Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ln5NTdgwvoFlDp6F0Jr3c4hqtZ8.roa
File: ln5NTdgwvoFlDp6F0Jr3c4hqtZ8.roa (raw, json)
Hash identifier: mix2YMsJvmgyYMkQlVoeU/TGwvPLxjb4vsoalZEZpv4=
Subject key identifier: 96:7E:4D:4D:D8:30:BE:81:65:0E:9E:85:D0:9A:F7:73:88:6A:B5:9F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192BB6257E6856B74139F09EF5384699053
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ln5NTdgwvoFlDp6F0Jr3c4hqtZ8.roa
Signing time: Wed 23 Oct 2024 21:57:17 +0000
ROA not before: Wed 23 Oct 2024 21:57:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4766
IP address blocks: 163.5.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bb:62:57:e6:85:6b:74:13:9f:09:ef:53:84:69:90:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 23 21:57:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=967e4d4dd830be81650e9e85d09af773886ab59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:84:2b:a1:d9:75:ba:af:4d:46:66:41:96:
19:16:40:6a:54:47:2f:98:a9:c7:09:e9:e2:d8:82:
c0:94:f9:74:e4:ad:38:d9:cc:fc:cb:5b:44:de:8d:
93:58:70:50:e2:3c:9b:b6:92:3f:53:79:1c:2c:a3:
3c:e9:55:72:8e:74:ae:48:b4:f7:94:8e:bd:90:2d:
ea:c0:60:f6:9b:98:df:37:bf:09:75:97:19:05:11:
98:57:2e:49:4b:22:00:21:59:9c:57:3f:00:3a:5f:
ce:a7:bf:1b:f6:b3:40:0a:32:ca:d3:58:01:b5:50:
a4:09:8c:40:65:32:1d:39:31:37:87:c8:59:be:d4:
1b:a7:59:1f:c6:ab:ea:c1:9e:76:db:40:5d:dc:7e:
74:0e:df:da:44:71:13:0e:20:a4:29:c8:fb:d5:89:
2b:ec:43:b5:a6:f8:c1:d1:ab:0a:76:f4:0f:95:cd:
3a:6b:6c:ca:7e:da:d5:e0:a5:30:4e:ec:18:d3:cf:
dd:89:b9:5a:93:42:20:da:e7:47:ae:04:5b:c2:07:
6c:8c:de:01:d0:a9:3e:0e:63:10:05:cb:da:91:f0:
9b:97:b3:b1:7f:e5:42:1f:31:13:15:66:b0:e5:6f:
36:23:8a:7a:2c:54:e1:96:cc:bd:90:b0:1e:43:b0:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7E:4D:4D:D8:30:BE:81:65:0E:9E:85:D0:9A:F7:73:88:6A:B5:9F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ln5NTdgwvoFlDp6F0Jr3c4hqtZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.16.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7a:27:7c:21:a8:85:4f:09:25:86:e9:f8:04:dd:7a:ce:15:
d4:df:1b:13:73:00:3a:ed:16:2e:a1:cd:b0:cb:f9:38:74:e5:
9d:df:81:e4:99:df:98:78:cf:fc:7b:0c:21:a9:93:ee:fd:da:
0d:b3:1e:6e:c6:f2:19:a4:90:3b:78:f2:ae:32:52:50:7f:e4:
8a:cb:b5:84:a8:1d:88:29:f3:2b:4e:e2:14:55:aa:76:0d:1e:
b4:b6:26:eb:04:59:89:c8:80:20:ae:14:70:0d:70:d8:62:06:
d2:a9:13:6a:a9:d8:85:1d:6c:b7:f8:40:fc:f2:e6:a0:63:4b:
48:56:0c:17:13:b6:c0:e3:71:2a:c0:6a:14:ac:fe:da:f5:16:
05:5c:44:70:ff:8d:7e:69:f1:05:a1:3a:11:df:7d:c4:c0:b6:
7f:0c:0d:ca:41:2a:f9:d0:5b:e1:85:86:fa:50:ee:97:38:58:
54:91:1a:e3:a3:e9:d0:0d:5b:1f:0a:16:70:66:7d:e4:00:f2:
e3:c8:0b:55:32:4b:02:ca:c4:26:ec:e9:7f:ab:fc:7e:89:af:
69:b6:fc:e0:a9:ba:57:a6:81:81:f9:e0:8d:86:ff:56:c4:5e:
15:c0:bf:19:6e:4b:f4:10:a2:3f:ec:6e:a6:f7:6f:7a:bc:f8:
91:6c:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:25 2024 by rpki-client on console-ams.rpki-client.org