Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pmQuTqOor-w4RoKJrBmcOAROobE.roa
File: pmQuTqOor-w4RoKJrBmcOAROobE.roa (raw, json)
Hash identifier: L29I5zeT5p8geO8RuezvZluEVF5/CY78MflJaX/489c=
Subject key identifier: A6:64:2E:4E:A3:A8:AF:EC:38:46:82:89:AC:19:9C:38:04:4E:A1:B1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018DA84A5C0CDA0889B7297085211BB5368D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pmQuTqOor-w4RoKJrBmcOAROobE.roa
Signing time: Wed 14 Feb 2024 15:44:21 +0000
ROA not before: Wed 14 Feb 2024 15:44:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 163.5.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:4a:5c:0c:da:08:89:b7:29:70:85:21:1b:b5:36:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 14 15:44:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6642e4ea3a8afec38468289ac199c38044ea1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:33:f9:39:ed:ef:24:ec:95:7b:1d:ae:23:
a2:a8:df:c4:0d:ca:34:bc:69:71:4d:75:d0:c3:63:
0a:ef:b3:8f:cd:69:3e:0a:ac:2d:4d:31:5e:c4:32:
85:e2:27:c7:0e:5e:6c:f4:d8:28:89:cd:a6:2d:e7:
17:a2:ca:4f:4e:3b:04:f8:40:2e:17:18:5f:c5:61:
18:e9:67:c1:30:2e:fd:4c:92:0f:0e:72:26:1b:5d:
1c:cc:9e:b7:7c:11:95:db:82:37:4d:c9:d3:5e:f5:
e1:27:f2:c0:64:27:72:61:d3:23:0d:1c:e9:0d:f8:
d0:8d:a6:04:09:df:44:bc:29:25:ee:cb:4d:5f:a2:
ad:91:2c:c6:27:b2:f8:3a:37:c1:b7:07:e2:e2:8c:
a1:69:cc:36:36:94:b2:d8:8a:03:cd:d2:e5:76:07:
55:0d:08:89:bb:ed:5d:70:2d:39:04:0d:d4:40:43:
db:38:5c:31:e9:76:ea:d3:15:34:6a:21:f8:09:63:
d1:18:dd:31:39:ba:22:a4:16:49:25:4d:44:83:43:
79:58:fe:67:dd:79:ca:46:f0:a8:2d:4c:e2:c0:71:
2c:ee:10:a9:e0:2f:cd:33:09:6c:e9:58:55:a4:0d:
ab:f5:3e:b7:22:ff:c3:1f:e9:9b:d9:d3:82:17:ec:
c8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:2E:4E:A3:A8:AF:EC:38:46:82:89:AC:19:9C:38:04:4E:A1:B1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pmQuTqOor-w4RoKJrBmcOAROobE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:05:bf:a6:ca:21:a5:80:ae:87:6c:f1:ff:a3:69:b6:35:6e:
37:1d:26:21:f1:ca:2b:4e:77:b7:e8:07:a1:2e:0f:86:cd:ef:
dd:92:3a:3b:9c:b1:d6:08:2d:0b:52:73:1b:a6:f5:02:5a:0b:
f2:18:aa:5e:15:d9:1a:a8:da:e3:72:14:c9:1b:e7:37:49:01:
df:ae:6c:ff:92:f3:71:96:bb:0d:9a:b7:89:30:86:36:5d:23:
8f:13:66:c4:29:57:fb:89:19:42:72:7f:58:63:36:ab:da:3a:
42:52:d2:5a:d9:f7:a4:bf:f0:f8:20:37:1b:91:73:7c:fb:79:
9c:aa:e3:fb:8c:5f:ec:fb:e2:89:9d:f7:aa:64:85:bf:fe:e6:
fe:11:ca:0b:66:13:f9:2e:d5:55:de:54:97:33:2a:05:42:d3:
36:b5:10:f7:25:8b:ee:18:20:1d:7e:d9:c2:0c:79:2a:2b:e9:
26:12:06:a0:49:a9:35:b3:c9:d2:8d:5e:8c:70:eb:3b:db:3c:
e7:f8:ad:e1:c3:9a:e6:e4:2f:72:00:c0:d7:ec:af:b8:55:73:
63:e1:10:06:26:a5:23:1b:f0:49:30:7b:9c:e1:e7:7b:be:c8:
59:e8:6c:8d:93:87:f0:9a:55:91:16:38:e6:0c:b0:5a:a5:e4:
35:3d:a4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:19:25 2024 by rpki-client on console-fra.rpki-client.org