Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/v8-4bGAx3gCA3ovoI6QdyDJfPtQ.roa
File: v8-4bGAx3gCA3ovoI6QdyDJfPtQ.roa (raw, json)
Hash identifier: YDcAy/e9OuqLzQgVcQMCSQTAcoN/eifU4OnxVpnOlRw=
Subject key identifier: BF:CF:B8:6C:60:31:DE:00:80:DE:8B:E8:23:A4:1D:C8:32:5F:3E:D4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255327A2008C92B1807EA438223A1D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/v8-4bGAx3gCA3ovoI6QdyDJfPtQ.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24875
IP address blocks: 163.5.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:53:27:a2:00:8c:92:b1:80:7e:a4:38:22:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfcfb86c6031de0080de8be823a41dc8325f3ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:01:4a:cb:52:51:35:b6:f5:b2:10:65:29:82:
e6:1e:02:fa:1f:9b:7b:ba:48:4f:e4:6f:df:76:f7:
bc:28:ad:e8:32:36:57:48:38:b3:18:44:ed:c6:3e:
1f:67:90:7d:8f:a9:40:13:eb:d2:a7:81:e4:51:7a:
b7:02:80:de:12:90:34:33:be:63:86:2e:f1:fe:1b:
66:77:94:96:29:77:97:65:1e:e6:47:fe:e0:d7:d0:
4b:63:dd:25:73:76:24:ae:90:af:3b:74:44:9c:88:
15:2e:ae:ce:e6:b2:c1:e0:86:00:ea:d0:16:95:c4:
4d:2e:b7:4c:1a:13:23:10:2b:4b:db:f3:46:41:0c:
ec:66:1d:9a:1e:a1:a1:a9:c8:64:09:a3:ef:b7:a1:
1e:a7:0c:9b:da:78:4c:b1:65:1b:47:d6:4c:42:de:
63:78:b1:da:60:33:34:06:c5:f6:12:a7:8c:03:3b:
40:4e:00:a3:01:23:e8:f9:33:bc:a7:d7:4f:28:49:
d6:ae:1c:8e:de:68:01:d8:e3:2a:77:64:56:fc:c0:
19:0e:e0:15:b5:2d:b5:d1:8b:51:7d:6d:9e:da:34:
86:46:e7:4d:82:f6:9d:b6:c4:73:a3:41:e4:ef:3e:
f0:ee:8b:e2:b5:70:e3:48:5f:0c:0f:da:c6:1d:45:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:B8:6C:60:31:DE:00:80:DE:8B:E8:23:A4:1D:C8:32:5F:3E:D4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/v8-4bGAx3gCA3ovoI6QdyDJfPtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6b:33:62:a4:f6:e6:8f:1d:93:13:a3:11:fa:e0:a8:85:f5:
71:16:ab:c3:40:d2:35:e4:21:07:f9:d9:05:83:3f:09:c8:d1:
f3:33:00:83:db:00:e0:0b:72:04:6a:c4:20:f6:3b:f1:50:8a:
6a:d4:44:9a:3b:6a:69:4e:d0:14:64:f8:ee:35:91:ac:8a:f2:
fd:58:f9:4d:ac:a9:57:f3:ac:14:ad:ec:fd:06:8f:4c:f0:56:
51:c2:5c:ad:7b:2d:40:43:c2:a2:cb:d1:a8:a6:99:39:a2:7f:
56:45:a3:4d:76:52:f3:d2:5e:50:e7:8c:49:38:25:1c:10:e8:
0b:46:bc:57:81:20:d0:b2:63:db:96:e5:a7:af:a3:6a:e8:1e:
64:a8:6c:7c:49:e7:0f:87:74:cc:f5:75:2b:67:25:56:14:9f:
bb:32:b3:39:4b:50:92:e3:91:c4:f4:30:16:02:bf:d3:be:ad:
27:5a:75:85:69:44:5d:43:de:b8:8f:b3:8a:ed:79:8b:17:ce:
d5:9a:6f:61:84:f7:b8:16:1e:19:23:ea:c9:be:61:47:2a:5a:
c5:8b:27:cc:64:87:a6:f6:75:bb:36:16:35:42:93:e3:8f:8b:
b3:18:55:dd:c4:88:cc:3d:89:02:be:74:fa:60:d2:b0:3a:c0:
76:61:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:21:29 2024 by rpki-client on console-fra.rpki-client.org