Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tEoIwOZmEN9-U3HsA9eMnJ0KrMQ.roa
File: tEoIwOZmEN9-U3HsA9eMnJ0KrMQ.roa (raw, json)
Hash identifier: 2yMkrhpA5u9kH6zdGdZdbm7E2FNJ6fSKAa9rgVzJIUg=
Subject key identifier: B4:4A:08:C0:E6:66:10:DF:7E:53:71:EC:03:D7:8C:9C:9D:0A:AC:C4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC42568F5994C4AFA23DABB8AA22859D0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tEoIwOZmEN9-U3HsA9eMnJ0KrMQ.roa
Signing time: Mon 01 Jan 2024 08:30:35 +0000
ROA not before: Mon 01 Jan 2024 08:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:68:f5:99:4c:4a:fa:23:da:bb:8a:a2:28:59:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b44a08c0e66610df7e5371ec03d78c9c9d0aacc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:6a:bd:bc:81:b3:62:63:28:03:06:e4:7a:
58:fb:04:0f:65:5e:b4:2c:2e:12:0d:02:33:de:8e:
37:a5:55:1d:fe:20:68:1e:a9:70:c9:91:29:06:74:
2e:d3:df:e5:0e:30:d1:90:cd:65:61:40:9e:e8:fb:
29:6b:a8:56:a6:c6:2a:49:4b:dc:8a:1a:fe:7f:61:
5c:c7:6a:02:2c:1c:f9:c8:30:c3:d7:3c:76:b6:50:
f1:58:be:85:a5:2c:04:e4:2a:4e:3c:3a:71:4b:4f:
7d:2e:26:d2:06:bf:af:8a:96:75:30:45:c4:a7:76:
4b:dc:d7:09:83:75:b7:30:52:b2:9f:d7:57:20:52:
b6:09:22:a5:de:a6:5d:92:53:3a:ca:02:47:e1:1b:
df:d6:10:4c:8c:99:ce:00:3c:6d:19:d7:03:9e:8b:
72:0c:02:73:b0:64:89:a7:26:56:39:8e:e6:5e:06:
d9:51:fd:0b:81:2a:06:63:8f:d0:8f:f5:d3:d7:24:
e0:6c:96:c4:0d:e1:2f:ca:ed:ed:a2:33:e8:ad:d6:
96:34:df:40:8d:ae:05:eb:1a:e6:a0:fd:e8:86:c8:
f8:9c:25:3d:88:09:72:c5:bc:31:0c:8c:14:22:8a:
df:70:d0:8e:83:b3:01:46:a5:c5:76:a9:df:cf:02:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4A:08:C0:E6:66:10:DF:7E:53:71:EC:03:D7:8C:9C:9D:0A:AC:C4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tEoIwOZmEN9-U3HsA9eMnJ0KrMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.168.0/24
Signature Algorithm: sha256WithRSAEncryption
01:87:bf:bc:d0:ef:b1:56:07:45:30:07:1f:1e:ff:ba:4c:f3:
79:09:9b:b0:13:b0:8a:c3:48:7d:63:1b:2c:17:23:35:11:76:
f7:2d:de:50:27:e2:9b:be:c8:f3:5c:32:b0:65:9a:41:53:af:
a4:6c:4b:2b:e3:01:b0:de:6e:43:05:e4:7a:da:d9:b5:ca:33:
44:7a:a2:7b:16:5e:3c:e7:33:36:37:9b:c7:d3:b3:0b:95:72:
fd:72:7f:11:33:9c:85:a0:e8:95:35:70:9a:6e:97:28:ee:fe:
99:6c:f8:82:52:91:8f:70:79:33:ff:39:88:b4:ba:f4:22:0c:
57:a7:c2:04:5d:3b:c0:4d:7d:88:d3:58:28:1e:e9:ed:bd:02:
be:d8:8f:f8:76:fc:41:f6:6e:1c:6d:47:7f:25:7b:eb:46:8e:
32:7f:71:0c:73:a2:b5:c1:24:ea:58:81:8b:7a:73:74:20:a8:
74:0a:34:93:53:9f:92:d0:46:3e:dd:9d:21:bb:9a:4d:a4:12:
6b:34:4d:60:92:0d:bc:76:69:90:05:aa:ea:83:20:65:78:71:
61:ae:a0:71:15:cc:66:e9:fd:f8:b6:f2:74:f5:03:79:9a:c2:
82:80:b8:c5:cc:6f:7f:bc:a7:3c:ca:f2:28:b9:a7:79:c7:c4:
77:3b:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:23:24 2024 by rpki-client on console-ams.rpki-client.org