Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/yI7QrrhOgxX4FX4iPsRqQI5158I.roa
File: yI7QrrhOgxX4FX4iPsRqQI5158I.roa (raw, json)
Hash identifier: 18Y942lJXpGwAeebQYwt1OM9YFUjwp5sZKFnssjFvPM=
Subject key identifier: C8:8E:D0:AE:B8:4E:83:15:F8:15:7E:22:3E:C4:6A:40:8E:75:E7:C2
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 01915ABB556762F4E96AAC870B73A85016FF
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/yI7QrrhOgxX4FX4iPsRqQI5158I.roa
Signing time: Fri 16 Aug 2024 10:28:32 +0000
ROA not before: Fri 16 Aug 2024 10:28:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 5.180.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:bb:55:67:62:f4:e9:6a:ac:87:0b:73:a8:50:16:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Aug 16 10:28:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88ed0aeb84e8315f8157e223ec46a408e75e7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f7:da:a3:de:1e:bc:19:ac:b3:93:4a:b6:a3:
6d:88:bb:a8:0a:e2:1f:39:64:a8:19:1a:bc:e3:ee:
f8:6d:ef:c3:7a:31:39:56:9e:9a:96:f6:fc:be:8c:
0d:1a:cd:b7:15:f1:f9:3f:fa:c8:ea:ab:3f:bf:54:
11:70:da:2d:1b:46:22:ad:f9:7c:5a:20:e1:01:bc:
6e:70:0b:d5:16:c7:12:82:db:bf:46:f5:f0:84:dd:
ae:36:87:5c:38:49:7b:bc:1b:39:8b:e6:26:3c:cd:
5e:63:01:41:01:7f:62:89:f7:8f:e5:ee:ba:5d:40:
2e:e7:c5:50:b2:17:4a:ff:11:13:7a:36:2d:2b:77:
1e:99:5b:7c:36:63:3b:e2:d9:71:eb:17:8f:85:72:
c5:cf:c4:75:1b:7a:86:4f:83:8e:7e:9d:a8:72:19:
f9:64:10:a9:7d:e1:a8:c2:cc:94:ef:82:e8:c6:6a:
50:13:4e:50:b5:3d:81:ef:39:f2:4a:96:19:d9:5e:
f0:0a:ef:a2:29:54:ce:7d:f2:eb:83:b1:b7:37:78:
d7:19:f8:52:7d:a3:6b:f8:4c:95:c1:b9:60:42:d5:
3a:7c:39:ca:3f:a7:1a:e6:57:ae:bd:db:3a:a1:9c:
70:dd:0e:cf:63:b9:40:1f:e0:c5:97:22:0f:5a:70:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:D0:AE:B8:4E:83:15:F8:15:7E:22:3E:C4:6A:40:8E:75:E7:C2
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/yI7QrrhOgxX4FX4iPsRqQI5158I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:34:8b:58:4c:92:6e:55:1d:99:7d:92:de:3b:5a:89:bc:7d:
a3:90:fa:81:8b:4c:b1:d9:8c:62:2a:45:22:8b:60:42:97:1e:
4f:c0:25:bb:86:e6:01:3d:2c:61:bf:10:49:31:aa:4c:0b:02:
7f:b7:94:f3:2e:a2:a1:ac:28:2b:57:73:b0:40:2a:9f:1e:6a:
bf:09:ef:0c:90:e5:0e:c7:90:67:88:d1:91:13:8d:05:f5:cf:
3c:ef:08:ec:23:f7:4f:e7:48:3a:c1:fc:27:0e:43:f2:07:b6:
f4:e4:b1:ef:7e:54:e6:a7:ab:a3:9c:e8:d2:7a:75:40:5f:5d:
29:cb:27:bb:14:dc:50:49:36:45:8f:3d:85:57:d6:a1:a5:b5:
88:d0:2d:e1:20:78:77:52:22:ce:53:e0:d4:27:32:d4:62:7e:
cd:3c:31:7f:22:6a:f8:27:d3:d9:d7:fb:9d:fa:0b:b1:9e:68:
86:c9:7e:a1:b7:c7:a1:06:33:b6:e6:b6:cf:1d:25:97:74:06:
ca:ba:68:47:01:be:f2:79:58:b4:25:f6:b0:a0:77:bc:18:ad:
0b:47:65:df:92:a5:19:8d:5e:fc:fb:cf:5b:63:8a:0b:c2:1b:
bb:4e:a7:6d:2f:ea:bc:fb:90:a5:58:fc:ad:89:92:15:60:40:
a2:93:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:10 2024 by rpki-client on console-ams.rpki-client.org