Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/wf5z3kh3kIAqkUiviXQcwsIt5-o.roa
File: wf5z3kh3kIAqkUiviXQcwsIt5-o.roa (raw, json)
Hash identifier: VVnOMVsXnWOrSoSQOEZDiI+wZEoYr7OxbjVhQ+6Srss=
Subject key identifier: C1:FE:73:DE:48:77:90:80:2A:91:48:AF:89:74:1C:C2:C2:2D:E7:EA
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC5003F88D98839B4CCA9FAAE7C5EC9D3
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/wf5z3kh3kIAqkUiviXQcwsIt5-o.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61424
IP address blocks: 5.252.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3f:88:d9:88:39:b4:cc:a9:fa:ae:7c:5e:c9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1fe73de487790802a9148af89741cc2c22de7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:73:fe:e3:a5:82:76:9a:44:a0:e2:4b:83:
07:78:0c:09:59:86:6e:9a:77:85:fe:7c:af:6e:b9:
96:a4:e4:c6:06:fb:38:e4:8c:db:aa:dc:1a:0f:0a:
bc:f9:d4:2e:30:1d:9b:61:97:c2:50:d7:a3:f6:1c:
12:cf:2d:67:4f:a2:ac:db:c0:a6:7b:7f:7f:a5:13:
a7:f1:76:58:e1:d7:ed:10:84:6c:d0:25:d2:09:21:
02:45:88:f1:18:d6:7c:69:f2:d3:f8:60:74:75:10:
75:86:57:73:3c:43:ab:df:81:7d:16:9c:17:d9:36:
d5:14:be:bf:46:d3:47:a8:2a:96:ec:18:15:0f:55:
56:e6:c1:3d:d3:16:cd:79:ae:67:f5:6e:ff:a3:8d:
c5:9f:fe:60:49:85:e0:7c:b3:bd:e8:b5:8d:d3:e3:
84:83:21:c2:2b:06:6f:fb:c0:06:81:64:a7:7c:7e:
1e:75:c2:db:e7:7d:1f:7e:77:cd:0a:0f:cf:48:67:
dd:d5:9f:37:e5:5b:0e:f3:8e:ae:d0:d8:8f:ce:8a:
4a:37:88:2e:04:45:b8:94:b9:eb:11:5e:5f:12:7d:
a0:a1:af:9b:67:a7:b9:c4:99:09:90:d6:8f:f1:c2:
be:d7:3b:f0:0a:c4:51:a8:75:5c:70:6c:51:92:06:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:73:DE:48:77:90:80:2A:91:48:AF:89:74:1C:C2:C2:2D:E7:EA
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/wf5z3kh3kIAqkUiviXQcwsIt5-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:01:ec:4e:e1:33:f5:75:87:11:18:5e:42:f1:c3:1a:d6:36:
06:13:88:da:72:3b:c9:c4:61:90:fd:c8:3c:31:0d:90:10:ea:
24:62:39:1d:5e:4e:84:55:e8:24:49:06:d1:18:b8:0a:94:97:
0d:28:4f:2e:55:4d:1f:08:63:fc:66:e8:e7:eb:84:10:7b:02:
02:19:12:c5:b6:b7:0a:d3:ba:e2:7a:6d:ab:be:cc:21:8e:a6:
45:4e:44:c3:a5:c1:85:8a:62:c9:54:39:b1:2e:48:ba:cd:11:
43:1f:d5:dd:be:03:42:63:7f:7d:b8:d1:17:1e:16:90:cc:e5:
80:f2:0f:9a:95:71:ad:cb:72:71:33:f7:da:d0:06:8c:65:4e:
8a:be:60:37:70:bc:e2:28:38:4e:07:1b:37:65:58:e5:c5:5c:
08:39:74:a3:61:17:6a:62:b5:08:a3:66:5f:15:84:65:04:f1:
1f:a5:46:fa:eb:27:da:fa:6a:f2:96:da:c4:80:6c:07:7b:0d:
24:6d:d9:b7:33:3b:23:4d:fc:f5:12:46:d4:d6:b0:f2:be:7b:
71:30:91:08:91:a4:d5:ac:28:04:60:21:20:0a:1d:f4:bc:cf:
31:c2:36:13:ec:80:23:10:bd:eb:d7:5e:7b:86:e9:ed:e3:b1:
b2:5c:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:49:52 2024 by rpki-client on console-fra.rpki-client.org