Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_W_umpCKWa1DdHCcCjKKWQhaKBQ.roa
File: _W_umpCKWa1DdHCcCjKKWQhaKBQ.roa (raw, json)
Hash identifier: pZW58498x0iSC8zmpoda+UhD+DMaj/ts7u1WwI52N8Y=
Subject key identifier: FD:6F:EE:9A:90:8A:59:AD:43:74:70:9C:0A:32:8A:59:08:5A:28:14
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EC30647FAED1A5E6E817189414E067FC9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_W_umpCKWa1DdHCcCjKKWQhaKBQ.roa
Signing time: Tue 09 Apr 2024 13:22:32 +0000
ROA not before: Tue 09 Apr 2024 13:22:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:06:47:fa:ed:1a:5e:6e:81:71:89:41:4e:06:7f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 9 13:22:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd6fee9a908a59ad4374709c0a328a59085a2814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:7e:79:09:bc:43:c9:3e:aa:1d:5b:49:cb:
f5:e0:f6:e7:34:50:b5:f2:ac:ae:9e:33:fe:69:9a:
2b:7d:0d:7c:e9:27:4e:4e:74:c1:66:91:06:18:66:
02:8e:4b:18:08:e6:c4:8f:c8:f0:7e:40:bc:ec:6b:
47:95:40:f0:7d:d5:5e:04:8b:09:99:c1:c0:ca:6f:
1d:19:ce:6c:a8:bf:a6:cb:8f:22:ea:6b:ad:e3:d8:
6b:e1:db:cc:52:58:09:40:35:23:16:e5:58:f1:9c:
58:f0:f1:d1:a6:cd:f5:c8:b6:b6:5a:a2:55:2d:30:
4f:d0:0f:ca:c5:28:f9:e6:23:6b:39:14:08:24:15:
90:94:9b:9e:1b:40:46:a8:4c:d1:eb:24:68:8a:54:
c1:c9:c2:05:10:6a:e9:62:0f:ad:00:d7:ae:0c:3b:
5d:ee:87:09:ee:13:73:19:c3:ce:32:24:2f:90:68:
0f:a5:4e:79:2f:f8:42:c6:cb:bf:51:2c:29:4b:9e:
f6:1c:c7:b8:f0:38:c0:9b:0f:65:a5:dc:af:df:6d:
ca:09:0b:e0:c0:51:cc:d1:61:ff:64:16:ca:eb:83:
27:d8:a6:0f:e0:15:85:fb:85:78:df:5d:f8:44:48:
d1:67:ef:8a:34:6f:4c:98:c0:85:64:63:99:13:5b:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6F:EE:9A:90:8A:59:AD:43:74:70:9C:0A:32:8A:59:08:5A:28:14
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_W_umpCKWa1DdHCcCjKKWQhaKBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.192.0/23
163.5.195.0/24
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
6d:17:6a:2e:52:9d:fb:d7:02:a7:07:74:f8:85:70:67:7e:8e:
10:2e:dd:a3:96:21:b9:61:06:96:d1:fb:d9:72:c2:69:43:f4:
87:fa:32:22:19:af:7e:cb:dc:53:b3:56:bc:b7:cf:5d:ee:69:
74:56:2e:cb:8a:57:69:e9:3c:dc:22:36:c0:70:f2:04:d6:6f:
fd:6f:2e:05:da:c3:a0:5a:08:54:59:81:c1:2f:66:6b:02:64:
ce:29:81:08:cc:f3:38:44:77:cb:86:0d:87:cf:75:2d:69:de:
5e:ab:45:e7:da:30:32:49:1a:18:a0:02:e4:a9:ee:11:0d:f6:
ea:54:67:8e:f8:43:91:2c:e5:87:90:88:75:57:ed:fd:91:0f:
77:6a:19:ca:22:18:58:17:e0:91:a1:44:0f:83:bd:da:c8:50:
fe:d4:94:26:03:c5:31:6a:57:b0:3e:5b:32:20:7b:69:95:7f:
53:96:be:90:db:60:8f:25:52:28:ae:ee:e4:72:7f:be:bd:ad:
79:c3:c7:52:84:54:1b:13:d9:cf:57:4d:66:90:a2:72:1f:e1:
8d:74:63:8f:41:d1:4f:c3:ae:b1:e2:22:6b:42:2a:51:98:1c:
74:23:8c:02:fc:bb:55:79:68:bd:6a:2a:9a:b8:0a:8b:f6:e1:
53:ad:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:21:29 2024 by rpki-client on console-fra.rpki-client.org