Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zWKn485TeXLS9imZlkaIqUr2oM8.roa
File: zWKn485TeXLS9imZlkaIqUr2oM8.roa (raw, json)
Hash identifier: 0hvj1AmRVI4eYl1yxy6hI+2ffZ4X/g2lmEfw3JVsGSo=
Subject key identifier: CD:62:A7:E3:CE:53:79:72:D2:F6:29:99:96:46:88:A9:4A:F6:A0:CF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01936037CEFDCF004F3591CD37A699586941
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zWKn485TeXLS9imZlkaIqUr2oM8.roa
Signing time: Sun 24 Nov 2024 22:08:10 +0000
ROA not before: Sun 24 Nov 2024 22:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 163.5.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:37:ce:fd:cf:00:4f:35:91:cd:37:a6:99:58:69:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 24 22:08:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd62a7e3ce537972d2f62999964688a94af6a0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:d0:30:31:2c:90:13:a5:e7:b2:2c:23:04:
4e:c9:3d:b4:25:fc:f0:01:2e:b4:5d:4d:c1:07:aa:
56:84:e8:f2:3d:4a:41:bb:6a:e4:f1:ad:34:d4:94:
0a:61:8f:c3:63:25:2b:f0:4a:7a:d7:45:00:ed:5c:
14:88:d0:fe:93:a9:e7:b4:d3:c5:52:3d:8d:2a:a7:
cc:17:5f:48:0e:0b:e3:e7:13:dd:ae:72:38:79:61:
c6:e5:45:60:41:b6:e2:5a:6a:c7:9d:45:a5:25:45:
56:94:57:3d:6e:99:eb:26:3e:84:68:4b:5c:44:a7:
db:fd:28:78:f9:2b:90:b6:61:e6:c6:18:10:c4:7c:
0e:d7:5c:53:5f:3a:d1:b6:5a:59:01:2e:a7:b6:ee:
0a:e7:71:7e:dc:b3:bc:13:7e:2d:5c:71:bd:78:1a:
c6:ff:11:2a:3d:01:6a:93:e3:e8:48:5a:ec:00:3a:
33:a2:94:e4:7c:ca:47:5d:10:3a:d5:9e:63:cc:0b:
57:56:df:b1:93:e2:90:13:07:5f:74:92:83:70:18:
f5:9b:a1:9c:b0:c3:34:9b:d9:8d:0c:0d:7b:a3:2e:
ed:63:16:4c:0a:6f:b3:4a:81:a0:20:53:d8:7f:d3:
9f:c0:a7:57:09:13:05:ab:8a:85:0f:14:7c:2c:41:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:A7:E3:CE:53:79:72:D2:F6:29:99:96:46:88:A9:4A:F6:A0:CF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zWKn485TeXLS9imZlkaIqUr2oM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0f:e8:bf:52:f2:ba:db:cf:89:83:22:ba:28:f6:1c:02:d4:
29:66:2b:f8:d2:7f:88:fe:94:52:06:1e:72:84:2b:30:d4:96:
fa:40:56:ef:f2:ee:02:1e:26:5d:00:1b:f9:0a:ee:ee:2b:ab:
47:ae:9c:4c:8b:41:30:d2:00:dc:92:85:1d:2b:69:15:b6:88:
61:4d:e6:9b:fb:06:21:78:d1:1c:48:b4:28:05:17:9c:62:d5:
87:57:7a:be:55:7b:2b:fd:9f:53:9d:fe:ee:ab:25:02:25:74:
a3:35:32:af:ae:04:02:8c:af:86:39:92:d1:60:9a:23:89:2e:
74:8a:99:9a:1a:38:c5:96:50:5a:4c:c1:c8:c6:cd:09:44:27:
e6:60:d5:cb:68:81:7b:d9:3c:d4:53:68:8c:41:a9:31:e2:55:
22:2d:85:e7:2a:5b:b3:24:8a:8f:e4:33:6a:0b:59:92:b5:15:
c6:a8:76:69:ca:8c:03:ee:85:eb:6e:d8:d8:8f:8e:e6:76:c4:
b9:fe:33:aa:ab:60:e6:2d:f5:99:45:b9:03:bb:e1:14:62:59:
5a:cb:4a:82:47:92:c3:fd:3f:d8:c3:5c:ee:ef:99:45:7c:62:
81:0d:81:4b:39:06:40:93:a2:0d:e2:e2:24:68:39:f3:71:88:
c5:9a:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:23:57 2024 by rpki-client on console-ams.rpki-client.org