Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lGg3ec819WPlEoc0tNKtBJH_scI.roa
File: lGg3ec819WPlEoc0tNKtBJH_scI.roa (raw, json)
Hash identifier: jA3bXDtQsCMQRL0H/K/d0IaQmSq5EG2M9VxcrC0IaIs=
Subject key identifier: 94:68:37:79:CF:35:F5:63:E5:12:87:34:B4:D2:AD:04:91:FF:B1:C2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191C307A11E09F200FE3CE3B92D7BB99616
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lGg3ec819WPlEoc0tNKtBJH_scI.roa
Signing time: Thu 05 Sep 2024 16:32:22 +0000
ROA not before: Thu 05 Sep 2024 16:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.38.0/23 maxlen: 23
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:07:a1:1e:09:f2:00:fe:3c:e3:b9:2d:7b:b9:96:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 5 16:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94683779cf35f563e5128734b4d2ad0491ffb1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:e1:80:46:f3:93:c3:48:c8:a7:ca:e7:aa:
b2:11:56:c9:b4:ce:01:66:ed:8e:43:92:b5:c2:60:
fc:e6:11:d2:fe:db:c0:77:14:80:a8:6b:f9:c7:4c:
15:37:31:79:fd:db:4e:0c:61:6c:79:2a:0b:4d:8d:
d6:e7:c0:09:50:1d:f4:cb:9c:0b:fc:26:7d:ce:4d:
d4:5b:e8:54:c9:56:e6:53:8c:2d:fd:b0:d4:83:c8:
86:63:a9:e9:42:fb:73:d5:82:46:99:89:5d:1e:49:
1a:89:fb:db:1f:28:6b:59:7f:29:98:7a:45:5f:f3:
2d:e1:79:c6:ef:c6:fc:36:ef:06:d6:f7:77:86:48:
d8:7c:7d:6b:43:9e:b5:d9:e7:a7:c3:63:b6:cb:d7:
1c:02:78:2b:26:7d:4a:38:df:1a:27:cb:cc:71:d5:
62:02:1e:12:2d:5d:fc:e2:93:9c:c2:fb:ff:cf:03:
34:60:d6:90:bd:ae:69:4d:bb:c4:42:7d:d6:55:bd:
d4:07:20:84:3f:01:c5:7d:99:5c:a7:f9:7a:79:c8:
25:a3:1f:e4:34:32:3b:a6:9f:71:19:dc:c2:14:0f:
b5:38:7d:25:a5:a0:0f:4f:28:e9:3d:d9:20:92:20:
c7:7f:f1:07:0c:2a:54:43:ee:29:60:07:89:b1:9b:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:68:37:79:CF:35:F5:63:E5:12:87:34:B4:D2:AD:04:91:FF:B1:C2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lGg3ec819WPlEoc0tNKtBJH_scI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.130.0/23
163.5.133.0/24
163.5.147.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.229.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a2:3b:9f:ca:ae:d5:b9:ff:00:9a:d9:6f:cb:a1:8d:79:b6:
0f:21:54:66:08:e2:d7:38:fe:41:8e:87:38:74:11:92:19:a7:
fa:53:21:bd:f8:fd:bb:0e:e9:41:59:07:82:85:dc:f6:a2:85:
e1:15:19:74:f1:4b:72:de:12:9a:c5:c5:ad:07:82:d4:34:a0:
ff:4d:f8:3b:7b:66:fd:7c:bc:ef:f5:50:42:f2:47:ef:15:4e:
d8:92:11:ea:d4:79:db:fe:90:e8:51:01:25:03:8e:4a:fa:b8:
71:12:b2:84:61:8a:7f:86:c7:fb:e0:cb:70:6d:fc:7e:2f:6a:
da:b2:c0:f1:99:39:4f:aa:42:a5:0b:7b:a0:a5:9b:4e:4c:e3:
4b:a7:99:fa:89:ad:2c:89:ee:c7:37:ae:1b:25:c0:68:14:ae:
c1:88:66:1e:99:1e:6f:d2:ac:70:92:6f:be:43:e8:b6:05:4c:
d1:8b:57:bc:88:5d:67:d8:8b:82:2b:d9:b0:71:d4:3d:6e:ba:
18:23:61:31:54:50:ff:2f:04:8b:9f:bb:0c:e9:d7:c2:1e:e3:
8b:ef:d3:9b:0d:b6:59:eb:32:d4:5e:c5:e3:3f:19:21:86:e5:
a8:75:50:3b:c0:1c:f3:c0:e3:8b:9b:6a:c3:76:39:9d:1a:11:
01:d2:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:27 2024 by rpki-client on console-ams.rpki-client.org