Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/5iDZduvEMS40IiV6mi2lcSADVn0.roa
File: 5iDZduvEMS40IiV6mi2lcSADVn0.roa (raw, json)
Hash identifier: WLTSZu3kZybl4noubmKeayaQZgAw2TLfVWg+C2lDupQ=
Subject key identifier: E6:20:D9:76:EB:C4:31:2E:34:22:25:7A:9A:2D:A5:71:20:03:56:7D
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018FA9B85C7F81AD1B193372F305EA5E4B75
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/5iDZduvEMS40IiV6mi2lcSADVn0.roa
Signing time: Fri 24 May 2024 08:29:42 +0000
ROA not before: Fri 24 May 2024 08:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62133
IP address blocks: 85.30.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a9:b8:5c:7f:81:ad:1b:19:33:72:f3:05:ea:5e:4b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: May 24 08:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e620d976ebc4312e3422257a9a2da5712003567d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:f8:94:2d:1e:56:c4:71:72:34:3a:c9:9c:
f3:1c:a5:7d:a3:2f:fa:e0:a8:1e:73:4a:c0:6e:01:
f5:2a:f4:bd:51:86:50:de:44:92:cb:ed:f1:e2:bd:
8a:8b:82:1f:1a:d8:d2:19:22:21:cf:5a:05:10:f1:
64:1a:25:a9:dc:e3:dd:c4:34:d7:c2:80:c1:64:c2:
36:88:fb:57:16:6e:c8:73:d6:28:98:05:83:dd:f6:
63:aa:eb:8c:62:7a:93:94:29:56:8a:8e:4d:39:ba:
fe:f0:21:9c:c7:cd:be:e6:e2:e7:b4:e8:d4:0e:e4:
1f:fa:56:39:ca:ca:96:41:30:54:46:73:c1:b4:b6:
b0:17:1d:35:e2:65:f6:5d:00:18:ea:da:26:92:9a:
15:de:5e:af:37:0e:b8:dd:db:83:ad:75:24:49:e2:
46:97:92:70:35:13:aa:73:25:62:9c:f1:4d:88:2a:
94:0d:12:f2:56:2c:24:3b:00:92:36:c1:ac:ad:56:
00:9c:58:e4:92:be:0f:9a:75:4d:57:91:cc:26:a0:
db:d1:aa:f5:96:60:e1:07:df:cd:39:e2:1d:63:f0:
77:45:e7:a5:16:d1:75:16:64:f1:c9:1f:32:7a:e1:
89:98:11:c6:12:0c:b3:26:58:41:28:31:e7:ce:d4:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:20:D9:76:EB:C4:31:2E:34:22:25:7A:9A:2D:A5:71:20:03:56:7D
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/5iDZduvEMS40IiV6mi2lcSADVn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.30.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:85:0d:0d:eb:c2:81:48:32:61:d9:3e:88:f2:11:3b:6d:08:
50:54:cf:7e:32:8e:6f:68:b4:9b:17:b0:a0:81:8e:f2:2c:80:
95:5d:90:07:ac:d7:63:b0:d7:46:a8:cd:48:74:9c:a9:a6:b0:
95:34:d3:6b:d7:6d:27:f1:25:ca:23:44:8c:7d:21:ef:e5:28:
c5:12:00:fe:84:c8:1b:4f:6f:a9:1f:12:70:ba:7c:45:6c:81:
cc:21:d8:f2:b2:ca:44:83:57:e0:f9:c5:f4:31:61:df:9d:89:
6c:37:7d:8b:b7:a9:2d:5f:b2:d8:8a:46:40:c4:03:94:1b:56:
32:26:45:8d:62:9d:d7:e6:8c:5d:36:db:04:ea:d4:1f:d0:c9:
74:eb:89:6c:33:0c:93:78:f7:42:5c:8b:52:6b:77:99:a1:88:
1c:15:d6:d3:03:21:d7:7d:96:43:45:8e:d9:11:13:e3:f5:a2:
2f:68:28:6b:72:85:cf:b6:0b:e8:f3:80:dd:54:e7:a3:60:28:
07:1a:88:b3:77:a2:6f:d8:6b:df:db:f6:e3:a0:9f:7a:8c:3b:
51:9e:3f:f1:f1:ee:00:15:ec:79:6e:20:7d:c2:9f:08:81:db:
dd:38:b9:d3:a3:b0:68:b0:b1:de:e1:4f:00:f7:59:ac:dc:16:
6b:df:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:50:26 2024 by rpki-client on console-fra.rpki-client.org