Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lxbQD3-s7HVXuXA25VQT-knJu8Q.roa
File: lxbQD3-s7HVXuXA25VQT-knJu8Q.roa (raw, json)
Hash identifier: jPpHA0eQhFTyzihwSO5noxXLUFEQ+RDktOknD4ZhmhE=
Subject key identifier: 97:16:D0:0F:7F:AC:EC:75:57:B9:70:36:E5:54:13:FA:49:C9:BB:C4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D8E212EE1EF9B7AE22328E559A5FEA68A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lxbQD3-s7HVXuXA25VQT-knJu8Q.roa
Signing time: Fri 09 Feb 2024 13:49:15 +0000
ROA not before: Fri 09 Feb 2024 13:49:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215663
IP address blocks: 163.5.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:21:2e:e1:ef:9b:7a:e2:23:28:e5:59:a5:fe:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 9 13:49:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9716d00f7facec7557b97036e55413fa49c9bbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:af:fa:4b:1f:bb:b7:88:e5:1e:eb:7d:1a:
11:fa:4f:17:01:6c:43:db:52:c9:7c:03:59:1a:d5:
ff:68:aa:31:3f:1d:0b:0c:8a:75:fb:ce:ae:f8:d0:
0c:43:a6:75:ee:2f:9d:0e:75:e5:d7:92:7a:3e:21:
8f:20:f1:e7:6f:b4:a3:fc:f3:21:95:c9:3a:a2:c8:
99:ac:76:a8:5c:b6:01:8b:0e:ef:a3:55:01:24:2a:
4f:57:75:4e:8e:1e:38:1e:17:14:2e:7a:08:71:44:
f0:2c:6e:a3:dd:ff:52:4e:9a:c4:4e:46:97:c9:fa:
8a:02:1f:73:bf:c5:73:b0:2d:e5:a2:f0:3a:11:aa:
5d:9e:83:ee:1e:dc:b4:0e:d8:c6:07:8e:8d:4d:55:
4d:b1:89:ac:26:d8:87:95:c9:9a:5b:5f:f1:eb:9d:
c2:b6:85:c6:77:fe:da:a9:e4:a2:fe:90:dc:4d:7b:
21:27:a2:52:b6:01:a0:2b:d3:72:5f:8c:b5:97:cb:
9f:da:b0:3e:51:42:6c:79:44:90:89:5b:2c:3a:8a:
cc:9c:7e:65:36:88:65:86:5f:5d:e9:c1:35:16:1f:
16:b8:62:91:4a:ff:d2:61:10:b6:93:34:33:af:bf:
c1:83:f4:11:ec:7f:ed:de:f2:69:f2:f7:2e:19:b1:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:16:D0:0F:7F:AC:EC:75:57:B9:70:36:E5:54:13:FA:49:C9:BB:C4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lxbQD3-s7HVXuXA25VQT-knJu8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.27.0/24
Signature Algorithm: sha256WithRSAEncryption
15:94:0c:d4:68:ed:e3:47:18:24:76:94:e1:c1:cf:de:e9:2f:
88:c6:6c:b9:06:ef:61:fc:db:5b:a8:08:31:70:32:d4:c5:c6:
16:dc:26:4d:07:88:47:0c:35:81:f0:da:65:9d:dc:87:a2:52:
89:77:0d:2c:b2:0b:71:49:0e:62:9e:24:6d:b9:94:dc:f9:42:
b7:06:34:af:cf:62:7b:6b:dd:4f:2b:c4:46:b6:7f:f1:f5:b1:
d3:42:8a:bb:1c:37:5a:a1:2c:4e:9e:2d:e8:08:10:f6:a5:70:
6e:eb:96:53:2d:04:04:1b:c9:34:25:0d:e7:16:38:62:c8:b9:
d2:75:9e:f5:8b:21:50:03:aa:97:87:c1:4c:49:6f:32:85:f2:
4b:4d:8a:7d:92:4e:7d:46:61:15:e1:e1:97:60:b5:14:0c:6e:
59:a8:30:3a:6e:84:fd:e2:f8:24:11:14:6a:74:5c:b6:26:be:
43:b0:7c:35:bb:69:36:85:87:13:26:1f:c4:40:bb:dc:6f:3c:
a1:04:b8:84:d0:03:aa:3a:8b:fd:ed:9c:16:57:0c:f2:f3:68:
47:65:16:90:9e:7f:c0:34:d3:7b:ce:8f:b0:ac:70:7b:ad:2e:
3b:8c:5c:84:39:f4:0b:6d:8a:0a:27:4f:31:0c:87:bc:50:53:
bd:44:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:39:11 2024 by rpki-client on console-fra.rpki-client.org