Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cfj3mRSDiM32l7q5p1_nGv9VL0I.roa
File: cfj3mRSDiM32l7q5p1_nGv9VL0I.roa (raw, json)
Hash identifier: ZM/K9rRz8CCNrQUxi2scaEir2MNC0jMULxi7vHB1hus=
Subject key identifier: 71:F8:F7:99:14:83:88:CD:F6:97:BA:B9:A7:5F:E7:1A:FF:55:2F:42
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01919054336872665C197CF0B289865FB6C8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cfj3mRSDiM32l7q5p1_nGv9VL0I.roa
Signing time: Mon 26 Aug 2024 20:15:22 +0000
ROA not before: Mon 26 Aug 2024 20:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60542
IP address blocks: 163.5.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:90:54:33:68:72:66:5c:19:7c:f0:b2:89:86:5f:b6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 26 20:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71f8f799148388cdf697bab9a75fe71aff552f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:81:c8:01:f2:58:e3:49:17:d9:db:96:c1:
c4:ed:3b:64:e4:eb:a1:cb:1a:cf:f9:0f:60:d1:81:
3b:a8:13:31:3a:e2:dd:af:6e:94:25:fe:24:ab:a1:
6e:f9:c4:d4:76:d5:ec:5b:2d:ab:33:de:bb:26:34:
18:aa:0a:79:46:da:a0:9e:4d:68:40:7a:67:28:cb:
1b:e7:77:66:25:ff:85:9f:92:73:28:28:04:f2:1f:
36:35:c4:76:15:50:21:a0:89:bc:f8:54:a2:09:7d:
ba:34:46:3e:2a:d9:92:2e:2c:e1:ac:95:c4:9e:a8:
7f:c1:dc:6f:fe:a0:b9:09:d2:60:bd:dd:7b:ad:fe:
41:8a:c8:08:55:b1:30:33:9a:f7:9e:1d:ad:af:eb:
13:c5:6d:2a:f3:4b:4e:3e:2e:9d:50:f8:0d:ac:5d:
c4:34:b7:75:60:71:e7:d8:fe:2e:4d:d6:07:c7:ef:
33:f4:15:31:77:76:69:af:6e:c3:16:c4:88:6c:54:
0f:c6:4b:6e:c6:78:20:31:3e:ab:0f:e3:33:d1:9f:
80:3d:ba:53:d3:6a:7e:43:a8:37:87:27:b3:96:50:
42:5d:39:4e:31:e7:f6:e3:02:49:5d:2f:2d:98:df:
15:8b:84:1a:13:f3:72:5f:d1:31:e0:f7:d4:cc:1e:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F8:F7:99:14:83:88:CD:F6:97:BA:B9:A7:5F:E7:1A:FF:55:2F:42
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cfj3mRSDiM32l7q5p1_nGv9VL0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:96:53:e0:21:f7:06:af:b7:b7:36:2a:b3:02:0d:81:c2:99:
c7:ca:5b:e1:50:56:b8:84:12:6f:2c:59:fb:0b:83:35:63:b2:
72:68:a9:bb:11:b9:d9:a1:e9:38:71:c4:e6:75:c4:1f:cc:a4:
36:37:f5:df:6b:7c:85:65:4b:04:66:0b:83:9c:dc:99:5e:5a:
33:81:a5:8f:79:22:58:45:f4:c2:18:5d:f7:0e:36:c2:29:e9:
e9:8c:90:c7:f9:f0:04:06:d5:97:c1:e3:28:58:97:da:5c:71:
23:3f:b0:9c:5e:26:b8:8a:a3:ed:76:29:66:e9:9f:97:28:96:
d5:18:c9:6d:cd:0c:e0:8d:a2:10:eb:d8:a0:39:1f:8d:5c:6f:
ca:4e:32:47:d3:41:9e:98:e9:31:7e:36:f5:5e:e3:ad:ae:b2:
66:fa:17:a9:f9:a5:be:03:59:c1:4c:0e:fd:a4:8d:98:2b:f4:
e5:c8:cc:8a:14:0e:2c:b3:76:00:e0:b9:8f:3d:9a:d1:81:8e:
15:c3:07:b6:bb:af:8a:05:b4:b8:b8:f5:2c:73:b4:82:14:86:
d3:91:1c:b2:dc:5c:ac:76:d9:c9:99:27:94:e8:e4:62:57:61:
d9:66:56:b7:d2:89:e6:3d:ba:5b:85:6a:46:84:89:05:53:cb:
29:f1:5d:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGQVDNocmZcGXzwsomGX7bIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwODI2MjAxNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWY4Zjc5OTE0ODM4OGNkZjY5N2JhYjlhNzVmZTcxYWZmNTUyZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7iByAHyWONJF9nblsHE7Ttk5Ouh
yxrP+Q9g0YE7qBMxOuLdr26UJf4kq6Fu+cTUdtXsWy2rM967JjQYqgp5Rtqgnk1o
QHpnKMsb53dmJf+Fn5JzKCgE8h82NcR2FVAhoIm8+FSiCX26NEY+KtmSLizhrJXE
nqh/wdxv/qC5CdJgvd17rf5BisgIVbEwM5r3nh2tr+sTxW0q80tOPi6dUPgNrF3E
NLd1YHHn2P4uTdYHx+8z9BUxd3Zpr27DFsSIbFQPxktuxnggMT6rD+Mz0Z+APbpT
02p+Q6g3hyezllBCXTlOMef24wJJXS8tmN8Vi4QaE/NyX9Ex4PfUzB7XcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHH495kUg4jN9pe6uadf5xr/VS9CMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvY2ZqM21SU0RpTTMybDdxNXAxX25HdjlWTDBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXoMA0G
CSqGSIb3DQEBCwUAA4IBAQCrllPgIfcGr7e3NiqzAg2BwpnHylvhUFa4hBJvLFn7
C4M1Y7JyaKm7EbnZoek4ccTmdcQfzKQ2N/Xfa3yFZUsEZguDnNyZXlozgaWPeSJY
RfTCGF33DjbCKenpjJDH+fAEBtWXweMoWJfaXHEjP7CcXia4iqPtdilm6Z+XKJbV
GMltzQzgjaIQ69igOR+NXG/KTjJH00GemOkxfjb1XuOtrrJm+hep+aW+A1nBTA79
pI2YK/TlyMyKFA4ss3YA4LmPPZrRgY4Vwwe2u6+KBbS4uPUsc7SCFIbTkRyy3Fys
dtnJmSeU6ORiV2HZZla30onmPbpbhWpGhIkFU8sp8V0Y
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:25 2024 by rpki-client on console-ams.rpki-client.org