Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/551Ds_gAwwKrIfp4mosEsOAsduY.roa
File: 551Ds_gAwwKrIfp4mosEsOAsduY.roa (raw, json)
Hash identifier: Jj0ReYpXhTayHbKSyXAg7cnRuTjEnsCdLCq78XkDGl0=
Subject key identifier: E7:9D:43:B3:F8:00:C3:02:AB:21:FA:78:9A:8B:04:B0:E0:2C:76:E6
Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial: 018CC5DBF4449EB5AEAF6BD7ADB9DBA364BF
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/551Ds_gAwwKrIfp4mosEsOAsduY.roa
Signing time: Mon 01 Jan 2024 16:29:35 +0000
ROA not before: Mon 01 Jan 2024 16:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 188.119.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f4:44:9e:b5:ae:af:6b:d7:ad:b9:db:a3:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Validity
Not Before: Jan 1 16:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e79d43b3f800c302ab21fa789a8b04b0e02c76e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:32:4c:c3:2b:66:af:56:f5:17:5c:6b:66:
ea:cb:a3:8d:f5:cc:f7:ec:a1:3a:e9:e3:c2:7e:b1:
a9:0c:fa:19:37:17:03:92:e1:bd:83:75:95:b2:e4:
c7:2f:50:ec:7e:00:a7:f0:17:d4:b0:e5:59:4e:c7:
c9:5b:32:28:68:01:72:73:27:0d:2b:47:84:7d:d5:
f5:2d:99:b0:55:df:ed:73:c8:b5:ab:e9:d1:a5:93:
b5:76:2c:74:b8:9f:2c:6a:5b:df:0f:ea:aa:ac:b2:
6d:4b:6e:91:ff:b6:60:71:cc:dc:50:55:c7:f9:a7:
f1:d1:62:c7:06:a8:ab:90:13:d5:bc:91:9d:be:af:
b7:5f:7c:e6:ec:03:d0:d6:7b:0d:34:0f:39:c5:9a:
b2:8a:1e:d2:86:9a:d5:9d:86:61:8f:66:3a:ff:7d:
db:50:e7:78:23:f1:c8:2a:c4:3a:5b:6a:9c:a0:4b:
7c:28:ed:67:dc:b8:ec:e0:d3:bd:a8:0c:3d:8e:e9:
59:f9:3c:d8:50:9d:f4:a6:09:bd:66:60:37:92:60:
16:1d:a1:ee:2e:77:67:f0:79:41:7d:2e:1b:bf:b0:
e7:38:3f:3e:27:3f:6d:a5:7b:22:89:14:56:ed:ff:
18:5d:90:c8:80:91:25:17:a8:1e:4e:70:5f:24:a4:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:43:B3:F8:00:C3:02:AB:21:FA:78:9A:8B:04:B0:E0:2C:76:E6
X509v3 Authority Key Identifier:
keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/551Ds_gAwwKrIfp4mosEsOAsduY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.105.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a9:b0:2c:42:22:62:53:58:c7:bc:18:6a:eb:70:dc:d8:d5:
f6:ea:24:47:f7:a7:dc:08:47:e9:d7:cc:8a:65:d3:4f:07:40:
4e:4b:85:32:ea:1e:e1:f7:c7:53:8c:d4:7a:9c:38:26:44:54:
4b:27:cd:e1:80:de:97:12:1e:f3:e6:b1:d8:41:89:b1:c1:6a:
a7:ea:c8:55:1b:d9:2a:d9:a2:a1:dc:02:e2:0b:73:c5:0c:32:
a4:34:b6:da:9d:c4:e0:47:57:76:f8:ec:05:11:99:0c:a9:17:
89:57:55:29:ef:e8:3f:d0:dc:49:fe:16:da:2a:66:68:10:da:
b3:3e:65:cf:95:71:39:48:bf:e8:26:a9:3e:97:1d:27:e5:8e:
58:2a:5b:42:cd:71:25:a3:eb:39:3e:b8:49:88:57:24:84:df:
87:18:a0:7e:d1:89:20:18:5b:30:03:3d:a1:5c:f3:b6:4f:3b:
4e:ec:b3:bc:4e:17:ab:99:18:c2:1d:04:7b:1b:2e:a5:34:56:
00:32:9a:16:22:3e:1e:0b:d9:8b:a7:bc:4b:80:d1:be:0e:b2:
00:1e:6b:98:5b:4f:0f:7f:f6:df:57:fd:d0:86:46:dc:12:8e:
81:92:e3:21:0b:49:2c:ae:2a:a0:c2:1f:5d:08:99:bd:50:77:
71:28:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:46:40 2024 by rpki-client on console-fra.rpki-client.org