Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/o6r1xNLfioIQcakp0I6C1oqQcN0.roa
File: o6r1xNLfioIQcakp0I6C1oqQcN0.roa (raw, json)
Hash identifier: fQ32Z21DvcFiU7KrJS+/7rOqPIy/l5H5YOba9GjQEEk=
Subject key identifier: A3:AA:F5:C4:D2:DF:8A:82:10:71:A9:29:D0:8E:82:D6:8A:90:70:DD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193013A5A3EBDC916733DF3FCEF778EA2E6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/o6r1xNLfioIQcakp0I6C1oqQcN0.roa
Signing time: Wed 06 Nov 2024 11:27:01 +0000
ROA not before: Wed 06 Nov 2024 11:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 163.5.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:3a:5a:3e:bd:c9:16:73:3d:f3:fc:ef:77:8e:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 6 11:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3aaf5c4d2df8a821071a929d08e82d68a9070dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:c5:4a:2f:21:bc:15:b5:c3:47:2a:39:c3:
d5:4b:82:34:92:58:31:96:1e:a1:60:9e:63:8e:55:
f3:92:e8:7d:49:61:7e:9e:1e:60:9d:95:2a:d7:00:
51:ad:44:05:7e:26:08:5f:ca:bd:74:e7:de:44:3c:
89:aa:1d:dd:40:04:e3:7d:43:4e:41:0b:a7:1f:30:
26:03:c1:85:4a:f3:d1:a8:e8:dd:0f:40:3a:29:9d:
98:cf:5f:d6:83:0d:80:ef:e7:9f:96:ab:f5:09:33:
6c:71:b2:d4:22:4d:f5:e0:f3:66:5f:36:58:08:21:
02:fb:cb:25:ce:ab:7f:60:55:43:65:08:39:5a:6f:
d9:03:73:2d:51:8c:79:ff:00:19:7a:44:67:7f:bd:
2d:93:ed:76:1a:7e:a6:3f:c6:04:42:40:3a:50:40:
7e:96:b8:bc:f0:be:44:fe:2f:66:8c:85:a7:0d:1d:
90:48:f0:7b:59:94:a7:8e:45:7e:a9:6a:7d:74:d6:
5f:f2:a0:53:b7:fd:f1:8a:5c:39:0a:81:0f:fd:51:
fa:5a:ca:af:2b:30:1f:ef:9c:fe:06:e9:b1:0a:55:
92:15:14:24:67:97:44:bf:02:f5:dd:34:21:3b:c4:
3b:9b:18:96:24:80:74:19:3e:1c:63:78:04:b9:e1:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:F5:C4:D2:DF:8A:82:10:71:A9:29:D0:8E:82:D6:8A:90:70:DD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/o6r1xNLfioIQcakp0I6C1oqQcN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c2:30:98:17:b0:b9:a5:cc:e4:10:6e:fa:d1:48:fc:3b:a6:
e7:01:b9:1e:fa:b5:79:f5:67:c9:ef:c8:c5:7b:8f:85:08:ae:
23:ad:fb:82:75:d9:d1:46:40:69:f0:85:e5:0f:4a:fb:c0:43:
23:cc:1c:19:5e:ad:1a:ef:c8:9d:f1:85:9c:1b:50:f7:c7:74:
68:fe:fa:05:a8:0f:b8:28:85:b4:6f:91:a4:e7:f3:4b:04:40:
58:17:4e:11:f9:75:6c:65:4a:65:d4:48:29:85:9c:b9:4e:7a:
9c:d0:7c:99:89:91:80:ae:ad:f5:5b:ec:aa:ff:f6:69:e3:98:
1d:de:bc:0f:88:9b:89:98:12:b5:93:e6:c6:3e:4b:e0:57:a6:
c1:db:0c:55:2e:d2:40:7c:40:5d:a2:f4:95:ea:d4:29:b0:59:
6c:51:a9:61:54:39:6e:9e:ea:59:f8:6e:52:55:a3:2b:11:d7:
ed:e8:2a:de:2c:b4:d4:da:46:3c:57:e0:e3:00:7b:e6:1e:06:
9e:68:5f:1e:d1:f3:cd:5d:15:f0:be:2c:21:66:68:6a:6c:02:
10:6b:ea:ff:28:c1:03:56:21:f6:f2:b3:80:e4:25:55:fd:cf:
12:fa:ad:53:00:a2:01:9a:ad:ac:a2:94:04:81:c3:92:1f:11:
55:32:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:27 2024 by rpki-client on console-ams.rpki-client.org