Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nb1BEuub-0-_1tfKBmmvsgliozk.roa
File: nb1BEuub-0-_1tfKBmmvsgliozk.roa (raw, json)
Hash identifier: Zg2HJmJgbL2LEfLW7DpT47/BmxUfio/KEHVBf7ChFRw=
Subject key identifier: 9D:BD:41:12:EB:9B:FB:4F:BF:D6:D7:CA:06:69:AF:B2:09:62:A3:39
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192CD18F2E4D6B29F9330E4B0071BBCA94C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nb1BEuub-0-_1tfKBmmvsgliozk.roa
Signing time: Sun 27 Oct 2024 08:30:17 +0000
ROA not before: Sun 27 Oct 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 163.5.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:18:f2:e4:d6:b2:9f:93:30:e4:b0:07:1b:bc:a9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dbd4112eb9bfb4fbfd6d7ca0669afb20962a339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:53:9b:27:7d:b3:f2:10:d8:86:ac:53:d6:
a8:53:b3:bd:26:2e:ea:5e:b6:45:18:75:de:30:5f:
50:e7:ff:aa:15:a6:b5:cf:9d:e5:99:01:b7:98:6d:
00:52:32:23:7c:25:1a:06:ff:45:7d:19:dd:17:f2:
64:34:fc:5c:a4:c3:1f:60:08:8a:85:c8:29:0d:ca:
3e:3e:1e:4f:18:a8:91:b5:fd:f2:d2:4a:b9:5f:b3:
5a:10:c7:34:39:a6:b0:ac:8f:02:c9:99:17:39:2c:
ce:53:98:cb:f2:5d:83:0c:24:0f:36:2d:e7:1e:90:
f3:07:24:90:82:d6:53:4e:4d:d1:bc:ba:f1:3b:cb:
91:f4:cf:c4:e9:77:2f:6d:a8:49:fe:01:97:56:94:
59:f7:ab:9e:d9:4c:73:61:40:69:df:8c:f7:55:24:
8c:6f:f1:7c:dd:d0:8f:ed:cf:10:cc:64:74:72:c4:
12:76:be:bc:ff:f7:8a:73:b1:33:51:ce:d7:53:12:
4e:35:e0:2e:01:c2:6c:34:66:5e:ff:3f:1a:eb:1e:
94:ae:ae:dc:18:b0:c6:77:a5:df:10:86:b5:87:49:
ed:96:b3:9f:03:2f:ad:a8:b0:87:26:79:7a:76:30:
c2:d2:61:12:3e:34:03:1f:1a:c9:9a:54:a4:be:26:
ce:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BD:41:12:EB:9B:FB:4F:BF:D6:D7:CA:06:69:AF:B2:09:62:A3:39
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nb1BEuub-0-_1tfKBmmvsgliozk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d8:22:8b:ca:c3:e3:2d:3d:c2:50:ec:80:62:15:0f:36:93:
5b:4c:cb:2e:19:5d:cf:da:21:2b:63:06:20:62:6d:39:f0:b9:
cd:fd:38:6b:b2:f6:0c:3f:3a:1a:1a:6a:82:16:12:60:c9:e9:
53:dd:4a:8f:be:c7:37:a1:7f:dc:5e:20:83:69:e5:9d:53:e5:
55:d9:6f:70:0e:74:14:c0:46:c6:9e:a0:88:ff:e8:61:61:8d:
39:73:76:f6:4a:74:ec:8b:71:e9:9a:a9:e8:9d:80:70:7b:51:
9f:2a:24:e9:e3:9d:35:41:13:26:06:81:13:82:95:de:d2:9d:
31:75:82:54:d8:28:56:78:53:0a:17:38:1c:98:80:b5:ee:2e:
a2:2a:bf:25:29:04:b6:e3:10:f6:1a:47:c6:b2:84:07:b3:2e:
49:b3:35:2f:92:60:0a:f2:e9:d2:68:14:8e:c9:77:cb:ed:9d:
f3:3b:7f:ea:e6:43:64:c0:56:73:a1:eb:94:df:5b:28:e1:79:
f7:4a:51:2d:51:94:e1:c0:82:0b:70:12:be:17:d2:62:e7:86:
17:e6:a0:c6:c8:f0:2f:a2:2d:fc:4e:f9:9b:3c:17:5d:87:31:
38:8d:a8:c8:b4:42:41:4e:12:3b:64:79:88:2b:b1:87:54:18:
e6:07:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:30 2024 by rpki-client on console-fra.rpki-client.org