Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/5MCwef8fFo9ZopUTb_ionCRUlgA.roa
File: 5MCwef8fFo9ZopUTb_ionCRUlgA.roa (raw, json)
Hash identifier: pc4aHeWZmHMaCGtjao02AE/ez3vIn4krV9CvgmbZzTw=
Subject key identifier: E4:C0:B0:79:FF:1F:16:8F:59:A2:95:13:6F:F8:A8:9C:24:54:96:00
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 018FF2F8E07CC786424B8950ABAD0D028899
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/5MCwef8fFo9ZopUTb_ionCRUlgA.roa
Signing time: Fri 07 Jun 2024 13:52:27 +0000
ROA not before: Fri 07 Jun 2024 13:52:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 94.131.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:f8:e0:7c:c7:86:42:4b:89:50:ab:ad:0d:02:88:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Jun 7 13:52:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4c0b079ff1f168f59a295136ff8a89c24549600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:ae:ba:1f:f4:4d:3b:a7:6b:07:7d:fa:31:
76:54:1e:b1:dc:fd:57:64:db:9a:8d:5f:91:ca:67:
23:75:f3:01:74:24:6c:4d:df:0f:19:e2:fe:08:30:
65:59:0f:94:02:96:f2:99:a6:a8:b3:7e:42:50:58:
0f:9e:55:37:9d:6b:76:64:dd:61:6c:74:49:96:94:
9b:90:59:6f:4f:b2:bf:e2:78:af:8f:2e:59:a1:4d:
2e:6b:de:4e:4a:fe:d5:62:c6:85:a9:d9:30:ba:1e:
13:a8:e7:50:b2:e3:42:b4:6c:d3:9a:03:05:af:06:
2a:83:1e:0e:f3:e1:20:c0:79:48:32:f3:3d:ed:22:
ee:7f:a4:b1:01:ad:b4:89:af:7d:63:69:c1:bb:21:
2c:bb:9c:37:1c:ef:ac:05:0d:e0:b6:a9:d3:1f:b5:
a9:12:7c:ee:37:60:0b:39:5c:84:e6:a1:3f:64:1a:
9b:8f:8c:51:ef:69:90:8b:1f:5c:30:48:67:00:b3:
3d:3b:f6:47:69:b0:90:6e:b6:52:88:5c:3e:42:ae:
b0:e5:bc:c8:87:ff:54:19:bc:71:d9:2b:d3:a8:d5:
13:26:48:80:89:e8:24:9e:69:20:56:0a:ae:28:80:
9b:7b:3e:3b:f7:f6:04:0a:1f:d7:61:59:3f:38:64:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C0:B0:79:FF:1F:16:8F:59:A2:95:13:6F:F8:A8:9C:24:54:96:00
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/5MCwef8fFo9ZopUTb_ionCRUlgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c2:2b:71:4e:90:35:86:1f:9e:a8:7c:d8:e1:dd:a3:47:fa:
cc:f7:f0:6b:4f:18:22:6b:49:f0:0c:43:16:d0:54:5b:88:43:
4a:cf:94:40:66:b9:d8:04:46:a7:84:39:4f:ef:38:d7:12:58:
12:39:71:d0:77:8b:d8:0e:2d:63:22:62:08:18:18:5b:c3:ef:
fa:4c:5b:d7:8a:b3:7b:ec:f9:bf:de:71:2a:b1:52:8a:73:0f:
2e:2f:fe:fb:62:60:a3:9a:2e:2f:05:40:dc:e9:05:d6:37:fc:
67:19:d0:45:77:5f:bd:92:cf:87:02:e8:4d:bd:58:fb:57:39:
89:29:f9:71:1b:3c:ff:e2:b1:7b:1d:4e:97:80:16:38:28:6f:
2f:66:dc:8f:66:d7:bc:59:4d:01:9b:be:dd:30:57:42:a6:9b:
1b:74:3a:ef:c4:c4:f7:15:e4:ca:ef:c2:42:6b:01:b9:e3:53:
be:e4:c7:1e:4d:ef:ec:0b:5b:62:94:2c:2d:a2:3e:9e:ce:2b:
2f:ca:e0:17:13:0c:ff:c1:23:17:81:be:a0:7f:a8:c1:fe:a6:
cc:39:1b:ed:72:16:f4:25:98:1b:c8:33:fe:b4:e3:a4:a0:d7:
6e:80:50:96:8e:a9:e8:bb:f0:7c:bf:bb:46:2a:9f:b0:ea:c9:
8a:05:b6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:26:00 2024 by rpki-client on console-fra.rpki-client.org