Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/Sddb19as80OYJHL08kHviAt-_qw.roa
File: Sddb19as80OYJHL08kHviAt-_qw.roa (raw, json)
Hash identifier: nVRVRxfPTFy+3TJFu2bcpUs5XGTHxP9CfWS3X4W3aTM=
Subject key identifier: 49:D7:5B:D7:D6:AC:F3:43:98:24:72:F4:F2:41:EF:88:0B:7E:FE:AC
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 018CC794840C92E465AD9F8C164EBF490AE7
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/Sddb19as80OYJHL08kHviAt-_qw.roa
Signing time: Tue 02 Jan 2024 00:30:48 +0000
ROA not before: Tue 02 Jan 2024 00:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60911
IP address blocks: 5.172.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:84:0c:92:e4:65:ad:9f:8c:16:4e:bf:49:0a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 2 00:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49d75bd7d6acf343982472f4f241ef880b7efeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:a6:d3:9b:ba:65:ea:4a:4f:1b:72:41:c3:
a5:77:84:cb:b2:e7:93:03:15:1f:fa:d7:82:48:98:
c3:45:66:d8:27:9a:a8:a0:48:77:00:18:aa:db:30:
e3:c2:75:62:37:91:b1:da:7b:2a:33:c4:3b:6f:fa:
12:35:9c:8e:c0:b4:30:d2:7a:b7:6d:c6:f1:57:3f:
b3:ce:8b:e0:ea:5f:29:e7:56:65:b1:f1:f1:84:61:
51:61:91:53:51:8d:06:10:90:4b:92:51:bd:ff:a5:
ad:d5:cb:66:cd:55:c6:77:31:fd:49:ec:b3:0a:17:
bd:61:5d:ff:c3:f4:c4:50:28:d7:7d:c7:70:6a:e0:
03:45:9f:c8:e5:1c:0f:c6:79:24:98:67:82:a4:a7:
e7:95:08:c3:52:3f:8f:ef:e2:e9:cd:9a:17:93:cf:
a0:14:fc:28:79:0b:23:c1:fe:26:da:4d:c8:8e:0e:
0c:7f:d1:bb:5a:5c:c8:02:26:a8:d7:1b:99:20:48:
fc:28:89:ee:9f:68:4d:63:27:f6:80:75:2f:44:03:
fe:be:fa:85:b5:84:5a:53:94:73:a1:ce:9a:37:ea:
6f:45:2b:82:50:64:f4:f3:43:63:50:88:15:f3:86:
8a:ce:cb:9a:91:24:24:e0:ff:78:e4:34:b6:ab:c3:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D7:5B:D7:D6:AC:F3:43:98:24:72:F4:F2:41:EF:88:0B:7E:FE:AC
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/Sddb19as80OYJHL08kHviAt-_qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.207.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9e:e9:2b:0d:74:cf:98:1e:48:52:37:f9:36:ac:00:aa:6f:
19:3b:69:22:cb:4a:ae:61:11:11:20:1d:92:c2:44:ff:9b:2c:
70:86:6d:f9:d3:0a:f5:6e:60:5c:8f:45:5e:c1:90:77:89:5d:
a7:80:f0:fa:c2:94:29:ae:c9:70:b3:c2:ce:d9:f1:c4:4b:91:
c0:18:13:1e:2f:84:fb:b9:61:40:e9:c1:01:dd:a8:24:2d:66:
1a:15:63:75:a6:41:1e:9e:6d:e5:75:29:5b:6e:68:3e:38:bd:
19:a3:22:e4:70:c3:81:3c:97:20:cc:88:23:eb:bc:9a:d9:7b:
e9:e0:36:16:8b:16:64:93:9a:04:c9:3c:32:da:b3:e8:02:5f:
36:a9:68:0f:20:92:19:51:39:c3:2f:c3:f3:96:7e:4e:bd:85:
32:85:5f:aa:5d:b3:e2:07:81:2a:7f:78:4f:c9:50:74:ef:30:
3a:81:09:ac:4d:8b:4e:fe:ef:9c:d0:14:e4:e8:55:d1:48:ab:
41:13:e0:6c:e7:04:2c:61:cf:ef:a2:d2:57:86:35:90:92:c1:
b6:7e:d6:3c:63:ab:ca:a3:b9:18:75:e9:50:85:6f:84:dc:e5:
f6:ca:1b:95:19:5d:81:0e:84:3a:0e:3e:67:ab:83:b9:7b:72:
88:30:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:14:56 2024 by rpki-client on console-fra.rpki-client.org