Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ge0rL519YV6DIO7OHQtZFiU_Amo.roa
File: ge0rL519YV6DIO7OHQtZFiU_Amo.roa (raw, json)
Hash identifier: UC2eOvxqJOZkK8IFqpLf76mLm61NMExYNyf3Wtb7/3w=
Subject key identifier: 81:ED:2B:2F:9D:7D:61:5E:83:20:EE:CE:1D:0B:59:16:25:3F:02:6A
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 018CC4249E3B58C8C8C7A510F26BE47AD54D
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ge0rL519YV6DIO7OHQtZFiU_Amo.roa
Signing time: Mon 01 Jan 2024 08:29:43 +0000
ROA not before: Mon 01 Jan 2024 08:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1273
IP address blocks: 5.28.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:9e:3b:58:c8:c8:c7:a5:10:f2:6b:e4:7a:d5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 08:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81ed2b2f9d7d615e8320eece1d0b5916253f026a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dd:cf:31:03:d4:06:53:c5:a8:22:fc:36:0d:
ea:28:d0:05:98:6f:c5:42:e6:10:99:a5:0a:e2:bb:
a6:5d:28:04:c4:bd:61:18:25:0f:67:de:3a:26:ac:
5b:78:06:82:05:62:29:a0:68:80:07:99:2b:aa:c4:
0f:c3:df:e2:73:d4:44:14:79:a5:e7:38:69:98:36:
05:49:e1:49:74:7e:76:95:1f:a5:0c:24:22:f6:f0:
23:d8:dd:2d:9f:c2:98:75:34:5c:ff:3f:ab:13:98:
9f:5c:e9:33:89:d9:b5:11:86:9c:f0:30:48:e6:6a:
8f:4f:f9:25:62:36:52:2f:b6:2e:10:2c:c0:fb:98:
97:a8:93:de:8b:3d:84:6f:cc:cc:23:57:6c:2a:8b:
f0:ef:b0:19:bb:16:e7:b5:48:c8:a8:dd:50:18:f1:
7e:99:71:09:62:d9:bb:ab:0a:0c:77:a9:45:ca:86:
40:a4:49:dc:4c:23:68:8d:60:2e:42:e0:d1:15:8c:
42:e3:31:9f:b6:82:78:43:72:c2:1d:46:29:12:66:
45:30:42:8b:99:14:eb:33:17:50:3a:62:7b:b4:9b:
d6:c3:4f:fe:b0:ef:77:22:3a:d7:8e:08:21:0a:c9:
c1:32:ce:0b:83:7b:8a:62:d0:94:67:84:9c:26:0a:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:ED:2B:2F:9D:7D:61:5E:83:20:EE:CE:1D:0B:59:16:25:3F:02:6A
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/ge0rL519YV6DIO7OHQtZFiU_Amo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.192.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:60:59:d3:72:f0:8c:4c:0d:81:c1:8a:6c:02:8d:ae:4c:ca:
1f:73:c4:ce:5d:af:e5:89:02:2d:61:69:4f:79:a3:bf:63:19:
f7:4b:c8:32:c0:b3:90:7a:50:90:22:b4:0f:7d:42:a9:ff:eb:
55:10:7b:97:b0:8f:e4:f0:11:2e:19:ff:49:e7:8d:f5:fd:9e:
56:8e:2c:f3:b7:ca:f3:f8:2a:98:fe:1c:08:e4:e7:25:5b:00:
82:12:13:3a:2a:86:be:83:2f:b9:42:65:05:b6:f9:d8:e8:b3:
15:ae:03:44:1e:c2:ed:9e:11:3a:ab:82:f9:2d:a8:22:63:4b:
1f:ce:b9:64:62:92:59:bc:3d:9a:46:e9:8c:a1:21:58:c5:2a:
d8:98:d7:a4:26:6d:21:e3:3e:c6:69:fc:26:aa:34:ba:0d:36:
f7:62:b5:c9:14:44:0a:e5:97:20:a3:54:9b:d1:94:ba:68:6f:
36:53:1c:35:ff:d3:1d:80:29:dc:35:68:09:e4:db:90:87:bd:
4e:c5:97:a3:5f:3c:18:81:7e:ff:58:1f:0a:ec:39:4a:87:75:
97:cd:60:f9:57:a2:0a:00:ee:d4:d6:03:45:a9:56:a8:5c:5f:
f0:a7:bf:dc:67:b7:5e:95:ad:dd:61:16:7e:cc:f4:eb:e4:dd:
0e:24:e6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:52:56 2024 by rpki-client on console-ams.rpki-client.org