Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/GrAs0jHZYmNkhSC27D9hnWiHTlk.roa
File: GrAs0jHZYmNkhSC27D9hnWiHTlk.roa (raw, json)
Hash identifier: WoRuJCCsJUMlVGFaZcCH/a3mFxuwgpvce+xLjVOKEGg=
Subject key identifier: 1A:B0:2C:D2:31:D9:62:63:64:85:20:B6:EC:3F:61:9D:68:87:4E:59
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 018CC79439E4864CE5FCE9455D6AD75E5634
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/GrAs0jHZYmNkhSC27D9hnWiHTlk.roa
Signing time: Tue 02 Jan 2024 00:30:29 +0000
ROA not before: Tue 02 Jan 2024 00:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16397
IP address blocks: 5.62.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:39:e4:86:4c:e5:fc:e9:45:5d:6a:d7:5e:56:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 2 00:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ab02cd231d96263648520b6ec3f619d68874e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:5b:8e:9c:b4:9d:07:1e:5b:f9:5d:bd:02:
fd:f4:54:71:97:93:9a:55:37:78:b9:5f:78:a2:fc:
d0:78:5e:48:f8:a5:f6:3b:e1:b1:e9:c5:c4:8d:df:
f5:b5:7c:3b:da:03:34:41:2d:05:c7:b7:df:0f:39:
0f:8a:1c:0c:e7:f8:5c:0a:c0:50:e7:18:d5:87:fe:
9e:ad:c3:1a:0c:f4:60:af:4c:61:01:03:e6:11:42:
b6:05:bc:cf:5c:93:a1:8a:e4:36:b1:de:40:b7:94:
dd:44:48:a2:02:dc:26:a4:14:c6:4d:d1:4f:44:a9:
d5:bc:e4:16:c3:07:05:c4:5b:ae:75:4d:ad:89:81:
4b:8f:b6:9b:a7:2c:91:ab:cc:c3:bc:d3:cb:04:8e:
d7:10:44:64:77:20:31:6c:34:5b:b1:21:6b:45:c7:
44:ed:20:ee:aa:34:07:d9:b0:de:17:39:73:f3:cb:
41:e5:b3:37:d6:16:6b:46:31:f4:63:ba:11:67:1d:
ad:3c:5e:c9:ab:76:2e:be:dc:85:25:23:e2:08:5f:
1c:a0:77:e5:f8:68:77:91:4f:94:9a:03:7b:f9:4a:
28:b5:a1:91:da:77:b8:f2:a7:87:09:1c:d9:37:fe:
3a:00:e0:4e:3c:bd:d9:bd:2e:f7:08:fd:f1:dc:10:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B0:2C:D2:31:D9:62:63:64:85:20:B6:EC:3F:61:9D:68:87:4E:59
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/GrAs0jHZYmNkhSC27D9hnWiHTlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.51.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d3:15:e3:bf:2f:74:24:fe:11:34:64:79:35:c3:2e:12:c6:
05:d2:b3:2f:b3:1a:1d:5b:9f:ad:28:e2:23:ee:ec:8c:ab:a9:
f5:c0:a8:44:3f:fd:65:cb:f1:7a:1e:7e:27:36:a7:40:49:15:
4d:77:37:8c:b2:7b:36:0c:2c:01:de:f6:ce:7d:eb:e8:55:12:
55:fa:fd:58:a2:ab:f0:ee:76:ba:3a:28:88:3a:6b:ab:ab:57:
24:c8:e1:b9:91:35:fb:10:f7:72:75:91:0e:2a:24:69:b7:3a:
99:97:37:83:a0:77:26:98:c3:83:fb:2e:cd:1a:a0:84:59:17:
88:0a:0c:ae:b1:ee:0e:5d:79:53:39:84:91:d7:74:4f:b0:c6:
6c:e0:6b:b6:1a:28:f5:46:91:5e:31:0a:ca:b1:0d:18:4e:7f:
ab:6a:8f:63:0b:ec:f4:19:ee:8e:9e:6b:0c:8f:e8:cf:59:58:
6c:11:2f:b2:5a:8b:8b:18:7b:45:d1:77:f6:54:56:2f:b0:2c:
f3:a2:98:c4:da:06:b9:c1:4b:84:5b:a2:29:da:40:03:28:7c:
51:7c:82:b7:cc:cb:b0:1e:d2:b2:9e:ce:7e:ac:3a:87:1b:91:
3c:be:c7:12:23:6d:90:f4:9e:8f:65:0e:cf:b6:38:f7:48:e1:
3b:76:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:23:08 2024 by rpki-client on console-ams.rpki-client.org