Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oIyni_cn7fMmEC6_u-XJ6hcs-UA.roa
File: oIyni_cn7fMmEC6_u-XJ6hcs-UA.roa (raw, json)
Hash identifier: x3A2JBggIiAs4QPNd/1/5TJInLBPao5Yj9yYmkpc3Qs=
Subject key identifier: A0:8C:A7:8B:F7:27:ED:F3:26:10:2E:BF:BB:E5:C9:EA:17:2C:F9:40
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255FC1F87265721161E1A631528E06
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oIyni_cn7fMmEC6_u-XJ6hcs-UA.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199058
IP address blocks: 163.5.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5f:c1:f8:72:65:72:11:61:e1:a6:31:52:8e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a08ca78bf727edf326102ebfbbe5c9ea172cf940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:95:69:3e:9b:21:8f:da:39:b8:ba:58:30:92:
84:ac:6d:6e:90:1a:d5:84:e7:36:bb:60:e1:aa:6a:
f1:37:9f:e6:f3:df:43:7f:47:8a:ea:68:46:bd:53:
dc:0a:c9:08:8e:6e:46:d5:29:5b:10:a8:94:9e:f3:
b5:15:0b:b4:a9:45:5f:44:b7:64:d0:ac:5c:f9:b4:
97:ee:31:8c:03:cf:02:3b:68:7e:44:a9:82:24:cf:
3c:f5:30:7e:2d:65:5c:03:d8:a7:41:f8:03:61:1e:
c1:8a:cb:06:bf:45:b1:32:b0:ec:cc:6f:5a:86:76:
b4:22:68:2a:d8:d8:e3:c1:e3:24:16:90:05:bb:a2:
13:15:12:8b:29:13:77:39:ad:e7:b2:8d:b1:a9:33:
fd:04:f5:c3:68:49:f3:63:4b:21:4d:93:9f:70:1d:
65:a5:35:06:08:92:ac:0f:4c:d5:c9:45:7a:9b:d0:
3a:bc:a4:42:48:0b:f1:15:0b:c8:93:a0:14:9a:1b:
0e:77:52:d5:17:4e:28:d1:66:44:31:cf:fa:c3:57:
93:b7:2f:97:b6:d4:74:2b:b8:ec:1a:46:1e:73:7b:
39:6a:a8:f2:ac:93:1a:55:97:9f:c6:b3:9b:02:b1:
80:db:4d:69:64:47:19:06:f4:83:67:79:b5:64:fd:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8C:A7:8B:F7:27:ED:F3:26:10:2E:BF:BB:E5:C9:EA:17:2C:F9:40
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oIyni_cn7fMmEC6_u-XJ6hcs-UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.207.0/24
Signature Algorithm: sha256WithRSAEncryption
27:11:cc:33:77:e8:19:af:0e:67:3d:ce:5a:e6:27:44:b6:27:
87:38:4c:33:e5:89:ba:3f:79:85:97:11:e2:8f:08:6c:7d:be:
f7:e7:05:67:dc:05:58:1b:fd:91:e4:a5:6c:e5:72:82:15:b1:
35:c6:5c:ea:1a:38:15:42:db:30:8a:a6:4c:4c:a4:c8:a2:fe:
b7:1a:27:98:d1:ed:7d:10:93:30:e6:b4:33:3b:e9:7d:6b:36:
5f:6c:7b:ba:6c:cb:1b:32:e9:cc:47:be:3a:b0:03:4b:50:06:
c6:f4:53:cf:74:81:de:d8:ad:3a:2a:0e:e6:4b:32:b1:7a:da:
01:b0:23:4d:45:e7:18:0d:6a:63:90:63:9e:0b:0d:e7:dd:7c:
5a:68:83:f3:68:3d:7e:65:15:3e:c9:62:57:5e:fb:ad:0f:2f:
bf:9c:0e:0f:4f:5a:92:03:80:09:a1:6b:15:a4:41:63:b1:71:
19:11:38:1c:c7:93:f0:ff:b0:67:b5:f1:ca:96:07:4a:e6:d1:
69:69:0b:28:6f:53:5f:71:f1:28:37:78:8c:9d:64:29:d8:c8:
ee:18:82:b8:b7:04:96:cf:f3:e9:e9:6e:9f:5e:3a:5e:9b:73:
92:50:54:a1:6c:e6:39:10:9f:95:ce:a2:c8:29:2a:3e:5e:2f:
63:91:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:25 2024 by rpki-client on console-ams.rpki-client.org