Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fR6o5LcRPG3b7VCd7XdDL1DqJnU.roa
File: fR6o5LcRPG3b7VCd7XdDL1DqJnU.roa (raw, json)
Hash identifier: r8G+EdKuFaQEGdRhhW0/ks1bB5JQ0XksRVyMwE45Knw=
Subject key identifier: 7D:1E:A8:E4:B7:11:3C:6D:DB:ED:50:9D:ED:77:43:2F:50:EA:26:75
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01919056F2AA5C2F7BBEDC54600A2189512E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fR6o5LcRPG3b7VCd7XdDL1DqJnU.roa
Signing time: Mon 26 Aug 2024 20:18:22 +0000
ROA not before: Mon 26 Aug 2024 20:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 163.5.29.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:90:56:f2:aa:5c:2f:7b:be:dc:54:60:0a:21:89:51:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 26 20:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d1ea8e4b7113c6ddbed509ded77432f50ea2675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:90:12:d1:9e:6a:1e:16:cc:9c:e9:db:cc:41:
1d:96:bb:a3:ef:76:7b:66:6e:ff:31:70:87:4d:52:
d2:13:f9:8f:ff:41:6b:ab:d4:7c:03:04:27:dd:6c:
62:44:38:5e:ab:58:7d:8d:62:9f:39:fd:06:de:3f:
6d:48:35:fe:ac:04:2b:d6:17:da:78:f5:bf:51:e7:
95:86:5a:86:95:d8:84:e8:6d:ee:9b:bf:b0:20:9a:
40:7b:fa:cc:7b:f9:94:ac:4e:01:d6:52:49:bc:50:
6f:a7:ec:63:5d:0f:98:2b:38:ca:92:79:45:4c:d2:
1a:43:d5:b5:c6:87:d7:a8:5f:7b:4b:17:8c:80:85:
de:c9:79:80:37:bc:78:3a:4b:57:7c:a2:11:06:f1:
41:d2:5b:92:4d:7b:f4:bc:8e:91:96:94:5e:55:59:
d7:85:9b:3c:1f:13:1c:88:fe:5f:61:ba:59:5e:46:
67:0f:58:e3:48:3d:0c:f4:79:f6:05:72:a1:19:6b:
03:9b:bb:5e:b3:27:89:d0:c8:15:32:5c:93:74:a8:
d1:95:29:5a:8e:0b:02:e5:f0:9a:c4:93:30:e3:28:
a8:51:07:de:dc:93:86:06:85:4e:48:35:76:78:24:
9f:22:02:da:87:b1:3c:f5:d8:44:11:13:13:c8:3c:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:A8:E4:B7:11:3C:6D:DB:ED:50:9D:ED:77:43:2F:50:EA:26:75
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fR6o5LcRPG3b7VCd7XdDL1DqJnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.29.0/24
163.5.200.0/24
163.5.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:de:b9:70:3b:6e:72:82:8c:00:1a:f5:9a:75:51:63:f8:b1:
dc:37:d7:fd:43:04:8d:34:e4:9a:bd:bb:21:fa:1a:94:a2:27:
e0:29:66:ca:4d:ac:1c:eb:c3:4a:f4:ae:e2:84:a9:62:78:e2:
33:8c:f3:5b:26:40:22:44:cb:0e:bf:84:11:42:65:e4:00:78:
d6:50:5d:8e:95:41:13:1b:a3:26:e6:00:8a:05:a5:11:08:e6:
26:1e:09:2f:d0:b6:2d:36:f6:83:85:02:b3:a9:40:9a:c3:f6:
fc:4a:18:b0:6d:22:52:97:e0:30:d9:de:2b:ef:3f:94:54:f4:
ec:6e:65:67:3f:6e:02:c6:e2:d7:d8:f4:a8:0a:88:ee:e1:e1:
6f:e9:7c:46:56:02:64:81:74:b7:2a:ba:10:41:0c:27:9e:50:
b4:ca:1e:4f:1f:7f:6c:7c:ea:8e:fc:3d:d8:ff:92:b3:b9:97:
dc:d7:f1:26:3d:73:94:b3:d9:4c:21:1a:79:01:c3:b7:9e:ce:
e6:ba:57:2b:8a:0c:b2:3e:0b:5d:aa:19:ea:55:4f:1d:08:af:
b8:81:11:c6:46:dc:e9:4e:3d:11:f1:9c:cf:03:66:0f:ba:24:
f1:cb:1e:aa:b5:18:45:ce:b5:b3:cf:ee:ea:61:10:85:6d:c2:
c4:a9:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:57 2024 by rpki-client on console-ams.rpki-client.org