Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wXemwjlSasrObwIj1sYSiFKBiZY.roa
File: wXemwjlSasrObwIj1sYSiFKBiZY.roa (raw, json)
Hash identifier: IQBe9Zv1/d5vNiDAWnPVp+2KmI9EeWvAeytwgpz+jdQ=
Subject key identifier: C1:77:A6:C2:39:52:6A:CA:CE:6F:02:23:D6:C6:12:88:52:81:89:96
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018F3FFA4419AF49B5958FF84F6FAAF5F6F4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wXemwjlSasrObwIj1sYSiFKBiZY.roa
Signing time: Fri 03 May 2024 19:41:57 +0000
ROA not before: Fri 03 May 2024 19:41:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 163.5.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3f:fa:44:19:af:49:b5:95:8f:f8:4f:6f:aa:f5:f6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 3 19:41:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c177a6c239526acace6f0223d6c6128852818996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:51:49:98:e3:e4:d4:0c:71:3d:ea:b9:95:
82:1c:ca:b5:ba:1a:30:7e:5a:a8:b4:1d:d8:9b:93:
c8:e2:a1:97:f3:cc:24:07:0f:8e:de:02:36:45:1f:
3b:cc:1e:39:88:5d:29:35:ba:0d:6c:2c:f4:a9:db:
42:d3:5f:e2:66:a8:63:cf:aa:bb:97:97:c4:07:ba:
5c:d8:de:94:6f:dd:74:28:07:4b:ab:dc:b7:1c:e0:
8f:5c:5e:4f:b6:5a:f4:7b:5f:d5:34:3d:75:2d:8d:
45:37:03:68:84:cd:37:28:72:4f:4c:c6:d8:1f:73:
6c:c6:49:26:27:1c:53:88:d7:05:a0:6f:a6:b6:cb:
8a:16:05:3b:f2:f5:64:21:69:4c:e8:1b:a5:6d:bc:
d9:b3:fe:f2:19:9c:e3:ff:94:4f:53:02:11:84:3f:
09:f7:11:3c:6c:57:79:8b:ff:08:62:da:2e:5e:e6:
37:e3:0e:60:69:e2:6d:cd:69:aa:5a:0c:ab:03:28:
11:15:aa:69:96:b4:9d:bd:15:84:3f:5b:35:7e:cc:
e3:79:23:33:84:21:73:e6:d6:40:33:e6:50:04:54:
fc:5f:a9:ce:60:53:59:15:69:4f:28:92:16:83:b1:
67:43:2f:4e:e2:0f:0d:d2:14:09:3a:6d:cd:03:3e:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:A6:C2:39:52:6A:CA:CE:6F:02:23:D6:C6:12:88:52:81:89:96
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wXemwjlSasrObwIj1sYSiFKBiZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.54.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c6:a7:57:cd:81:d8:dd:45:13:b7:6a:41:be:0b:5d:dd:b7:
5a:ed:06:99:06:da:f4:c9:de:86:42:17:9c:f0:d4:fe:cf:9c:
1b:24:14:99:38:3e:2c:30:8b:72:b1:79:a8:f5:84:9d:28:fd:
fc:47:35:5c:57:24:1f:e1:51:29:d1:49:77:4d:f4:7c:68:54:
0a:53:ca:22:4d:1c:0b:fc:d1:63:b5:5e:e4:76:e7:f4:42:c8:
8d:ff:c8:35:17:c6:ce:5c:de:3f:b1:30:cd:ab:38:08:c7:96:
85:bc:33:98:49:42:ed:dd:a4:d2:ab:a5:ab:08:42:54:a3:87:
e5:e3:a1:17:94:48:66:c8:39:9d:63:34:ef:fb:17:a5:83:e9:
af:a4:8e:a2:4b:ec:c4:32:a0:88:0e:ae:31:95:17:36:b7:a8:
25:d5:56:6f:4b:6b:61:27:0b:d0:02:4a:18:dc:92:b2:ca:19:
11:0d:67:f0:f3:34:35:6e:76:47:11:93:ce:ce:bb:5c:49:78:
e8:ae:ae:9b:42:2c:8b:13:15:7c:57:7d:11:1a:30:c1:7d:fa:
b1:50:29:5f:4b:a8:09:a9:09:0e:2a:f0:96:c1:8d:e3:68:84:
14:82:b9:38:2f:bb:c7:5b:fd:f5:ec:9a:85:1a:c3:49:01:3f:
0c:da:56:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8/+kQZr0m1lY/4T2+q9fb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwNTAzMTk0MTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTc3YTZjMjM5NTI2YWNhY2U2ZjAyMjNkNmM2MTI4ODUyODE4OTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYpRSZjj5NQMcT3quZWCHMq1uhow
flqotB3Ym5PI4qGX88wkBw+O3gI2RR87zB45iF0pNboNbCz0qdtC01/iZqhjz6q7
l5fEB7pc2N6Ub910KAdLq9y3HOCPXF5Ptlr0e1/VND11LY1FNwNohM03KHJPTMbY
H3NsxkkmJxxTiNcFoG+mtsuKFgU78vVkIWlM6BulbbzZs/7yGZzj/5RPUwIRhD8J
9xE8bFd5i/8IYtouXuY34w5gaeJtzWmqWgyrAygRFapplrSdvRWEP1s1fszjeSMz
hCFz5tZAM+ZQBFT8X6nOYFNZFWlPKJIWg7FnQy9O4g8N0hQJOm3NAz5Y/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMF3psI5UmrKzm8CI9bGEohSgYmWMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvd1hlbXdqbFNhc3JPYndJajFzWVNpRktCaVpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowU2MA0G
CSqGSIb3DQEBCwUAA4IBAQBGxqdXzYHY3UUTt2pBvgtd3bda7QaZBtr0yd6GQhec
8NT+z5wbJBSZOD4sMItysXmo9YSdKP38RzVcVyQf4VEp0Ul3TfR8aFQKU8oiTRwL
/NFjtV7kduf0QsiN/8g1F8bOXN4/sTDNqzgIx5aFvDOYSULt3aTSq6WrCEJUo4fl
46EXlEhmyDmdYzTv+xelg+mvpI6iS+zEMqCIDq4xlRc2t6gl1VZvS2thJwvQAkoY
3JKyyhkRDWfw8zQ1bnZHEZPOzrtcSXjorq6bQiyLExV8V30RGjDBffqxUClfS6gJ
qQkOKvCWwY3jaIQUgrk4L7vHW/317JqFGsNJAT8M2lad
-----END CERTIFICATE-----
Generated at Sun May 19 20:24:07 2024 by rpki-client on console-fra.rpki-client.org