Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/soQN85skz5mHw-ILcDVkcp_WLUo.roa
File: soQN85skz5mHw-ILcDVkcp_WLUo.roa (raw, json)
Hash identifier: h7rKcmlY188YfOOCDd20hU1R91B7j8tQqulc7nfEDpM=
Subject key identifier: B2:84:0D:F3:9B:24:CF:99:87:C3:E2:0B:70:35:64:72:9F:D6:2D:4A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01900366EABFEBDB40D82BE389C498E5E5A2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/soQN85skz5mHw-ILcDVkcp_WLUo.roa
Signing time: Mon 10 Jun 2024 18:26:34 +0000
ROA not before: Mon 10 Jun 2024 18:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200136
IP address blocks: 163.5.141.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:03:66:ea:bf:eb:db:40:d8:2b:e3:89:c4:98:e5:e5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 10 18:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2840df39b24cf9987c3e20b703564729fd62d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:a3:b6:ae:67:66:ec:ee:f1:4d:80:6a:f4:
77:f4:3b:a9:32:be:c0:39:c1:0e:6f:5d:93:75:bc:
fb:a1:46:ec:80:bd:ad:e4:40:68:0f:01:3e:95:0b:
c8:5c:43:6e:4f:2d:87:45:d2:74:c0:8e:a7:16:4b:
fd:13:35:cd:1d:3e:c2:5c:e6:9b:56:d0:b5:48:50:
64:01:ba:05:19:05:a6:0e:60:31:6b:28:8d:6f:0d:
c4:26:eb:f5:38:f8:6d:62:2e:93:5b:64:33:b0:65:
64:2b:31:ba:1d:8d:9e:e4:c3:4f:b9:b5:7e:69:25:
e4:56:5b:3a:eb:30:6c:d6:31:af:14:36:c4:85:0b:
4b:d1:f9:79:67:21:62:66:4d:eb:73:be:13:6d:8c:
4b:5a:40:af:ca:dd:d9:8a:56:4d:5a:87:9a:8f:1a:
cf:4a:9c:31:14:18:7f:60:fc:ca:c7:8a:98:74:f4:
f9:f4:1e:41:41:02:d5:e1:23:eb:14:b2:94:44:12:
b7:54:6c:10:3a:a4:2d:f6:d5:f8:e5:20:22:3e:6a:
6c:66:72:da:c0:48:62:2b:d7:8f:3d:90:6e:b2:3f:
26:78:df:d4:06:38:fa:7c:6f:1d:a3:33:7a:13:06:
30:2d:b8:7f:cf:12:2c:27:dd:82:5d:01:a8:a8:52:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:84:0D:F3:9B:24:CF:99:87:C3:E2:0B:70:35:64:72:9F:D6:2D:4A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/soQN85skz5mHw-ILcDVkcp_WLUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.141.0/24
163.5.143.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ac:8c:16:25:38:2a:a8:f6:09:b1:05:3f:11:73:7f:84:50:
7b:c5:d4:11:8a:88:c2:bf:d2:5c:67:b5:34:ba:cc:84:85:87:
98:ca:6c:c5:30:0b:b7:c1:90:02:53:98:d6:02:60:70:d8:91:
6a:a8:19:a8:ce:d1:7c:70:a9:34:a4:42:72:3c:a9:d4:7d:d4:
09:71:32:74:a3:32:58:e0:66:f5:4a:c6:d5:62:cc:b0:00:df:
84:42:04:f1:25:1d:f7:b7:0b:d8:00:6d:5a:69:92:70:3b:96:
bf:f0:6d:35:e4:b0:ab:af:4e:17:69:a9:21:84:2c:75:0e:ad:
6d:c8:cf:cd:88:f8:53:73:90:f7:49:b3:fe:5a:df:09:b4:61:
e6:28:82:c9:5a:06:bb:c8:98:e5:a9:fe:bf:96:12:bc:03:98:
13:53:9c:4f:b6:b5:1c:ec:54:05:55:90:08:8e:c7:e1:ab:42:
c5:1f:0e:2c:2d:58:b3:a8:fa:16:e6:f1:c6:31:ce:19:65:79:
a6:4c:e7:73:4d:c8:a8:8c:55:53:60:1b:eb:24:87:6f:33:19:
05:ad:8c:e6:ff:b9:cc:97:a9:7a:2e:dc:02:dd:2e:d8:a4:e9:
8b:53:c5:74:2a:2f:d3:27:4b:43:6a:1d:eb:50:4a:f1:29:a7:
49:5d:db:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZADZuq/69tA2CvjicSY5eWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwNjEwMTgyNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjg0MGRmMzliMjRjZjk5ODdjM2UyMGI3MDM1NjQ3MjlmZDYyZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiujtq5nZuzu8U2AavR39DupMr7A
OcEOb12Tdbz7oUbsgL2t5EBoDwE+lQvIXENuTy2HRdJ0wI6nFkv9EzXNHT7CXOab
VtC1SFBkAboFGQWmDmAxayiNbw3EJuv1OPhtYi6TW2QzsGVkKzG6HY2e5MNPubV+
aSXkVls66zBs1jGvFDbEhQtL0fl5ZyFiZk3rc74TbYxLWkCvyt3ZilZNWoeajxrP
SpwxFBh/YPzKx4qYdPT59B5BQQLV4SPrFLKURBK3VGwQOqQt9tX45SAiPmpsZnLa
wEhiK9ePPZBusj8meN/UBjj6fG8dozN6EwYwLbh/zxIsJ92CXQGoqFLKMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLKEDfObJM+Zh8PiC3A1ZHKf1i1KMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvc29RTjg1c2t6NW1Idy1JTGNEVmtjcF9XTFVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWNAwQA
owWPMA0GCSqGSIb3DQEBCwUAA4IBAQCVrIwWJTgqqPYJsQU/EXN/hFB7xdQRiojC
v9JcZ7U0usyEhYeYymzFMAu3wZACU5jWAmBw2JFqqBmoztF8cKk0pEJyPKnUfdQJ
cTJ0ozJY4Gb1SsbVYsywAN+EQgTxJR33twvYAG1aaZJwO5a/8G015LCrr04Xaakh
hCx1Dq1tyM/NiPhTc5D3SbP+Wt8JtGHmKILJWga7yJjlqf6/lhK8A5gTU5xPtrUc
7FQFVZAIjsfhq0LFHw4sLVizqPoW5vHGMc4ZZXmmTOdzTciojFVTYBvrJIdvMxkF
rYzm/7nMl6l6LtwC3S7YpOmLU8V0Ki/TJ0tDah3rUErxKadJXdvQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:19 2024 by rpki-client on console-ams.rpki-client.org