:
09:92:fe:45:74:c6:11:cc:12:29:d3:06:64:80:d1:50:5d:e4:
89:33:e7:b1:f8:e6:65:cd:b2:4c:9e:f8:8b:29:32:fa:97:64:
3a:5e:d0:b1:06:02:7a:3c:05:e1:eb:69:b1:9a:60:62:01:2e:
b9:e3:5a:fe:09:b8:00:8f:3f:67:d1:28:de:d8:ab:3c:c6:d8:
23:c6:32:a5:62:45:c6:fe:c7:e9:ce:88:2f:40:ae:c6:40:f6:
2d:e7:4e:cc:8c:8f:71:8e:36:fb:ed:35:50:de:05:51:f7:76:
ee:77:30:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:08 2024 by rpki-client on console-fra.rpki-client.org