Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/X5x6LQoiVJsm2942CuElvUzv26E.roa
File: X5x6LQoiVJsm2942CuElvUzv26E.roa (raw, json)
Hash identifier: NXT43IUCIzCmvlKwmabHnV6t60O90VNmmt7Ottho9nc=
Subject key identifier: 5F:9C:7A:2D:0A:22:54:9B:26:DB:DE:36:0A:E1:25:BD:4C:EF:DB:A1
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 018CC94D66C9A766F104859502FE98DDF21D
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/X5x6LQoiVJsm2942CuElvUzv26E.roa
Signing time: Tue 02 Jan 2024 08:32:22 +0000
ROA not before: Tue 02 Jan 2024 08:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207691
IP address blocks: 147.78.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:66:c9:a7:66:f1:04:85:95:02:fe:98:dd:f2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Jan 2 08:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f9c7a2d0a22549b26dbde360ae125bd4cefdba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:9e:d5:70:4b:3c:37:f4:3f:99:15:24:78:
d5:2b:56:7e:3d:f5:e4:90:5a:41:d3:67:d0:e8:9f:
09:d6:60:c7:cc:f6:52:54:ab:f5:93:11:02:0e:f5:
e2:86:93:ea:e5:9c:e6:b4:1c:71:a1:34:55:0f:1d:
f8:c0:82:4a:11:34:11:b6:64:dc:13:d2:c5:f9:3c:
4f:be:9b:55:95:63:40:26:91:2f:35:60:c5:74:14:
03:65:da:39:cb:fe:22:90:37:d2:21:55:53:0f:ce:
19:e9:f0:4d:4f:87:ee:23:93:40:4d:48:0d:28:51:
1d:60:d6:9f:02:a2:8d:d2:aa:60:21:fe:11:32:77:
b3:a6:2e:0b:d4:e2:63:01:f9:92:44:50:cf:82:6f:
76:a6:79:2e:29:d5:75:96:14:a1:19:51:c2:d1:64:
41:f8:5a:1f:aa:be:2d:5d:ca:1f:90:f5:53:14:f1:
a9:df:b5:db:df:4f:13:30:a8:24:40:ee:ea:9d:20:
55:30:84:bb:19:a9:cc:b2:a4:b1:a3:7e:90:ba:9a:
e6:07:74:9f:5f:f8:92:0b:da:21:f7:ca:d6:06:7b:
b3:45:bc:12:d5:77:46:11:0c:da:e7:be:88:b5:2a:
38:7b:42:53:e8:9a:92:00:a8:bd:52:8e:19:26:52:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:7A:2D:0A:22:54:9B:26:DB:DE:36:0A:E1:25:BD:4C:EF:DB:A1
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/X5x6LQoiVJsm2942CuElvUzv26E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.142.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4b:80:c4:37:23:38:d5:0c:80:73:bf:b9:90:5e:78:81:74:
25:4a:63:5a:11:ca:21:95:b7:3b:aa:1f:df:ba:0c:43:ab:88:
be:21:c5:33:4e:e5:d4:ed:f4:19:3b:de:9e:8e:e1:d0:73:03:
7a:ca:3e:96:70:97:54:e6:42:da:75:4a:87:90:41:65:a4:80:
91:6d:c7:11:37:f6:6e:8e:76:73:e2:94:b2:5b:49:b1:bb:88:
e6:9f:66:d5:2e:18:f9:5e:bd:c7:c5:5f:73:32:c9:56:e2:4f:
22:79:5f:63:50:ec:09:56:ac:0b:87:c7:f2:bd:4f:71:f0:55:
0a:3e:85:30:00:07:7d:f5:fa:21:32:13:b9:ee:6a:1c:2c:d0:
86:60:4b:5d:48:ed:6d:cf:60:ee:67:e5:99:ad:a0:03:f1:01:
9e:56:03:a3:cb:4d:9e:cf:fe:0e:26:9e:3b:a0:e9:8f:79:84:
eb:f9:ea:a5:a4:1a:86:eb:68:05:45:92:ce:e9:c5:a3:8c:15:
8e:89:97:2d:f3:eb:fd:a8:7c:c7:88:68:af:b2:9b:0d:e8:f7:
1e:15:90:f1:c3:b2:2b:a0:db:d7:ad:0f:09:66:d3:37:06:08:
32:b0:7e:1d:29:b3:9f:87:1e:64:c7:df:d3:dc:a7:91:81:62:
aa:b0:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:02:30 2024 by rpki-client on console-ams.rpki-client.org