Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bE_4OlZkJxo89bUri-a2us_hX-s.roa
File: bE_4OlZkJxo89bUri-a2us_hX-s.roa (raw, json)
Hash identifier: gvF4aQqt6M3672InrZC9aoaz2PMg5eQCd2q5awqLniM=
Subject key identifier: 6C:4F:F8:3A:56:64:27:1A:3C:F5:B5:2B:8B:E6:B6:BA:CF:E1:5F:EB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018F62EDB838C07AE3A350E5D2C085D93163
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bE_4OlZkJxo89bUri-a2us_hX-s.roa
Signing time: Fri 10 May 2024 14:34:56 +0000
ROA not before: Fri 10 May 2024 14:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199218
IP address blocks: 163.5.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:ed:b8:38:c0:7a:e3:a3:50:e5:d2:c0:85:d9:31:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 10 14:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c4ff83a5664271a3cf5b52b8be6b6bacfe15feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:76:39:8e:98:eb:32:d3:c3:40:fc:a1:0e:
49:d2:fb:78:b3:08:ad:9f:ef:29:be:59:9d:14:f7:
6c:df:d7:7b:d8:5a:0b:cb:eb:37:3c:d4:4c:dd:3e:
42:9e:12:e0:5c:de:6b:23:10:fd:d6:83:ce:bc:05:
ed:f0:88:c3:8b:73:ab:21:0d:dd:31:ea:c4:06:44:
95:e5:19:4c:ef:cc:08:7e:dd:cd:b9:d1:6c:0a:72:
50:38:e9:16:7a:16:b0:69:fe:0d:1b:50:6b:f8:55:
02:a5:ba:c8:cf:26:21:4d:e6:10:07:04:a1:b8:da:
cd:4b:54:a2:ed:4d:a2:23:95:74:3b:03:0d:f5:10:
b6:3a:48:cd:34:d7:46:0d:3b:1d:d9:42:df:54:21:
e3:5c:4f:4f:4c:e9:8d:66:a9:b9:ac:5d:9a:56:ec:
59:06:41:f0:d9:5d:86:84:8f:24:ea:89:03:73:91:
b0:e4:5d:d3:fd:8e:01:4e:ef:30:64:a2:7c:32:e8:
fa:8d:db:52:46:2f:68:84:16:58:38:fd:be:17:cc:
bd:63:64:75:6a:8e:24:46:8b:dd:75:d8:13:c3:af:
6f:c6:94:a0:41:bc:60:86:61:5b:db:b7:23:79:2e:
92:42:d5:64:cc:37:5d:4f:44:34:e6:75:b6:18:46:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4F:F8:3A:56:64:27:1A:3C:F5:B5:2B:8B:E6:B6:BA:CF:E1:5F:EB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bE_4OlZkJxo89bUri-a2us_hX-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c6:e7:8a:70:2c:f4:7a:6d:50:07:50:1d:ea:47:3a:fb:e7:
36:9b:e3:83:0f:30:c8:1c:8f:cc:17:d0:e7:f5:f8:c5:99:c3:
9b:81:44:3e:85:15:57:56:3b:c0:09:7d:2c:8b:47:a3:64:f5:
6e:a4:49:7a:ba:59:9b:a5:72:08:65:be:e7:e2:3c:5b:00:28:
41:42:99:ab:ae:1f:b7:31:8d:a6:7e:9a:d3:95:c3:4f:26:db:
be:38:0e:5a:48:46:23:36:72:d9:1c:64:13:9d:5b:cf:64:61:
e1:6c:e1:03:1c:32:5d:fa:82:03:97:89:de:47:0c:e2:2f:d3:
79:8f:de:9d:df:44:8c:f1:40:f9:3e:cd:ea:c3:0a:d1:da:f7:
f6:25:33:0b:65:9a:53:21:88:2f:a0:e2:f6:ba:c1:f8:40:82:
e9:82:00:06:78:ca:93:5d:64:ce:13:8e:18:c6:5c:b4:a1:13:
d3:93:85:73:b1:f3:07:f7:7e:64:9b:d0:21:5d:6e:67:fa:ab:
80:2c:31:4f:62:0e:48:8d:b5:34:db:ca:9b:f0:f8:75:2d:26:
79:b1:4e:e1:99:a3:e9:0f:49:12:c9:77:93:0f:02:08:d8:df:
29:3a:d4:73:9e:6e:13:5c:7d:27:66:b3:e9:51:88:10:b3:57:
08:82:4d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:01:31 2024 by rpki-client on console-ams.rpki-client.org