Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pvVf8MUH9SWBGIUW6YD4n4jSXbY.roa
File: pvVf8MUH9SWBGIUW6YD4n4jSXbY.roa (raw, json)
Hash identifier: 1GpiXMAQfdwNkl9vt7z6MABXsypWSMyVVDAulNUrjq8=
Subject key identifier: A6:F5:5F:F0:C5:07:F5:25:81:18:85:16:E9:80:F8:9F:88:D2:5D:B6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018E3909C57E2BFAD7D2EFA2AA055E079AFA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pvVf8MUH9SWBGIUW6YD4n4jSXbY.roa
Signing time: Wed 13 Mar 2024 18:18:45 +0000
ROA not before: Wed 13 Mar 2024 18:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 163.5.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:09:c5:7e:2b:fa:d7:d2:ef:a2:aa:05:5e:07:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 13 18:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f55ff0c507f52581188516e980f89f88d25db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:ea:06:7e:47:f0:fa:40:19:a8:b0:96:1e:
9b:b7:73:8d:4b:02:3a:b7:65:94:1f:03:15:b4:8d:
68:69:19:2b:4e:5d:f1:99:57:41:f5:67:84:fb:c2:
63:42:6d:a9:dd:fd:e6:f9:e9:e1:93:0e:7e:ef:7d:
85:1e:ad:e3:ac:d9:78:41:cf:34:9d:5b:9b:d0:73:
91:83:00:18:80:5a:d2:f0:d7:07:b6:95:46:ca:df:
37:74:a1:8f:82:72:91:2d:e7:d5:57:d9:77:0f:70:
1c:5f:fa:46:45:63:df:f7:9c:94:09:9f:ec:c9:15:
91:ae:73:f6:92:e7:9b:45:2f:ef:f3:28:56:29:e1:
ae:55:a8:9d:38:fe:8e:26:3f:ac:25:32:fa:b1:2f:
4e:23:42:62:5a:1a:c5:4e:51:81:99:e9:0f:e6:52:
e4:41:80:6c:36:b0:61:75:f2:dd:d0:19:9f:fe:fe:
94:9e:6b:4f:18:06:22:19:2e:f9:0f:9e:83:d8:7f:
84:5b:a5:03:bc:78:16:e7:6f:c2:e8:48:9d:8d:1d:
b1:33:f5:16:11:97:69:9a:8e:5a:88:50:49:d5:58:
50:e0:25:e9:83:e7:8e:09:00:68:79:b6:b7:3e:bc:
d3:86:ba:9f:e5:1d:0a:79:b8:d7:1e:37:f1:45:2a:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:5F:F0:C5:07:F5:25:81:18:85:16:E9:80:F8:9F:88:D2:5D:B6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pvVf8MUH9SWBGIUW6YD4n4jSXbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.232.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f3:2e:a3:5e:f1:5e:89:dd:58:ab:e3:42:33:6b:27:30:88:
c8:56:c3:2f:fb:56:58:a4:b2:15:0f:29:5d:d7:cb:df:f1:93:
5e:47:46:eb:47:6e:35:89:d8:cf:d5:aa:bc:4c:8d:3c:a8:85:
12:39:95:16:dc:1f:58:97:0a:dc:2a:a3:2a:20:1d:25:74:b5:
22:03:01:71:b3:93:58:12:49:e2:ed:f9:05:8b:9d:55:cc:47:
49:e1:24:b0:7f:1a:14:a2:44:e2:d9:46:49:28:a8:a9:e8:bf:
c2:f7:13:fa:f0:22:eb:de:7e:b1:70:d5:92:d2:95:43:7b:b5:
bf:b7:2a:d3:09:38:e1:1a:5f:8c:93:ea:8e:3f:58:d7:90:df:
1b:48:4a:b4:f9:c3:de:38:42:55:ff:69:f1:34:de:53:47:bd:
6d:be:dd:63:a0:da:58:10:ee:49:56:7a:c8:1e:cf:09:d8:7e:
cc:8e:ca:18:6e:52:33:cb:e5:ac:92:5b:69:79:0c:9d:fe:b7:
47:bc:d5:0f:65:06:0f:32:dd:88:46:d9:32:d7:52:ec:57:86:
c0:c1:72:3d:35:da:38:a2:e9:c4:c3:98:ca:cf:82:6d:12:27:
e8:bb:f3:d6:01:fa:1e:20:c9:43:37:c0:40:b3:92:ac:3b:44:
ff:a6:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:02:44 2024 by rpki-client on console-fra.rpki-client.org