Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/8cBUcb058whSz6Z0b8Vv-XN4xiY.roa
File: 8cBUcb058whSz6Z0b8Vv-XN4xiY.roa (raw, json)
Hash identifier: DH0c3wxK6CoTrLwf5jYc0S7Q7SibJLocuBjcOOfkadI=
Subject key identifier: F1:C0:54:71:BD:39:F3:08:52:CF:A6:74:6F:C5:6F:F9:73:78:C6:26
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019001DC51F7D4273FFED0B335203F949AB0
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/8cBUcb058whSz6Z0b8Vv-XN4xiY.roa
Signing time: Mon 10 Jun 2024 11:15:34 +0000
ROA not before: Mon 10 Jun 2024 11:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 5.144.179.0/24 maxlen: 24
5.144.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:dc:51:f7:d4:27:3f:fe:d0:b3:35:20:3f:94:9a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jun 10 11:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1c05471bd39f30852cfa6746fc56ff97378c626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:c6:a3:46:5f:8c:1f:74:38:7c:c1:7f:27:
d9:56:e7:06:db:17:39:3a:93:45:92:0c:35:9b:44:
71:7f:e0:fb:9a:d6:f1:25:ed:b6:20:41:88:96:df:
f7:cf:61:2b:83:84:4c:bf:4a:97:b5:82:fb:fd:f0:
c3:84:2c:9d:a3:f4:3a:8d:c5:29:e3:5c:71:bc:36:
f9:37:83:07:67:db:b1:37:03:f2:a9:4d:46:b1:8a:
27:af:ab:7a:76:1b:67:e3:3a:3e:d6:f7:8d:06:48:
51:a8:b5:09:5d:e4:aa:e6:d4:40:b8:99:7c:93:fe:
13:00:22:ad:7f:52:25:a1:73:35:fe:c7:98:a4:e8:
65:32:f7:67:b5:65:a9:ef:7f:bb:11:d9:09:d3:8c:
6d:92:ba:53:cc:28:90:b4:a9:bd:57:1a:a9:2c:9c:
38:bb:30:e5:76:8f:30:68:20:ba:a1:4e:05:6d:b1:
66:b6:42:e7:18:21:88:b4:a4:ce:db:de:7e:b9:8f:
0e:45:36:c9:de:b8:14:7b:99:e6:41:2a:93:bf:5d:
d1:96:52:36:7c:2c:34:7d:d7:df:79:42:3c:3d:41:
7c:53:87:55:f9:77:70:fd:ad:1e:dc:6e:37:c8:e0:
75:87:fe:a1:25:ca:f0:23:f6:88:12:ad:df:f0:c5:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C0:54:71:BD:39:F3:08:52:CF:A6:74:6F:C5:6F:F9:73:78:C6:26
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/8cBUcb058whSz6Z0b8Vv-XN4xiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.179.0/24
5.144.181.0/24
Signature Algorithm: sha256WithRSAEncryption
19:35:c9:93:67:5b:b4:2b:3c:2b:1b:94:dd:6f:9b:04:a7:c6:
90:e8:b0:36:56:19:54:3d:2f:bd:b8:00:8f:c6:b4:b0:7e:18:
1e:62:96:8b:dc:7d:9a:fb:6b:b6:f4:26:4a:9f:b6:71:85:fe:
8f:ba:45:17:e0:23:43:03:cb:d7:7a:e2:be:ca:ce:a9:65:c9:
8d:78:f1:6d:98:fc:d1:3a:77:e8:1e:a7:4e:91:54:6c:ff:0e:
6b:bb:71:cc:b5:43:19:d2:47:0a:bf:21:56:e3:42:f0:73:35:
b3:79:49:88:68:11:47:b1:e0:7b:09:e8:ca:d1:fe:26:89:5f:
97:42:89:29:15:2c:7d:83:a2:74:64:a9:4d:4b:91:04:38:c9:
f6:ac:31:35:2b:03:76:9c:e8:9b:6b:c6:2b:b9:e4:31:c4:d5:
46:d0:96:e1:99:ad:3c:8d:f4:c0:2b:26:5d:4e:9c:0c:4f:b7:
0e:fe:e5:6d:55:85:d5:97:51:9e:c7:ba:97:af:bf:42:21:1d:
09:7a:a0:41:52:3c:75:b7:71:42:f9:ac:64:5b:9f:75:83:fc:
8a:2a:f5:9d:08:66:a6:10:5a:88:ba:c7:e6:ac:8c:49:2e:c7:
9a:35:82:7a:66:98:ca:b2:79:05:ee:97:b5:2b:cf:d9:a7:1f:
bd:94:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:36:02 2024 by rpki-client on console-ams.rpki-client.org