Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xStoX-ortj0-8_dguTJXwW_7EfU.roa
File: xStoX-ortj0-8_dguTJXwW_7EfU.roa (raw, json)
Hash identifier: jOPkYeSLytjG7vZ6lpHDQQZkO06O3MX4qhgOqpwJEBA=
Subject key identifier: C5:2B:68:5F:EA:2B:B6:3D:3E:F3:F7:60:B9:32:57:C1:6F:FB:11:F5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018DCD9A7608C99D06D664409EE774C8AA60
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xStoX-ortj0-8_dguTJXwW_7EfU.roa
Signing time: Wed 21 Feb 2024 21:37:48 +0000
ROA not before: Wed 21 Feb 2024 21:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 163.5.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cd:9a:76:08:c9:9d:06:d6:64:40:9e:e7:74:c8:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 21 21:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c52b685fea2bb63d3ef3f760b93257c16ffb11f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:46:fb:d6:41:a5:27:77:1a:3b:eb:3a:6e:27:
d8:21:c8:4f:6d:17:98:68:e2:6b:a7:9b:94:f8:5c:
03:ad:12:a6:c0:5a:2e:46:5d:1a:a5:24:f0:5d:3f:
59:98:39:90:40:b8:e1:d0:a2:bf:4a:d0:a1:e6:97:
aa:fa:e0:9b:eb:b6:ae:55:eb:c1:ed:69:80:d9:dc:
da:46:ca:ca:d6:81:3d:13:0e:22:9d:55:73:52:b8:
e2:3b:d4:c7:86:15:66:32:7d:ee:46:78:d0:ef:92:
a8:ba:26:0c:3d:68:8a:b5:b2:90:c9:47:54:dd:ac:
96:84:5d:44:2b:ac:02:11:ae:bb:32:ec:09:6d:69:
98:94:e5:30:d1:7b:b3:13:f2:ed:47:93:b6:f3:5c:
1b:b5:e3:33:72:96:eb:6c:4c:86:aa:b9:2a:e0:e3:
87:66:3a:a0:af:2b:23:41:88:ee:ad:61:e8:81:d3:
9f:2b:db:d6:c3:e9:e6:34:f4:84:ee:13:f3:f2:5a:
94:ea:b0:ae:a3:db:4c:5c:99:26:69:19:c1:ed:86:
39:5b:96:83:be:b6:0c:6b:ca:20:c9:20:ba:99:05:
9c:e1:23:e5:5c:e9:29:00:50:da:94:45:82:4f:93:
5d:08:0c:d2:cd:37:a8:bc:a0:1e:ac:a4:f1:96:e8:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:68:5F:EA:2B:B6:3D:3E:F3:F7:60:B9:32:57:C1:6F:FB:11:F5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xStoX-ortj0-8_dguTJXwW_7EfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9e:67:20:18:07:6c:c6:16:98:33:a7:15:9a:65:6d:ec:45:
22:5f:ba:2e:02:23:cf:e5:08:0b:c0:04:1b:76:59:5d:e9:6a:
7f:8b:00:a7:fd:4a:35:9a:b8:84:64:c3:9d:32:e4:c8:a0:e8:
16:ce:e3:58:c5:ab:0e:3e:b4:5e:4b:50:9e:60:3e:5e:46:70:
54:ff:8a:12:17:c3:74:bc:63:ef:fb:8a:78:61:0d:8c:e4:08:
44:2b:8a:c8:2a:61:a7:e2:9d:28:ac:b1:d5:6c:27:45:dd:63:
62:a6:f5:07:b5:31:40:f9:4c:c9:cb:0a:4e:01:d0:a1:4d:72:
c9:3b:37:fa:84:f9:2f:5f:21:27:e5:c4:79:b8:d1:86:f8:c9:
07:e5:a3:31:a7:79:b3:5c:4d:db:9d:a1:87:98:6b:bd:77:e1:
78:20:c6:ac:01:b2:b3:7b:ef:e8:01:8a:13:43:d3:89:86:e6:
0e:60:96:c9:e7:e5:0f:c5:41:82:4c:78:45:34:ec:27:fc:d2:
ae:79:7e:c7:dc:d9:b4:33:22:96:a3:6a:da:9a:46:ea:c7:b1:
28:08:43:94:ee:3b:e3:c8:5e:b2:73:f0:dd:fd:f0:c2:3a:f0:
13:4d:e6:84:14:78:f9:15:6a:ca:2e:21:f6:7a:ba:29:68:61:
ac:2a:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:27 2024 by rpki-client on console-ams.rpki-client.org