Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/f2hLS3OEP_tRLnJleICBoQUrG_w.roa
File: f2hLS3OEP_tRLnJleICBoQUrG_w.roa (raw, json)
Hash identifier: MfIuKEKQ3uwMaC8668KAJp6JFBMyMcT19OI1nG5hPXA=
Subject key identifier: 7F:68:4B:4B:73:84:3F:FB:51:2E:72:65:78:80:81:A1:05:2B:1B:FC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192D812B32655D25115581371DB084A0F98
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/f2hLS3OEP_tRLnJleICBoQUrG_w.roa
Signing time: Tue 29 Oct 2024 11:39:17 +0000
ROA not before: Tue 29 Oct 2024 11:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29837
IP address blocks: 163.5.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:12:b3:26:55:d2:51:15:58:13:71:db:08:4a:0f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 29 11:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f684b4b73843ffb512e7265788081a1052b1bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:5b:32:7e:17:56:0e:3c:20:35:52:37:ba:
92:98:d7:09:66:56:f7:64:f9:21:58:82:55:67:11:
10:b4:98:9a:57:b9:6e:e1:28:20:51:55:96:dd:2c:
b9:48:5f:c4:2e:a5:bb:47:36:54:a6:f7:87:78:75:
ba:38:e4:92:18:13:e1:1e:d0:f1:f1:7c:75:6f:ed:
fd:f5:8b:c3:01:f3:59:b3:3d:b3:c5:fb:a0:8e:a8:
c9:b1:3d:af:f2:77:22:3a:ee:61:33:98:a1:25:6f:
20:e2:2f:3b:0c:30:42:a5:7d:cc:4e:e6:18:a2:aa:
a3:9c:02:24:db:db:06:4a:02:88:1a:d8:9e:f4:57:
39:c0:42:c8:fd:7f:96:d1:08:ec:88:5f:61:21:02:
e2:a4:40:1a:9e:fc:e5:4a:0f:ba:f2:6d:2f:ed:e9:
dc:ac:e5:07:bc:af:94:f1:4e:0c:78:1f:cd:0e:7c:
14:c4:db:4e:16:8c:4e:e1:20:85:65:ad:2d:d4:c3:
1d:2b:ac:2b:1e:c5:a1:d9:89:d7:59:c1:f3:3c:5f:
14:e6:3c:5a:e2:23:42:a4:06:5f:3b:7e:ee:7f:5b:
76:4c:1f:1c:36:bb:3a:9a:7a:54:f5:45:79:fe:00:
1e:a6:ec:7c:a5:fa:b0:c9:3b:96:51:d9:19:b1:3f:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:4B:4B:73:84:3F:FB:51:2E:72:65:78:80:81:A1:05:2B:1B:FC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/f2hLS3OEP_tRLnJleICBoQUrG_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.237.0/24
Signature Algorithm: sha256WithRSAEncryption
19:0a:49:5a:cd:80:21:81:f9:ea:20:a7:eb:09:86:be:81:55:
8a:8d:ce:24:3e:a4:ec:a4:a0:6f:9a:50:65:18:a5:09:6d:d9:
52:79:39:8f:ee:ba:73:2f:bf:2f:f1:5f:d2:cb:3e:27:41:97:
3e:31:3b:9b:e9:99:a3:da:c5:47:dd:64:6a:fb:07:5c:25:89:
89:b5:0e:a0:24:fd:48:74:bf:8f:53:f8:f0:14:0d:41:f5:95:
52:c5:dd:22:70:c1:74:3b:40:b0:bc:02:d8:96:60:18:52:fa:
80:25:b2:31:c5:10:e2:c3:d2:02:c3:b4:a6:43:b6:c2:c9:6e:
bf:0f:1c:81:a6:c2:92:75:16:06:05:ef:31:6a:31:e3:41:3f:
6e:3e:7d:0b:c9:4e:02:cd:c1:00:f4:99:34:2e:25:a2:e4:db:
29:b2:b9:db:b7:0f:10:a6:d3:6f:1c:83:dc:df:31:df:22:bf:
26:a5:17:83:f6:4d:87:22:81:c1:32:cc:14:a0:e1:bf:02:36:
a9:96:9b:e7:15:97:62:ba:48:16:09:62:49:af:ad:38:34:10:
b6:65:e2:03:83:11:95:14:e6:78:72:07:74:cb:f7:10:06:0a:
27:d7:f6:7e:8c:99:49:84:7a:b9:f0:20:f9:e0:7f:3b:ff:2f:
24:b4:e5:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLYErMmVdJRFVgTcdsISg+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMDI5MTEzOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjY4NGI0YjczODQzZmZiNTEyZTcyNjU3ODgwODFhMTA1MmIxYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/NbMn4XVg48IDVSN7qSmNcJZlb3
ZPkhWIJVZxEQtJiaV7lu4SggUVWW3Sy5SF/ELqW7RzZUpveHeHW6OOSSGBPhHtDx
8Xx1b+399YvDAfNZsz2zxfugjqjJsT2v8nciOu5hM5ihJW8g4i87DDBCpX3MTuYY
oqqjnAIk29sGSgKIGtie9Fc5wELI/X+W0QjsiF9hIQLipEAanvzlSg+68m0v7enc
rOUHvK+U8U4MeB/NDnwUxNtOFoxO4SCFZa0t1MMdK6wrHsWh2YnXWcHzPF8U5jxa
4iNCpAZfO37uf1t2TB8cNrs6mnpU9UV5/gAepux8pfqwyTuWUdkZsT+7EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9oS0tzhD/7US5yZXiAgaEFKxv8MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvZjJoTFMzT0VQX3RSTG5KbGVJQ0JvUVVyR193LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXtMA0G
CSqGSIb3DQEBCwUAA4IBAQAZCklazYAhgfnqIKfrCYa+gVWKjc4kPqTspKBvmlBl
GKUJbdlSeTmP7rpzL78v8V/Syz4nQZc+MTub6Zmj2sVH3WRq+wdcJYmJtQ6gJP1I
dL+PU/jwFA1B9ZVSxd0icMF0O0CwvALYlmAYUvqAJbIxxRDiw9ICw7SmQ7bCyW6/
DxyBpsKSdRYGBe8xajHjQT9uPn0LyU4CzcEA9Jk0LiWi5Nspsrnbtw8QptNvHIPc
3zHfIr8mpReD9k2HIoHBMswUoOG/AjaplpvnFZdiukgWCWJJr604NBC2ZeIDgxGV
FOZ4cgd0y/cQBgon1/Z+jJlJhHq58CD54H87/y8ktOUw
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:18 2024 by rpki-client on console-ams.rpki-client.org