Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eD76trr7o79ZoIRDYaPEQWJs4G4.roa
File: eD76trr7o79ZoIRDYaPEQWJs4G4.roa (raw, json)
Hash identifier: 4GkCoSZ+vLT9WKzxDPxytT+/uifFMaJoQ3pgEoY466Q=
Subject key identifier: 78:3E:FA:B6:BA:FB:A3:BF:59:A0:84:43:61:A3:C4:41:62:6C:E0:6E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4256D103E5343DEF5DAF3DDFAF7A659
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eD76trr7o79ZoIRDYaPEQWJs4G4.roa
Signing time: Mon 01 Jan 2024 08:30:36 +0000
ROA not before: Mon 01 Jan 2024 08:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397630
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:6d:10:3e:53:43:de:f5:da:f3:dd:fa:f7:a6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=783efab6bafba3bf59a0844361a3c441626ce06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7a:66:51:dc:2f:da:e1:4b:7d:8b:de:c7:65:
cf:c5:de:f2:dd:3b:7b:89:16:3b:44:1d:18:3c:88:
6a:2d:34:e7:18:97:69:2c:f2:85:ab:71:9e:cc:0f:
3b:0d:f6:f6:9e:d5:fd:87:e1:fa:b4:f7:f4:dd:16:
67:b9:e2:cf:23:d0:9a:3c:89:20:97:a8:3d:29:12:
aa:a3:9e:aa:47:16:20:43:95:a1:8e:e3:a8:bb:e8:
c7:26:60:57:4f:c4:f6:e4:d2:f3:9d:07:4b:db:27:
49:6f:e0:ad:77:7a:bd:b6:76:a5:98:fc:8e:94:14:
8e:74:3d:d2:6f:8a:cc:1c:38:30:a7:ec:2d:77:47:
99:6f:41:19:3f:07:9c:45:04:3a:e0:df:58:f1:9d:
be:2e:5a:97:05:02:df:a6:13:93:e7:16:cf:0e:48:
1a:10:3c:79:7d:98:0a:34:64:24:0d:27:02:1b:48:
66:bc:58:f3:e8:c3:d7:1c:bb:78:70:8a:91:9c:b9:
35:10:6c:90:f8:41:eb:98:e0:df:74:14:97:65:f0:
2f:28:e6:c0:78:60:c8:20:28:3d:97:c0:8e:16:ec:
c5:f1:3e:dc:ff:bb:b1:aa:f4:86:73:03:3f:8b:2c:
e4:61:d8:93:9f:8f:25:b6:da:32:43:3c:64:50:2e:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3E:FA:B6:BA:FB:A3:BF:59:A0:84:43:61:A3:C4:41:62:6C:E0:6E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eD76trr7o79ZoIRDYaPEQWJs4G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.71.0/24
163.5.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:cb:93:1d:e8:f9:7a:04:a5:5c:2c:96:63:a5:bb:1d:72:cc:
10:3e:d7:30:35:52:85:1f:3b:94:12:fb:82:a7:20:9a:f2:70:
0b:76:28:1e:91:42:55:c2:7c:87:6a:65:af:75:cb:c1:81:00:
1b:d8:0d:8f:f7:0e:40:53:40:f0:35:71:39:3e:d7:b9:59:61:
3c:96:ab:a8:c5:42:2a:05:3c:86:bc:34:df:2a:48:89:12:ed:
49:68:7a:80:f3:a3:1f:65:43:3e:4f:62:f9:67:83:c5:2c:a2:
87:65:76:5e:f9:3c:f1:0a:cb:1a:97:e4:48:7b:f1:a4:51:78:
20:bb:52:a4:d4:6d:80:bc:77:fb:ca:72:62:e2:0d:b8:f6:cd:
43:5b:f0:f7:9d:d1:88:a3:49:1e:fb:a1:e1:7b:58:52:c3:8f:
c3:4c:68:23:27:8e:7a:56:cc:37:89:a7:29:00:a0:93:1b:99:
e5:83:d8:6c:7a:ed:92:ab:51:f3:0d:3f:a5:b6:7c:0e:95:8f:
da:54:b4:cc:18:50:89:fa:06:ae:ec:a1:0f:bb:31:8c:0d:b3:
ef:76:a1:84:59:69:f4:5d:4c:6b:97:22:a6:dd:39:c7:ea:66:
39:e5:86:09:bc:d6:8f:37:f9:8a:1e:df:25:42:91:b2:bc:e4:
b6:86:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:23:24 2024 by rpki-client on console-ams.rpki-client.org