Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/odaBHyBYIjVzofNk02iZL038CYM.roa
File: odaBHyBYIjVzofNk02iZL038CYM.roa (raw, json)
Hash identifier: hzxwdPwarJ8Nk1dLUlnTZrC/2z8ej3gvFbUv5GXoFfc=
Subject key identifier: A1:D6:81:1F:20:58:22:35:73:A1:F3:64:D3:68:99:2F:4D:FC:09:83
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018FBB51AB1672BD19ABE93674C80303D670
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/odaBHyBYIjVzofNk02iZL038CYM.roa
Signing time: Mon 27 May 2024 18:30:42 +0000
ROA not before: Mon 27 May 2024 18:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 5.181.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bb:51:ab:16:72:bd:19:ab:e9:36:74:c8:03:03:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 27 18:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1d6811f2058223573a1f364d368992f4dfc0983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:3c:7e:ca:40:94:bc:6b:27:93:cb:2e:3d:
7a:a9:24:8e:d7:e9:79:04:e9:2b:87:da:67:11:19:
49:a2:5e:24:a0:ca:dc:d1:18:80:0a:7a:1d:94:8f:
f3:da:b4:90:72:4c:fb:7e:9c:16:1a:4b:21:7b:a7:
e8:4b:b8:49:36:d5:84:90:e8:89:e9:17:dc:cc:0b:
bc:ad:81:38:07:1e:ca:c9:fe:38:f2:54:d9:02:78:
31:38:ad:8e:c8:25:33:0c:29:eb:a5:68:fc:59:57:
c4:e1:6d:d0:fe:69:c5:11:86:32:32:d4:64:c5:01:
a4:57:7a:9d:8e:44:f8:27:b3:e3:07:e0:13:e4:68:
00:3d:2b:ba:99:28:19:49:e5:a7:92:32:4c:19:08:
e8:48:ca:aa:ae:c3:1f:1c:ca:5d:b1:e9:67:03:4a:
4c:03:f4:da:9c:ad:a3:c4:13:f5:6d:eb:a8:57:ec:
08:10:fa:19:f9:b2:5b:69:16:64:76:ea:8f:36:c7:
a3:5b:a4:94:c4:cd:da:5c:1c:8e:c1:e1:95:db:81:
d8:63:91:18:90:d7:4c:c1:d9:0f:82:66:a4:69:90:
f7:23:e8:2b:e6:1c:1f:1b:9a:7f:f3:3d:86:fe:c2:
03:de:e1:58:28:c3:b5:59:3a:f0:2b:84:0d:e8:b7:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D6:81:1F:20:58:22:35:73:A1:F3:64:D3:68:99:2F:4D:FC:09:83
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/odaBHyBYIjVzofNk02iZL038CYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e3:17:72:2d:f8:74:a4:f3:35:9c:60:d3:e1:a2:0e:21:f5:
4f:dd:e7:3d:ad:42:98:a8:7f:32:d3:fb:49:8e:7f:83:5e:1c:
63:91:45:53:d9:b1:bc:8c:be:43:49:f7:9d:eb:8b:27:5b:21:
e6:bc:cf:69:27:41:29:ba:f2:21:0b:08:57:4d:a3:66:82:7b:
a5:d2:86:7b:e6:63:26:de:64:1d:78:0e:f6:38:d6:87:09:83:
a9:2b:9b:35:64:fb:0f:19:ba:87:ba:a4:31:04:b1:08:25:b0:
8b:36:0b:b3:9c:b0:25:96:51:60:f5:37:ac:f3:42:e8:a8:f4:
81:8a:b2:c9:3c:11:e2:f2:66:29:76:57:d5:5d:53:dd:e3:3c:
99:10:db:9f:63:20:9b:13:ce:ad:2a:b5:b2:07:43:79:34:8f:
33:74:47:f2:56:e1:b9:7b:37:91:80:e4:59:c4:99:d8:be:b5:
cd:b1:57:89:1c:8c:9d:e7:2a:21:46:ed:a3:97:60:b1:94:c6:
1c:c1:14:45:2c:b4:c6:51:5b:88:21:92:b9:4f:33:fd:42:b3:
bb:b4:0a:3f:0b:ca:42:e8:a0:22:4e:ea:a1:94:4a:a5:e1:8b:
84:c9:30:f0:40:d8:f1:e7:f5:b6:9c:de:61:71:7e:ad:fa:cd:
b5:b3:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 03:22:44 2024 by rpki-client on console-fra.rpki-client.org