Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/niNkc125aZtYytROhD5K2POafk8.roa
File: niNkc125aZtYytROhD5K2POafk8.roa (raw, json)
Hash identifier: GdnkYougVOhgSjAi2EG1J98hOU191poHEZGoynWy3PQ=
Subject key identifier: 9E:23:64:73:5D:B9:69:9B:58:CA:D4:4E:84:3E:4A:D8:F3:9A:7E:4F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4256456BDF8A0D83BBEB8FC5B1A4F4B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/niNkc125aZtYytROhD5K2POafk8.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 163.5.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:64:56:bd:f8:a0:d8:3b:be:b8:fc:5b:1a:4f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e2364735db9699b58cad44e843e4ad8f39a7e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:57:29:68:bc:86:01:bc:6a:09:9a:95:9e:
26:a7:23:65:65:2c:34:54:1b:ec:9e:cd:be:d2:5e:
3b:df:ad:80:39:2e:f8:be:62:69:c5:a1:35:c0:e8:
cc:47:65:59:e1:52:03:c2:fc:31:f1:52:92:36:c3:
19:aa:88:60:eb:af:f5:5c:47:59:30:38:91:75:d2:
8d:60:ac:cc:76:4d:fc:a0:a4:26:ed:c1:77:b2:b7:
5e:0c:2c:ae:5a:98:dc:54:2f:15:69:e3:29:fa:af:
3d:dd:ef:59:fa:9a:55:a2:9b:2b:cb:1d:58:e1:60:
b7:ef:0a:ef:21:ec:20:e1:de:ff:87:d4:87:eb:86:
94:13:25:16:62:f2:a7:13:d4:45:d0:50:d6:b1:b6:
74:02:d6:94:e7:a0:3f:d1:fe:7f:9f:0a:12:24:50:
af:9d:b2:fd:88:89:7a:a1:1d:fc:59:b6:c3:a0:e3:
74:16:aa:45:9f:98:5a:e3:24:75:a4:b2:f0:2e:70:
db:83:58:30:f7:be:d7:4f:b6:e0:29:1b:74:f8:9d:
c9:cf:c0:70:54:ec:cb:1b:fc:9b:d3:9e:b4:ea:85:
18:85:7b:77:5d:23:84:f5:4f:fd:7d:a3:62:85:76:
c5:c7:e6:27:b7:a1:db:51:02:c2:0c:52:ce:1b:f0:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:23:64:73:5D:B9:69:9B:58:CA:D4:4E:84:3E:4A:D8:F3:9A:7E:4F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/niNkc125aZtYytROhD5K2POafk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
26:69:e0:cb:8a:08:19:da:52:f5:67:f4:5e:a2:f9:27:d2:f2:
27:74:6a:40:f4:d1:b5:ce:4e:e3:36:9b:05:1a:75:87:5a:28:
1a:4e:cd:75:2d:0c:f5:83:4d:79:02:3f:12:84:72:89:ea:79:
a4:07:65:35:09:c6:28:42:ca:1c:5a:92:8b:54:14:5a:43:3d:
94:ec:e3:5d:33:e2:ed:5f:4a:37:52:39:dd:a4:fd:90:8e:3d:
c9:11:79:38:dd:50:11:8e:39:70:55:2b:ff:70:53:1a:da:84:
a5:60:fc:06:00:4c:eb:4d:b3:f4:5e:e3:3e:c3:c9:7f:a0:b8:
5a:f3:c5:2f:da:8f:20:38:9d:f8:ed:b9:90:8b:7a:87:1b:37:
76:5d:4d:65:ee:a4:23:02:39:b7:5e:99:15:14:1f:09:76:84:
e8:31:78:bc:9a:8f:d6:4f:ad:f4:25:17:89:a9:39:84:0f:e9:
4e:ab:39:6c:14:97:94:e8:c5:3f:ee:87:67:a5:8e:e3:c3:1a:
e4:a0:b2:43:96:ed:3f:73:73:22:c9:f1:bc:4d:7f:b4:5d:ee:
8c:e0:94:0c:70:91:2f:11:7c:b8:39:b1:80:e8:e1:92:f6:a2:
d2:46:93:95:37:72:84:8e:a2:dd:03:c7:25:cb:b2:cb:89:c8:
73:4a:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:54:15 2024 by rpki-client on console-ams.rpki-client.org