Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pss4jQSF8Cr9-jLPDkE0VxBk7pw.roa
File: pss4jQSF8Cr9-jLPDkE0VxBk7pw.roa (raw, json)
Hash identifier: IQ+Z1MXEO4QldEj3NuTbdPj1mxem58YsxgVrCLX6hfM=
Subject key identifier: A6:CB:38:8D:04:85:F0:2A:FD:FA:32:CF:0E:41:34:57:10:64:EE:9C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01928A2E70874785D5306239D7DFC1ED8490
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pss4jQSF8Cr9-jLPDkE0VxBk7pw.roa
Signing time: Mon 14 Oct 2024 08:39:12 +0000
ROA not before: Mon 14 Oct 2024 08:39:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399486
IP address blocks: 163.5.32.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:2e:70:87:47:85:d5:30:62:39:d7:df:c1:ed:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 14 08:39:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6cb388d0485f02afdfa32cf0e4134571064ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:57:93:a4:01:88:ce:53:6c:c1:ff:2c:f4:
19:fc:63:e4:81:15:b8:ca:6c:e3:c5:fd:9c:0e:16:
22:b7:c7:6c:63:46:38:9f:a1:c2:93:ef:84:8a:4d:
ca:92:3a:3b:96:2c:e9:2d:e4:a5:ba:77:0d:42:0f:
bc:c9:05:f3:5e:7b:a5:77:b0:47:5f:6b:60:85:15:
88:3c:3f:f6:c6:5b:ce:6c:fc:da:96:fc:6e:cf:11:
1d:f4:2d:a1:89:31:01:84:50:50:06:43:e1:f0:1a:
77:d3:13:d9:eb:d3:56:53:45:43:ae:ed:59:f0:5a:
f2:4c:7e:91:4f:65:6f:71:b7:70:51:fb:9a:5a:80:
5f:b1:d1:dd:24:6d:43:19:84:db:e4:98:e2:11:02:
30:af:46:c3:42:bd:ac:5e:16:cd:fb:d8:cb:cc:71:
dc:60:12:68:e2:86:18:12:5c:ea:a1:12:36:e2:24:
56:a0:46:3b:79:15:44:54:80:1f:59:f9:f6:8c:7a:
5b:65:ac:b3:5c:c9:dc:73:9f:ab:d2:22:1a:fc:ec:
47:e5:d1:d2:bc:7b:4b:a7:5c:48:ac:af:97:39:f1:
42:1d:99:b1:33:58:36:50:da:15:d6:47:e2:8f:a3:
62:dd:c8:1a:8e:d7:aa:c0:70:77:a5:f5:bb:01:42:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:38:8D:04:85:F0:2A:FD:FA:32:CF:0E:41:34:57:10:64:EE:9C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pss4jQSF8Cr9-jLPDkE0VxBk7pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.64.0/24
163.5.106.0/24
163.5.112.0/24
163.5.160.0/24
163.5.169.0/24
163.5.210.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8b:dc:ac:60:b5:53:c8:ec:60:a3:3d:ff:ff:08:24:77:07:
c9:d7:20:96:a2:93:60:89:68:d8:9b:7c:7d:2e:c6:b8:d5:3f:
cb:c4:00:dc:b5:3f:4c:61:f0:c2:91:84:77:bb:79:fa:57:ef:
39:56:c4:59:c5:5c:48:3a:70:3b:ca:f3:d9:d0:8e:95:08:29:
63:2f:83:6d:2a:ad:31:59:c6:88:a5:91:fe:7f:92:8d:77:09:
67:1d:6f:65:19:c1:6e:d7:eb:85:12:c2:6f:86:f3:d7:7a:c1:
4e:0a:76:00:53:26:39:4a:57:80:32:8b:65:fd:e1:54:84:f0:
8b:88:27:c9:8e:b1:d4:6a:46:5d:be:c5:b7:10:08:86:df:39:
06:2c:be:f9:49:25:16:10:6b:7c:80:57:4e:f1:5c:f6:a6:bf:
db:fb:52:64:9f:3e:91:51:2b:8d:a9:aa:a3:b0:3f:fe:bd:c1:
0c:22:bd:b5:f6:20:02:cd:f1:53:7f:17:0a:5e:85:7c:4f:dc:
ec:dc:e8:19:46:ec:b7:79:90:cb:c8:ab:6b:fd:70:82:92:9d:
2d:7e:23:71:b9:c6:c7:0b:41:1a:ae:86:51:6c:72:75:d3:1a:
96:53:56:24:7b:28:98:68:fa:b9:03:d7:93:b6:0d:02:1f:27:
2e:c1:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:25 2024 by rpki-client on console-ams.rpki-client.org