Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rFVx5baCdnI3judkLhnDooKnK7A.roa
File: rFVx5baCdnI3judkLhnDooKnK7A.roa (raw, json)
Hash identifier: bIoRD9yv++DsJzt8wuSaXdTYjLZ8qwSKZ+u6dqjUn8g=
Subject key identifier: AC:55:71:E5:B6:82:76:72:37:8E:E7:64:2E:19:C3:A2:82:A7:2B:B0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018F169633A35AA53DE673D9353AC9ECE734
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rFVx5baCdnI3judkLhnDooKnK7A.roa
Signing time: Thu 25 Apr 2024 18:48:13 +0000
ROA not before: Thu 25 Apr 2024 18:48:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215415
IP address blocks: 163.5.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:16:96:33:a3:5a:a5:3d:e6:73:d9:35:3a:c9:ec:e7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 25 18:48:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac5571e5b6827672378ee7642e19c3a282a72bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:02:e0:29:3d:db:34:71:15:b4:41:1a:95:
13:07:be:d6:4c:2a:56:2e:e1:bc:5a:9e:96:6c:6b:
38:41:27:8a:db:a2:b3:44:a3:3e:30:f5:10:52:c6:
80:05:3e:2d:35:71:eb:80:c1:41:47:3a:ee:96:c8:
5d:df:e7:91:02:8d:33:77:8e:44:7d:51:cc:54:61:
1b:ac:08:af:31:d4:cf:b4:f7:03:12:ea:f9:2d:a6:
8a:9f:1a:9f:c8:71:a8:57:38:5e:e8:ee:b6:5b:04:
e1:19:eb:1c:77:82:b2:33:16:fb:5d:a2:3e:5c:f7:
b3:c1:c3:7e:19:19:33:dc:3a:7a:26:5f:0c:f9:3a:
d6:32:77:87:00:d0:fd:2b:45:01:a2:0a:6c:7e:83:
38:56:ca:97:f2:61:94:1c:bb:08:72:81:c1:2f:f2:
42:28:14:9e:66:a1:0d:83:ba:b6:1a:66:f2:09:71:
a2:3f:8c:b9:aa:db:84:80:69:75:ca:90:9a:33:fc:
13:0e:c4:86:fa:e4:0e:bd:df:d8:26:70:bc:f9:be:
46:5a:bf:9d:ec:11:ff:f3:84:b0:d8:0a:77:52:91:
d1:97:61:5e:88:1d:17:d1:48:ec:89:99:9a:3e:a0:
2d:51:37:3f:c1:09:1f:c9:73:bc:c1:63:63:6c:5e:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:55:71:E5:B6:82:76:72:37:8E:E7:64:2E:19:C3:A2:82:A7:2B:B0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rFVx5baCdnI3judkLhnDooKnK7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:37:e5:01:3f:26:b5:bf:21:fa:2b:c0:6f:c5:47:fa:2a:e1:
b8:00:11:91:af:f8:a3:2a:23:4e:35:86:73:8a:92:de:01:88:
d5:2c:b0:79:e4:72:0a:f1:81:a6:8c:10:f8:c3:24:1d:f9:34:
90:c7:44:66:8a:53:15:c9:c3:46:45:93:2e:9c:27:3c:03:0c:
9c:c7:71:ca:6f:cc:bb:45:e4:51:f4:e9:e0:61:83:ad:bb:34:
a8:99:35:2e:ac:c9:94:85:ae:23:b7:52:a2:85:20:42:35:d0:
49:27:b9:cd:e9:5e:f2:1e:c4:a8:70:97:7d:d7:19:bc:f6:93:
4a:13:c1:a7:db:13:e0:11:24:f6:d1:e2:a6:04:f1:61:a7:c4:
00:96:b6:bb:84:59:0d:0e:9b:13:ca:77:d9:a4:26:9a:5d:17:
4e:f8:20:75:f4:48:dd:f2:23:89:c6:fd:72:6c:ff:18:67:1e:
8c:ba:45:e2:20:6e:47:cb:02:2b:bc:28:13:45:2a:12:14:1b:
74:3f:b9:a7:f1:26:9b:57:1f:1c:50:e8:6c:95:5c:33:83:06:
2b:38:be:8e:ce:a8:b5:78:11:8f:75:02:ae:0c:05:d6:d6:04:
fe:3d:2d:61:bd:0d:b1:f2:31:80:9c:8c:7f:a4:e1:fd:99:c6:
77:73:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:18:16 2024 by rpki-client on console-ams.rpki-client.org